Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa
File:                     e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa (raw, json)
Hash identifier:          FRKnI4IBkzaY+jXiE5y6AMl/NQpwLcYqyVN17km0CL8=
Subject key identifier:   F2:7A:E5:EA:6F:E6:F7:BF:B0:3A:91:93:4D:80:4A:15:9D:23:BC:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584894A5DE9DB000D8195668CE40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     396585
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:de:9d:b0:00:d8:19:56:68:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=62c94b17-4916-48d7-be6e-209fd1b20434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:68:bc:a4:e6:f3:14:69:c3:98:11:04:9b:
                    2f:68:30:fc:be:d7:48:1b:3c:13:13:65:71:f9:85:
                    0b:2c:6b:39:1b:49:f2:2a:23:5f:5a:02:e1:d6:90:
                    d2:ad:ab:87:1b:21:e1:2f:92:e4:76:a9:57:ee:69:
                    d4:14:60:a9:69:9c:ba:38:ba:33:83:75:a3:75:35:
                    b2:4c:bf:e1:b2:90:44:54:eb:9f:28:0e:40:65:c7:
                    54:f8:dc:9e:1a:e5:43:a2:15:6d:27:e9:ba:ba:d9:
                    b4:a0:07:30:f1:e6:4c:1d:51:af:ea:67:09:9c:62:
                    36:e6:47:68:41:86:e5:71:67:c0:80:76:0e:18:80:
                    40:83:d4:6d:96:e0:cc:5e:fa:70:b3:97:f8:38:b5:
                    f9:f2:0e:45:c6:d4:20:ff:66:0e:3a:eb:15:0e:eb:
                    f8:63:4a:94:77:76:77:55:15:47:b0:84:e1:27:50:
                    75:20:a1:cb:ee:74:ad:3f:d2:e3:27:16:c0:30:eb:
                    65:f3:50:0a:5c:ce:38:7e:39:ff:da:4f:e6:b4:77:
                    df:92:00:37:57:6b:dc:3a:54:d5:4c:34:5e:fc:bb:
                    ec:cc:31:44:a1:b8:79:e9:9a:00:49:1f:5f:7f:20:
                    43:96:c7:a1:ef:1f:de:55:73:d0:f9:28:fc:77:b9:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:E5:EA:6F:E6:F7:BF:B0:3A:91:93:4D:80:4A:15:9D:23:BC:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5dc9fb5-cfa5-3f94-936f-cb0e9cb3cc8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:5b:db:93:8b:e4:65:9d:f2:43:b9:79:cc:0c:2c:a0:88:
         0e:2c:35:34:31:64:99:0a:26:89:bd:79:d6:bf:9b:c1:fd:50:
         df:8f:a5:07:21:e5:26:40:8d:5d:a7:a5:d8:45:f3:0e:e6:7e:
         7a:d8:59:6c:eb:40:0b:54:12:be:e5:08:12:6c:ab:51:8d:98:
         af:8b:d5:a7:66:da:f5:9b:6b:db:d7:21:d2:f8:4a:0f:3d:c7:
         24:95:ac:18:97:11:74:4f:3e:3a:0c:84:d9:84:65:0f:c7:e3:
         9e:e7:08:ea:e0:da:a0:74:1f:7a:f7:f9:2d:84:73:f4:e6:73:
         5c:af:d0:74:24:07:f0:64:ff:81:ff:56:77:a1:0c:cc:1b:b4:
         f9:0c:2d:fa:e9:b1:01:02:7a:5a:a6:3a:47:90:ff:ed:69:cf:
         8f:20:50:43:90:52:60:42:d3:a6:24:0b:2c:c1:62:33:60:2c:
         30:21:a1:4c:21:a8:2c:0a:ab:5b:32:9f:6b:a2:18:54:f9:fe:
         8a:bb:b6:b5:21:18:85:21:83:8c:e6:2a:ef:3e:d3:b8:05:c5:
         8a:a8:4f:5a:75:26:1c:19:c1:fa:98:8a:58:e7:e1:94:40:1d:
         fe:8f:12:d1:26:ff:93:e4:5b:6d:57:c0:19:c6:51:54:fb:7d:
         bc:2b:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:27:12 2025 by rpki-client