Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
File:                     b442620e-ac18-3e7d-9341-fc1e63a6d528.roa (raw, json)
Hash identifier:          /4bz5sF/Fs/99AkiV3y8NC6TYb3qkt5KpCHMePbjwTM=
Subject key identifier:   EC:84:96:40:69:B9:3E:CF:1D:C7:5A:FD:F2:E8:82:11:C9:11:ED:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858486695CCA0C91E6167DAA12010
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396606
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:cc:a0:c9:1e:61:67:da:a1:20:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=5c74f949-866c-4cf5-ae3d-0ad3e866740f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:67:ff:9f:30:87:7d:00:31:6e:31:b2:94:
                    b3:9a:a5:2d:e1:c7:f7:d1:99:9e:4e:67:21:a9:92:
                    80:f8:a3:34:ed:08:e9:86:4a:bf:83:db:cd:9c:65:
                    ed:0c:0a:4f:a9:56:16:b7:fd:7d:20:8c:89:a3:81:
                    cb:47:9c:5d:f4:de:96:c2:bd:85:f8:ff:81:22:27:
                    97:8a:0d:9e:a6:0b:af:a1:c4:a0:cd:eb:29:8d:98:
                    fc:fb:9c:3a:a5:de:23:1f:6b:38:08:83:f2:56:52:
                    c7:44:60:46:58:27:a5:dc:ff:0e:65:a4:f3:79:41:
                    14:2e:25:48:24:88:03:40:8d:d8:ea:c6:0a:41:a4:
                    a7:70:90:57:b4:9d:92:76:5e:66:5c:98:83:d6:e1:
                    8d:c3:3c:6f:24:d1:58:9e:02:07:2c:cd:a8:b9:99:
                    5c:81:1e:22:85:59:df:4c:30:f2:2d:63:4e:84:49:
                    cd:a2:1b:85:46:e5:76:ae:ff:9e:38:88:9e:96:80:
                    67:1f:e7:6a:3e:53:9d:5c:ef:2c:00:4c:99:1a:11:
                    96:ec:d3:be:fa:b3:e1:8f:bf:b5:81:fc:4d:41:bf:
                    19:b1:a7:0a:e8:e0:42:6f:57:f6:1b:ed:97:c9:13:
                    a2:fe:e3:b2:cc:83:30:ce:f3:31:b5:de:b7:4f:42:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:84:96:40:69:B9:3E:CF:1D:C7:5A:FD:F2:E8:82:11:C9:11:ED:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bd:d6:79:ff:e9:4e:c4:a6:85:e7:84:41:de:80:11:2a:d5:
         43:c4:f0:0c:1a:2a:02:3d:8d:54:93:81:1e:c6:52:90:e0:9f:
         77:b5:03:8d:4d:75:8f:16:bc:f2:77:09:7c:78:7d:7e:e4:86:
         7d:6f:21:ec:43:9f:49:d5:aa:d8:45:d5:17:ae:d6:a4:3d:d4:
         26:9d:b5:09:5f:1c:5a:15:ea:e2:62:a8:3b:12:cc:5f:c2:90:
         56:9b:c6:65:64:57:22:2d:bf:f6:d7:fb:90:0f:bf:41:4d:08:
         7f:15:fc:e4:d0:a4:7a:b6:db:f3:95:f9:95:f1:6b:35:94:92:
         56:ba:02:62:70:d4:de:1f:d0:95:c7:59:ef:f2:8c:62:07:ae:
         c2:5f:0a:de:72:b7:38:9f:a5:ed:f0:9d:e1:f1:21:46:2f:09:
         af:ce:7d:55:01:7b:bf:fe:21:e1:13:52:59:f1:80:f1:81:92:
         55:92:be:af:7c:6a:07:11:66:59:02:c6:57:1e:7c:15:cd:c0:
         34:1a:b4:69:73:64:2b:e3:6a:79:48:a6:2c:5b:5a:98:fe:47:
         48:c8:41:e8:9f:dd:6e:6c:ab:e3:b8:ea:e5:59:19:ab:b6:2a:
         0c:0f:63:c6:66:bd:2e:c7:b4:ac:52:6f:96:d7:fe:da:3c:e5:
         ab:79:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:19 2025 by rpki-client