Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b319ebd1-e57b-3e53-af40-5bff8d2f3224.roa
File:                     b319ebd1-e57b-3e53-af40-5bff8d2f3224.roa (raw, json)
Hash identifier:          EHnh72eWAh//DdBK+hrZY4vCgiWZOBTvip3RFKsRjmg=
Subject key identifier:   12:EB:5D:DF:B1:48:76:5B:96:7D:D8:1C:DC:0B:09:62:F6:48:35:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584894A5DDFCAD24BE373EB26500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b319ebd1-e57b-3e53-af40-5bff8d2f3224.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     396595
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:dd:fc:ad:24:be:37:3e:b2:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=a2df2635-ea9a-4fb4-b3a2-99d6c0cbeea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:23:32:97:15:c5:36:3c:d6:53:3b:92:f4:
                    fa:04:82:13:2f:4d:ac:6b:1b:0e:d3:f0:42:1e:36:
                    ee:40:44:da:21:0b:4a:6b:24:c7:8e:20:56:29:a2:
                    33:86:75:37:a7:3f:6d:71:57:f6:b3:3d:21:53:15:
                    91:24:99:46:eb:3a:d2:c8:1a:53:51:36:66:c3:18:
                    22:de:19:95:a2:d7:8f:67:07:e8:d3:6e:22:e3:dd:
                    69:69:9a:51:b7:ba:4d:f7:3b:e9:eb:8b:33:24:37:
                    c9:54:c5:62:a2:e5:e8:01:fa:dc:d7:9e:97:87:0c:
                    50:5a:93:43:1a:81:0e:ad:8e:43:5f:75:a3:e7:e1:
                    5b:9b:b0:fd:15:4f:39:26:01:2c:68:7a:3a:f4:28:
                    d6:9d:55:6e:35:87:20:88:1e:7a:f6:ec:51:82:6f:
                    b9:6c:d6:c9:b4:fa:55:0e:c8:73:c9:fb:7a:dd:75:
                    15:cd:0a:be:cb:33:6e:0b:53:e1:33:62:f1:65:3c:
                    53:52:d4:69:7b:d4:ec:7e:86:3f:39:38:ec:4e:4c:
                    22:cb:47:96:12:a9:b5:8d:74:f5:5a:7d:76:0e:18:
                    8a:57:d9:b5:3b:a0:25:43:7b:6b:4e:58:a9:4c:a0:
                    07:2a:f7:4f:b2:a1:2d:95:3e:ca:47:14:a7:ee:ed:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:5D:DF:B1:48:76:5B:96:7D:D8:1C:DC:0B:09:62:F6:48:35:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b319ebd1-e57b-3e53-af40-5bff8d2f3224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:76:c5:23:02:02:77:e8:d2:5e:4f:8a:50:2c:c8:3b:df:
         08:fa:e7:04:84:58:d6:6a:dc:5f:0d:b2:30:9c:df:04:d7:04:
         de:bf:a5:03:0f:1a:0c:36:77:aa:4c:2c:e9:ee:bc:95:70:53:
         36:fb:57:22:b2:e0:40:06:12:63:d2:6f:24:5a:9d:b9:9e:a6:
         c3:27:1f:5c:ba:73:9f:73:a1:66:8b:a6:ba:68:ee:b0:f3:ee:
         03:e5:f3:15:38:95:3a:54:fe:e7:be:94:9d:c4:30:9f:44:4d:
         0b:9e:18:f9:4e:07:35:78:44:43:3f:e0:1b:29:30:4c:5f:68:
         93:0c:c1:a0:9b:42:d3:b0:7e:7f:42:df:66:dd:27:3b:76:fd:
         a5:01:9a:75:9a:09:46:96:cd:16:a9:ee:92:71:1d:32:7e:0f:
         4e:e2:f8:de:00:1a:c4:7b:6b:b3:c2:66:9e:0e:e5:01:97:02:
         24:76:18:ea:98:d1:f7:96:f6:87:5c:26:6a:e8:c3:4e:33:5a:
         53:5e:9e:fe:34:8a:fd:35:42:5b:e5:ac:42:ba:bf:f9:53:a0:
         fb:dc:5e:23:62:18:ca:c0:88:7f:a4:d2:ff:9a:23:83:48:e8:
         e5:8a:fb:e2:e5:64:bc:6b:e7:5a:eb:10:7f:c1:52:e0:db:28:
         22:31:a2:92
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpd38rSS+Nz6yZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
YTJkZjI2MzUtZWE5YS00ZmI0LWIzYTItOTlkNmMwY2JlZWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweQjMpcVxTY81lM7kvT6BIITL02saxsO0/BC
HjbuQETaIQtKayTHjiBWKaIzhnU3pz9tcVf2sz0hUxWRJJlG6zrSyBpTUTZmwxgi
3hmVotePZwfo024i491paZpRt7pN9zvp64szJDfJVMViouXoAfrc156XhwxQWpND
GoEOrY5DX3Wj5+Fbm7D9FU85JgEsaHo69CjWnVVuNYcgiB569uxRgm+5bNbJtPpV
Dshzyft63XUVzQq+yzNuC1PhM2LxZTxTUtRpe9TsfoY/OTjsTkwiy0eWEqm1jXT1
Wn12DhiKV9m1O6AlQ3trTlipTKAHKvdPsqEtlT7KRxSn7u0W6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBLrXd+xSHZbln3YHNwLCWL2SDUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjMxOWViZDEtZTU3Yi0z
ZTUzLWFmNDAtNWJmZjhkMmYzMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBcK3bFIwICd+jSXk+KUCzIO98I+ucEhFjWatxfDbIwnN8E1wTev6UD
DxoMNneqTCzp7ryVcFM2+1cisuBABhJj0m8kWp25nqbDJx9cunOfc6Fmi6a6aO6w
8+4D5fMVOJU6VP7nvpSdxDCfRE0Lnhj5Tgc1eERDP+AbKTBMX2iTDMGgm0LTsH5/
Qt9m3Sc7dv2lAZp1mglGls0Wqe6ScR0yfg9O4vjeABrEe2uzwmaeDuUBlwIkdhjq
mNH3lvaHXCZq6MNOM1pTXp7+NIr9NUJb5axCur/5U6D73F4jYhjKwIh/pNL/miOD
SOjlivvi5WS8a+da6xB/wVLg2ygiMaKS
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:22 2025 by rpki-client