Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa
File:                     e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa (raw, json)
Hash identifier:          gQsS4GJLapK9UTPvH+NwztPtLGncCH+PvON8Ws8ZXSI=
Subject key identifier:   97:C1:08:24:CC:40:75:84:76:D3:49:3A:4E:14:96:EC:BA:79:04:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842434A87C7240158ED4D3140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa
Signing time:             Thu 19 Dec 2024 13:45:49 +0000
ROA not before:           Thu 19 Dec 2024 13:45:49 +0000
ROA not after:            Wed 19 Mar 2025 12:45:49 +0000
asID:                     396554
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:4a:87:c7:24:01:58:ed:4d:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:49 2024 GMT
            Not After : Mar 19 12:45:49 2025 GMT
        Subject: CN=12eaaf1b-d02c-4afd-930e-b345e1f6a430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:68:a9:89:1c:34:30:11:5b:01:16:9d:6e:
                    c3:6b:2c:7f:ff:15:26:65:59:28:d7:59:d9:6a:7b:
                    84:1c:32:ed:79:57:1b:88:2b:a6:da:5f:c1:38:39:
                    31:53:97:95:d1:03:cd:54:5c:3b:bf:1b:9e:da:e0:
                    66:f9:a9:d5:b6:d4:c1:4e:14:9f:7f:5d:86:e2:e1:
                    0e:72:36:a0:81:01:c6:d7:98:85:8d:f0:cb:18:d3:
                    1e:30:4b:3c:4c:66:40:07:99:de:c1:81:4f:eb:68:
                    d7:57:8a:0c:5c:d0:7a:7c:4d:8b:2d:d1:6b:a7:8d:
                    b0:9e:25:da:f3:2e:08:fc:1c:2b:a8:d8:bd:66:b4:
                    dc:c1:01:3a:cf:fc:12:61:5b:b0:4e:8d:19:22:cf:
                    f4:6f:83:c2:05:d6:23:d0:a6:cd:8a:02:af:8e:5b:
                    1a:b6:e6:9f:36:c3:f0:bd:9e:20:0e:0b:37:32:da:
                    c6:2d:da:74:b8:05:e6:c6:c4:86:c8:2a:8d:c8:02:
                    08:cb:27:d0:9c:92:36:01:c7:db:39:6c:10:c1:f7:
                    84:99:32:68:c9:41:3e:8c:f6:8b:0e:4b:80:d5:13:
                    5a:3e:6c:29:f8:ec:3d:dc:f3:16:ec:7b:2a:bd:26:
                    23:89:86:17:e6:9a:44:9f:77:79:84:e3:be:fe:fe:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:08:24:CC:40:75:84:76:D3:49:3A:4E:14:96:EC:BA:79:04:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e39aa6af-fa02-39aa-84fc-c4d815ad6c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:75:33:d2:63:d8:f2:52:37:f3:98:c5:6f:b4:f6:2e:17:95:
         1b:17:69:e0:02:bd:14:2d:d8:db:3c:da:92:5e:87:b3:b0:c3:
         e7:93:00:7a:f4:63:9c:57:2f:f7:e3:69:16:56:2b:fb:d5:84:
         41:1f:db:50:1f:34:4d:61:2c:2f:a6:50:68:d8:6b:e7:3b:ef:
         3c:51:dc:b9:eb:a0:34:13:be:28:cd:d6:92:19:82:91:f3:53:
         28:29:cc:73:78:2d:d7:39:d3:e4:85:ce:b3:44:7a:1f:6d:9c:
         d3:ca:6a:71:78:3e:f5:fa:19:3d:e4:ec:a2:72:f5:1d:4a:e2:
         3e:b2:b1:00:3c:7d:b0:fb:98:dd:3a:2d:a7:1e:ec:78:07:84:
         7e:0d:2b:51:3b:85:8d:d1:de:b1:1b:6b:f0:00:7d:47:52:e5:
         de:81:37:51:8c:ad:47:af:4f:a1:80:56:f1:63:b6:b6:6d:40:
         d2:09:c3:ac:c2:89:c8:37:fe:80:3b:7f:84:45:b3:ed:e4:be:
         5a:6a:89:1c:f1:9f:81:46:e5:97:ca:77:d5:98:85:45:d5:2d:
         86:21:80:1b:17:17:57:1a:e3:d3:29:43:46:b8:65:3d:5a:5c:
         b6:7b:fa:f3:73:c9:44:f6:85:55:2b:cc:4a:a1:bd:ba:6b:e8:
         1c:1d:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:05:24 2025 by rpki-client