Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa
File:                     d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa (raw, json)
Hash identifier:          YRq8wcY/Ojc9Gvb8r6ssciMmn/qfFkJkt2Y7e0fvMFY=
Subject key identifier:   BB:A8:49:90:4B:3A:48:46:9D:BE:8A:92:9D:5D:B1:FA:09:4E:78:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242E994C702A016214D1080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa
Signing time:             Thu 19 Dec 2024 13:45:04 +0000
ROA not before:           Thu 19 Dec 2024 13:45:04 +0000
ROA not after:            Wed 19 Mar 2025 12:45:04 +0000
asID:                     396827
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:e9:94:c7:02:a0:16:21:4d:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:04 2024 GMT
            Not After : Mar 19 12:45:04 2025 GMT
        Subject: CN=aa39f01a-b8c3-42fe-bae6-30b77f2d6a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:6a:b5:f7:42:28:b2:10:30:bb:dc:5f:e8:
                    85:c8:4e:a8:db:a8:c4:39:18:44:6c:92:ed:18:6f:
                    e8:a2:0a:0a:72:de:87:e0:c3:17:dd:9a:cd:df:4d:
                    2c:8b:08:33:f6:bd:cb:5e:11:b1:ff:3d:ad:46:56:
                    ad:bd:af:73:1d:13:71:2f:b6:fa:9a:4d:e0:8c:a7:
                    9a:92:e2:72:32:b3:b2:07:4a:5e:5f:3a:35:20:8a:
                    a5:02:d8:0a:b9:e5:7e:47:b2:32:6c:07:98:d3:15:
                    73:b6:06:b6:5b:d6:62:a4:bc:e6:c9:88:b1:4a:58:
                    6a:6e:75:a4:24:61:bf:ad:30:3b:d0:fa:ae:f8:0f:
                    2b:cb:68:10:06:4c:f9:7c:c5:25:56:a0:5d:9b:d7:
                    3b:7e:92:ac:69:e0:03:cc:2d:0b:8a:d7:a1:b0:66:
                    00:d7:ef:b5:3e:63:b9:4f:b0:60:8b:fe:78:9d:3c:
                    59:3d:2a:21:21:f8:0b:c5:d2:cb:28:06:c8:8c:85:
                    47:08:0c:22:f3:23:f7:be:5d:84:54:de:b5:b9:90:
                    83:00:93:9c:1d:63:c9:ad:99:a9:00:5c:57:de:f1:
                    d8:93:57:3a:4b:43:10:49:78:30:f0:85:38:16:a5:
                    3c:07:b8:35:4e:54:ca:2c:41:72:7c:d0:a6:e2:db:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A8:49:90:4B:3A:48:46:9D:BE:8A:92:9D:5D:B1:FA:09:4E:78:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3ea7faf-313f-30a2-90cd-7a86beeae6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:56:21:97:00:ce:1d:50:93:25:10:8e:31:12:2a:b9:15:
         0e:5f:9f:75:b9:de:2d:71:52:17:5b:9d:b8:31:77:c7:c1:84:
         6b:a5:07:5c:3b:df:2b:06:58:2a:08:7a:93:73:2d:1c:39:61:
         ac:f8:87:e5:12:85:1c:1b:fc:2a:a6:d0:97:38:4c:1e:b4:af:
         a9:49:f9:e4:54:ff:c4:c5:1e:71:9a:e5:88:40:fc:2f:28:5d:
         c7:fb:95:ec:50:99:08:28:22:1d:d5:4a:8b:dc:c0:32:9a:f0:
         cf:af:c8:b9:ce:bb:b2:0d:13:2f:44:34:26:5b:8a:76:7f:ee:
         5f:d4:09:07:4a:6d:22:9a:1c:88:a2:c9:ef:46:23:24:cc:4f:
         55:04:1d:21:79:4b:67:23:5c:76:99:5d:5a:82:c8:33:d1:c7:
         5b:61:03:fd:72:70:e3:60:5d:eb:1b:73:2a:bd:4f:db:a8:18:
         b4:a0:bc:17:3f:11:da:ad:08:18:6c:02:34:df:27:9d:c9:e9:
         56:54:af:3a:7a:61:f9:70:43:33:c4:de:ae:69:c8:2f:f4:54:
         b2:b3:06:16:1c:bc:8e:c8:12:c1:c2:e7:b0:8b:82:ba:d6:c1:
         54:ba:4b:2e:3f:cc:c0:d9:12:ab:e8:86:a2:37:3a:87:53:cd:
         51:b0:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----