Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ae255a-c2ba-3bd9-99d9-7b851e720d74.roa
File:                     a2ae255a-c2ba-3bd9-99d9-7b851e720d74.roa (raw, json)
Hash identifier:          7B70/iPzZZ67bSJkJxx4l5TZOCKiFxvnXTox50xGIgo=
Subject key identifier:   BF:27:2B:C9:58:B8:41:24:5A:36:74:42:12:93:04:94:D5:57:D0:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431A7507460D95987C7780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ae255a-c2ba-3bd9-99d9-7b851e720d74.roa
Signing time:             Thu 19 Dec 2024 13:45:27 +0000
ROA not before:           Thu 19 Dec 2024 13:45:27 +0000
ROA not after:            Wed 19 Mar 2025 12:45:27 +0000
asID:                     32651
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:1a:75:07:46:0d:95:98:7c:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:27 2024 GMT
            Not After : Mar 19 12:45:27 2025 GMT
        Subject: CN=ed8b7ff1-e852-4e97-96f2-d6a70b133c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:f8:8b:0a:66:cb:97:3d:08:2e:09:c6:15:
                    28:ac:86:9d:7c:9f:0e:0b:82:7f:c9:a3:1c:02:e7:
                    a9:8c:42:6c:23:d7:4f:13:5f:28:2d:11:a8:bc:30:
                    d5:88:32:3a:5f:63:1b:18:32:56:e2:24:5f:00:4e:
                    6b:69:58:d0:0a:8c:e4:d6:24:fe:95:4a:8c:f5:17:
                    34:8c:49:28:1a:ac:2b:6b:41:2d:9a:9b:3b:2b:b4:
                    e8:ac:ec:18:d6:d3:c2:7e:c3:e8:c4:9f:29:69:78:
                    6f:5c:dd:5d:34:d2:30:78:88:0f:01:a9:c9:62:60:
                    54:5d:ef:ff:6d:da:c9:42:af:f1:26:35:26:17:c3:
                    62:6b:41:61:0a:e1:c7:ca:94:57:c1:48:13:e2:79:
                    ba:d4:44:38:76:88:61:40:c1:8b:61:47:f3:2d:44:
                    54:b5:8d:f4:a8:af:bb:18:bb:10:46:b5:5c:91:fc:
                    a0:d0:8f:54:05:45:26:b0:44:d3:72:39:db:69:98:
                    d0:3c:f7:41:8b:82:3a:4d:0a:57:60:b7:cf:a1:24:
                    73:d3:f1:11:dc:3c:97:dc:65:4b:65:ee:45:56:d1:
                    aa:36:51:49:40:03:10:ce:9c:47:36:73:95:53:99:
                    96:c6:d2:32:5c:b4:56:9f:61:ec:72:29:8b:76:1e:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:2B:C9:58:B8:41:24:5A:36:74:42:12:93:04:94:D5:57:D0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2ae255a-c2ba-3bd9-99d9-7b851e720d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:8e:86:ec:33:66:ae:74:6a:13:72:c5:66:65:c0:2e:f9:
         b8:17:eb:2a:ba:20:0a:15:7a:33:f9:70:e4:3e:15:d1:05:4a:
         92:b4:a5:ce:c3:46:0d:98:69:0f:2d:36:25:10:61:c9:f1:21:
         5f:e7:c6:b0:e1:a3:bf:d0:80:55:a6:21:ae:2e:ea:4e:58:a2:
         85:b5:2a:84:91:f9:fd:a4:d0:ed:b5:c9:b7:26:33:81:4f:e5:
         cd:98:21:8a:a7:9f:6c:1f:d7:62:db:d0:a9:37:4e:5b:bc:33:
         6f:7c:c3:ee:4d:3f:e5:13:9a:c9:be:33:45:57:5b:ef:c7:9c:
         52:5f:68:61:ee:32:1b:24:24:c3:b4:9b:33:0c:ec:67:8f:f2:
         04:8d:bb:d6:99:fd:84:09:92:64:25:eb:2a:f3:cb:e5:b6:3f:
         3d:b2:fd:c2:ed:58:13:4f:95:48:74:c1:8f:ed:bf:a0:d0:fc:
         82:ad:86:ed:1c:80:28:a9:7a:32:6f:bb:ed:38:28:b7:61:2f:
         e5:75:bc:9e:8b:d1:35:a7:6d:a1:05:a2:74:15:c7:23:38:64:
         0f:8a:18:54:31:8c:b6:43:6f:84:ac:43:5d:19:69:59:63:11:
         ed:4e:55:b6:b3:9a:f9:4f:fc:c1:2b:37:f1:ca:e0:c8:a1:0d:
         21:2a:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:19 2025 by rpki-client