Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
File:                     9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa (raw, json)
Hash identifier:          5/q4eVzMpunXbRsKndWrGZhPWp3RvWnS4KN88Wn3zFI=
Subject key identifier:   BA:84:2C:53:49:BE:E0:46:DB:90:49:FB:4C:8F:98:DD:41:72:31:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C051FD653C699CCEBC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396602
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c0:51:fd:65:3c:69:9c:ce:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=f6e9b575-1ed3-4a25-b0ea-f14b688a68ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:14:1d:40:06:26:ed:f6:72:8d:71:33:e8:
                    b8:e8:75:49:57:66:47:e7:14:e7:b1:97:36:d9:17:
                    83:82:d9:c7:57:8e:46:9a:be:ff:c6:8f:1c:17:f6:
                    12:17:22:62:b6:f6:13:fe:e3:0d:ec:d9:18:e8:76:
                    93:d7:ab:85:c5:36:ca:b3:d4:15:eb:e3:c7:e6:a1:
                    26:6c:ee:bc:1c:d8:50:4b:f6:42:76:10:5e:75:e6:
                    f7:68:e7:dc:ee:f6:cb:da:9c:43:90:10:ee:05:de:
                    42:5d:e8:8f:d4:dd:0a:dd:43:5d:2b:3e:ad:84:c2:
                    d4:fc:aa:64:f3:d6:a1:55:db:54:11:1c:46:b6:98:
                    c9:cb:e6:f0:20:a3:fd:30:11:ac:30:99:ff:ce:8a:
                    48:da:93:32:f8:05:5f:d3:04:3c:22:74:69:31:53:
                    8a:24:2a:87:d3:77:c0:95:1c:81:2b:d7:14:c9:ff:
                    89:bf:74:f0:31:da:f5:4b:8d:a8:17:ac:eb:d0:da:
                    f5:fd:99:9b:7f:6e:27:52:6c:0b:97:9c:cc:97:2e:
                    3f:ac:c4:48:42:b9:e6:cf:b5:5e:ef:24:66:99:15:
                    f7:70:43:8a:8d:17:74:f9:ef:dd:01:3f:72:d8:52:
                    e9:59:ce:0c:6c:f2:eb:d1:68:55:e7:4a:71:c7:64:
                    06:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:84:2C:53:49:BE:E0:46:DB:90:49:FB:4C:8F:98:DD:41:72:31:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:92:e7:fc:01:05:2a:3a:9d:35:ec:8d:8c:f9:8d:23:00:
         74:99:43:5b:da:0f:ac:25:88:20:ad:0f:c3:48:19:c4:0b:e2:
         78:05:14:28:9c:44:8f:e3:c8:26:e9:70:f4:7d:c5:06:ba:3d:
         8d:95:ca:9a:0c:77:c2:20:ed:de:a4:23:00:f3:75:46:33:b0:
         a6:03:52:63:5c:df:d8:07:0b:6f:e8:31:ce:1e:71:22:d7:2d:
         5f:0b:52:90:49:4c:7d:18:37:da:f8:a6:09:fa:1d:0f:b1:95:
         07:4c:fe:ba:31:8b:d4:08:39:48:bd:85:de:dc:a9:4e:02:87:
         6d:22:e6:37:f4:77:57:98:db:ae:d3:fe:31:00:67:79:4a:60:
         35:3b:cd:3a:d9:e3:75:43:99:4c:3f:c5:8f:c6:b6:49:9a:33:
         98:b5:ae:c4:8f:28:41:e4:05:a0:bd:09:f3:64:09:48:1b:c0:
         1b:a5:25:48:60:d3:f0:d5:84:37:ad:f9:ca:b7:c4:3e:09:1f:
         d9:92:97:62:41:e0:a5:56:3f:35:da:dd:d0:98:41:1c:8a:f7:
         b9:0b:c4:8f:3d:fc:0a:7f:8d:09:14:1a:92:84:37:4d:10:97:
         14:fa:ca:43:4d:93:d5:18:b8:ce:1c:56:4b:9d:0f:8c:2d:43:
         99:d5:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:54 2025 by rpki-client