Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6119e-d3b0-3c41-958a-8247a6505220.roa
File:                     95e6119e-d3b0-3c41-958a-8247a6505220.roa (raw, json)
Hash identifier:          uW7eXhMiaVAi0CuBccqzc/zF7upMMt7xibyMYkaL3Qo=
Subject key identifier:   7E:49:C6:53:2F:1D:4F:3B:07:64:71:82:8B:E6:4E:D7:F2:EF:32:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424311C4334B3CBABAA77C68
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6119e-d3b0-3c41-958a-8247a6505220.roa
Signing time:             Thu 19 Dec 2024 13:45:22 +0000
ROA not before:           Thu 19 Dec 2024 13:45:22 +0000
ROA not after:            Wed 19 Mar 2025 12:45:22 +0000
asID:                     397193
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:11:c4:33:4b:3c:ba:ba:a7:7c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:22 2024 GMT
            Not After : Mar 19 12:45:22 2025 GMT
        Subject: CN=e13a0ccc-e291-4296-9017-51f81799f073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:0d:a1:fc:ec:40:43:77:77:79:1e:d4:d4:
                    1b:9d:22:22:64:d5:2d:38:20:15:3d:d8:86:fc:16:
                    1c:55:ea:ac:30:40:59:76:1f:29:6f:cd:b2:10:ba:
                    43:28:27:96:61:d1:1a:db:57:f8:89:06:12:a7:84:
                    6f:85:39:59:5a:ff:70:4d:0d:84:72:35:18:c3:0d:
                    9d:42:39:7d:a9:aa:64:2f:65:72:ce:b3:16:f5:d3:
                    b7:fe:d7:a2:4b:71:15:5b:5e:18:ef:33:28:0f:5a:
                    82:a1:fa:0e:be:82:27:f4:d9:3f:27:65:b9:4a:fd:
                    9a:6d:68:9d:a3:53:d2:66:2f:95:14:ec:e3:7b:ed:
                    41:c5:07:31:6b:d6:84:4f:65:25:1a:67:a3:27:e7:
                    02:40:f0:bc:3e:a6:af:9a:fc:6f:25:9b:7a:9f:31:
                    03:d5:4f:55:dd:14:2a:df:0b:01:08:c0:b8:1e:78:
                    55:4c:86:c7:3f:00:dc:09:71:41:5e:f8:3a:25:4f:
                    87:ec:9d:92:fa:f0:13:be:19:21:46:7f:32:95:93:
                    3d:7b:fb:f9:2e:84:5c:cb:fd:43:98:57:fd:7e:49:
                    66:45:ff:9f:f6:ee:ad:fa:7e:68:b7:b5:c3:57:54:
                    f3:78:39:4b:28:33:53:0e:63:d4:c6:70:f6:cf:21:
                    7d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:C6:53:2F:1D:4F:3B:07:64:71:82:8B:E6:4E:D7:F2:EF:32:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6119e-d3b0-3c41-958a-8247a6505220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:dd:5c:c4:8a:5a:90:4d:c9:47:d4:b3:8b:a4:8f:5c:86:
         2a:55:48:31:9e:f1:72:d1:62:5c:bf:02:1b:fc:f8:04:b0:e4:
         dd:e7:0e:24:c8:c7:c6:72:e0:d5:13:37:7a:d7:a5:b6:b4:a6:
         ee:59:a8:60:9d:82:e4:e1:c9:ad:98:98:9a:8b:cd:4d:12:5f:
         06:8e:6a:b6:1c:68:00:31:4c:ce:dd:d1:e8:6f:3e:f2:7b:44:
         49:d3:08:c1:e2:00:bd:f7:d2:8c:86:c2:dd:b2:8a:9f:51:79:
         0f:ad:39:bc:6c:75:b2:2b:3e:0b:34:22:a2:36:cb:27:87:f1:
         cc:36:f9:f5:21:e4:13:60:85:02:56:c8:2e:19:18:49:7a:0e:
         6a:7d:bb:9c:3e:65:9f:77:0d:c1:81:75:f2:bc:cc:c0:dd:54:
         92:0d:d9:66:5a:7e:bf:ae:3f:8f:29:ab:be:55:21:e4:7c:6a:
         8e:cc:cb:b4:a4:b5:22:d3:c9:20:21:45:59:8d:1f:54:a8:15:
         50:15:19:3d:ea:76:34:71:18:06:84:e4:00:ab:84:0e:48:8f:
         32:46:0d:95:5e:a1:33:27:c3:20:68:f2:d5:9c:8e:6d:2e:5b:
         3a:9c:b3:20:ca:35:43:3d:12:7d:46:3f:d8:b0:ac:d4:80:de:
         03:f7:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:24 2025 by rpki-client