Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
File:                     c358bafc-dd64-36da-99f4-9718f68a72a3.roa (raw, json)
Hash identifier:          sLK8/+H1SYWtxA5T7E34WSsUICspFbr4+32N0uR2MUs=
Subject key identifier:   78:D6:F8:D1:D3:47:C0:7B:FE:9D:5B:FE:35:5C:15:C7:25:54:E1:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C473A221056D55C48700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396595
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c4:73:a2:21:05:6d:55:c4:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=567199ee-c061-4f0f-880d-b694ff7794d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1f:b6:28:89:c0:ff:12:77:0f:58:5e:93:d7:
                    5b:89:58:a1:38:36:af:90:48:f3:42:37:19:1e:92:
                    7c:82:1a:96:d9:1f:a3:73:1b:ac:04:47:2d:e8:c1:
                    aa:e1:f7:96:13:41:d4:1d:c1:33:47:40:ef:40:08:
                    c5:72:12:85:a8:39:f9:d3:4f:48:63:59:94:30:a9:
                    2b:52:6e:cd:14:12:10:19:b1:e8:2e:c6:54:c1:41:
                    6a:95:77:a2:54:82:21:6b:56:ce:ac:3d:db:71:9c:
                    96:43:d4:8b:10:17:ad:16:9d:4e:fc:82:da:72:f3:
                    bb:01:b0:8c:e5:8f:48:9f:66:68:80:a3:9c:b9:d8:
                    a7:a8:5c:c4:53:4d:16:cc:98:24:4f:ae:83:3a:ba:
                    5c:de:12:81:92:15:0c:98:65:d9:86:85:d2:76:fc:
                    11:02:f2:e6:53:41:c4:bf:a8:d4:f6:a6:7e:59:a6:
                    1c:fa:07:c6:85:6f:ef:f7:ab:17:8b:93:45:81:f9:
                    03:89:6c:02:43:8b:25:b7:c3:e5:46:32:6c:aa:1f:
                    4a:92:f0:7f:74:99:4c:7a:40:6f:ca:cd:46:40:bf:
                    5d:7d:e6:e5:a7:cf:b4:32:00:8c:82:a6:7d:7e:07:
                    a7:8c:a5:16:a5:62:eb:db:bd:3c:04:81:88:b2:7e:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D6:F8:D1:D3:47:C0:7B:FE:9D:5B:FE:35:5C:15:C7:25:54:E1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c358bafc-dd64-36da-99f4-9718f68a72a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:19:4c:94:8a:51:23:6a:21:98:1f:c0:c7:ca:c0:70:20:
         16:da:8c:be:f2:6d:0f:54:4d:03:5e:fb:3f:ae:78:bd:e4:8a:
         37:e3:4c:21:85:ff:e0:28:e8:ec:5b:c3:1e:83:34:d9:e9:31:
         13:f6:8a:3d:91:d4:19:d1:d4:e2:0f:f0:63:30:59:f7:ed:41:
         d5:f7:6e:17:4f:b0:a9:c9:b6:c8:d6:14:4b:76:c6:c6:6c:b5:
         48:4b:27:69:c1:91:ec:20:e8:0b:d7:b2:1d:ec:1c:33:76:4f:
         62:cf:e2:5e:38:1f:0a:6f:29:31:28:94:c7:69:ed:fb:ed:60:
         e5:6e:4d:ce:9d:30:41:d1:9f:48:a6:40:6d:14:a4:08:90:d7:
         9a:29:be:b8:a7:cc:c5:ed:6b:6f:03:25:ae:93:48:78:be:7e:
         2f:43:1e:8b:d4:9d:c1:8a:ec:91:57:04:19:85:d6:9d:c6:4b:
         8f:00:ef:1d:31:62:92:15:8c:d6:cf:b7:b1:a9:a7:e8:6b:c7:
         be:c3:ae:66:2d:ae:dd:df:bc:bb:cf:f5:73:07:14:b0:9b:27:
         04:b6:a8:e6:b0:b7:24:d6:f9:14:4b:13:5b:08:ac:2c:28:c3:
         dd:92:a8:66:dc:06:62:d6:5f:98:4f:87:c3:6b:e0:98:93:6b:
         01:2d:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:32:00 2025 by rpki-client