Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa
File:                     a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa (raw, json)
Hash identifier:          mWc/7WLPkaBd1pbRQNNTQnCfGUa4ekatNqB7HyWdtlQ=
Subject key identifier:   5B:15:73:E0:E3:F0:43:95:B7:7D:D2:72:89:55:1F:40:60:80:36:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F7ABE7E01877079A0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa
Signing time:             Thu 19 Dec 2024 13:45:10 +0000
ROA not before:           Thu 19 Dec 2024 13:45:10 +0000
ROA not after:            Wed 19 Mar 2025 12:45:10 +0000
asID:                     396553
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f7:ab:e7:e0:18:77:07:9a:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:10 2024 GMT
            Not After : Mar 19 12:45:10 2025 GMT
        Subject: CN=7795e622-0682-4ce9-b267-218edc3f1a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6e:69:c2:d8:62:a0:1f:27:44:72:ed:d0:e2:
                    13:e4:59:98:b7:34:84:34:45:4a:44:40:e9:c3:d5:
                    18:8c:44:1c:ff:12:77:41:29:86:4e:9b:fd:c1:4e:
                    fd:73:f5:ee:ef:ac:31:89:5f:4b:d3:7b:18:88:49:
                    eb:d3:19:91:35:69:c5:58:c9:92:ac:18:5d:0c:65:
                    6c:2d:b9:e2:41:d2:0b:27:89:2b:0d:1e:88:54:83:
                    ac:80:40:0c:a5:cf:94:02:7b:3b:04:3b:90:76:a3:
                    78:04:34:81:a3:7b:d9:d3:e6:89:83:8b:af:8d:7f:
                    cd:15:6b:b6:7b:7b:26:28:5d:9f:91:33:1c:12:ba:
                    6f:ce:44:1e:5e:83:58:fc:2f:b9:d3:62:90:2b:69:
                    9b:ee:89:8d:65:b1:2a:b6:29:37:1b:e3:c5:7d:1a:
                    07:a6:6d:77:15:42:a0:ab:68:fb:c4:ef:77:8b:c2:
                    2e:bf:d3:3a:d8:80:54:a0:c9:53:6e:19:8c:4f:8c:
                    2f:d1:22:ed:44:88:c3:7e:05:d8:9c:d8:bb:dd:32:
                    a2:63:d3:8c:16:ff:c8:0d:76:66:43:ca:71:3c:2a:
                    c7:33:b3:30:a8:82:aa:e4:a8:c6:3e:35:3d:06:5d:
                    10:ec:3d:2b:28:81:be:4a:6c:d3:c9:37:b7:53:2d:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:73:E0:E3:F0:43:95:B7:7D:D2:72:89:55:1F:40:60:80:36:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:79:8e:f0:24:97:1f:35:5e:c0:77:58:81:7b:4c:43:0d:
         65:bf:ee:db:51:fc:59:23:cf:cd:14:b9:1a:a8:0d:b4:4e:3d:
         7c:b1:64:ed:6a:ee:df:95:c8:0a:a7:99:e6:d4:77:0a:20:a4:
         a7:7f:82:c2:88:8e:51:54:4f:30:2f:44:54:7e:b7:2b:eb:e6:
         b4:f5:a2:e6:e8:d2:c7:2b:56:27:00:45:9a:4c:91:e1:8c:9b:
         c4:a5:12:4b:9e:15:2d:0e:50:22:6d:4b:a9:a9:27:60:be:0b:
         87:2b:ec:5b:27:85:a8:99:7c:ca:06:59:b0:22:b1:55:9b:48:
         95:78:5b:38:ce:f9:e7:a3:39:5c:b7:df:86:9a:28:a4:74:fa:
         ec:af:e0:51:c7:be:f1:a0:49:91:66:a4:c0:19:b7:81:a8:98:
         c3:82:32:a8:c7:35:13:54:8c:be:d4:f3:76:09:3f:fb:e3:72:
         2a:90:8e:69:16:d1:f3:99:c7:54:c6:63:7c:3d:2f:c2:e7:ee:
         52:82:43:35:19:1e:fc:ae:7c:2f:09:e7:46:01:8b:4f:31:a2:
         4c:80:0e:86:0f:17:75:e5:2b:27:88:5d:80:fb:de:3f:0e:d8:
         8c:25:09:95:98:e1:3a:dc:2e:6f:75:6c:61:aa:f9:da:c9:fa:
         89:94:f5:48
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQver5+AYdweaCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxMFoXDTI1MDMxOTEyNDUxMFowLzEtMCsGA1UEAxMk
Nzc5NWU2MjItMDY4Mi00Y2U5LWIyNjctMjE4ZWRjM2YxYTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW5pwthioB8nRHLt0OIT5FmYtzSENEVKREDp
w9UYjEQc/xJ3QSmGTpv9wU79c/Xu76wxiV9L03sYiEnr0xmRNWnFWMmSrBhdDGVs
LbniQdILJ4krDR6IVIOsgEAMpc+UAns7BDuQdqN4BDSBo3vZ0+aJg4uvjX/NFWu2
e3smKF2fkTMcErpvzkQeXoNY/C+502KQK2mb7omNZbEqtik3G+PFfRoHpm13FUKg
q2j7xO93i8Iuv9M62IBUoMlTbhmMT4wv0SLtRIjDfgXYnNi73TKiY9OMFv/IDXZm
Q8pxPCrHM7MwqIKq5KjGPjU9Bl0Q7D0rKIG+SmzTyTe3Uy2RVQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFsVc+Dj8EOVt33ScolVH0BggDaRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTNjN2I2Y2UtNzZmMC0z
ZjQ3LThjOTMtNzVlOTdiZmU0NWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB/w3mO8CSXHzVewHdYgXtMQw1lv+7bUfxZI8/NFLkaqA20Tj18sWTt
au7flcgKp5nm1HcKIKSnf4LCiI5RVE8wL0RUfrcr6+a09aLm6NLHK1YnAEWaTJHh
jJvEpRJLnhUtDlAibUupqSdgvguHK+xbJ4WomXzKBlmwIrFVm0iVeFs4zvnnozlc
t9+GmiikdPrsr+BRx77xoEmRZqTAGbeBqJjDgjKoxzUTVIy+1PN2CT/743IqkI5p
FtHzmcdUxmN8PS/C5+5SgkM1GR78rnwvCedGAYtPMaJMgA6GDxd15SsniF2A+94/
DtiMJQmVmOE63C5vdWxhqvnayfqJlPVI
-----END CERTIFICATE-----