Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa
File:                     e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa (raw, json)
Hash identifier:          ovJ2AAuI8HNdX6ucCVg/BjF9U3Cy+hsKYFNQYU1oL5A=
Subject key identifier:   71:32:86:74:44:D6:96:44:42:25:6A:B4:22:FB:E1:5F:74:F0:A1:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842433C6C54D209A54A995100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa
Signing time:             Thu 19 Dec 2024 13:45:43 +0000
ROA not before:           Thu 19 Dec 2024 13:45:43 +0000
ROA not after:            Wed 19 Mar 2025 12:45:43 +0000
asID:                     396579
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:3c:6c:54:d2:09:a5:4a:99:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:43 2024 GMT
            Not After : Mar 19 12:45:43 2025 GMT
        Subject: CN=4d4fff8c-0366-4bb6-aa9f-2546f610c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:42:ff:01:c4:6a:53:3f:1f:a7:b9:d4:f5:
                    e6:1d:59:04:26:ee:b0:cb:1d:14:9c:6d:05:ba:19:
                    f4:bf:af:9b:36:b3:b1:87:3f:03:39:38:21:3c:45:
                    6e:71:8a:38:ea:ea:9c:5a:d4:6d:4c:0f:e7:0d:04:
                    7b:9e:36:ff:98:df:01:31:85:70:99:d5:9b:2e:65:
                    bd:f3:16:29:4f:07:95:1b:4e:dd:b6:87:13:df:e3:
                    23:6e:5d:39:e8:4d:44:cc:e0:9e:35:2b:68:69:8d:
                    20:50:a6:5d:54:f3:1e:8d:90:47:30:c0:9a:e2:a6:
                    1d:44:d5:f1:24:2c:b7:60:75:c4:70:d2:7e:58:ff:
                    19:c1:0c:ec:93:c2:e8:16:95:2b:2e:f1:66:7d:a0:
                    a4:f5:c2:f6:c3:0f:c3:54:ef:97:c2:84:63:2f:3f:
                    51:71:79:69:44:d8:28:d5:11:ca:2a:e2:86:73:73:
                    99:51:0f:34:b6:dd:3b:be:61:29:58:a2:cf:f6:21:
                    b9:c6:54:67:a7:b5:da:1b:6e:61:57:5b:bc:2d:d4:
                    50:3f:af:d7:a2:71:a5:03:22:39:b1:81:cd:df:ec:
                    d8:c4:b7:2a:56:20:d3:de:8a:fd:bc:70:6e:35:43:
                    5b:76:8c:2f:6d:55:c3:4d:1f:01:36:b3:74:b4:a6:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:32:86:74:44:D6:96:44:42:25:6A:B4:22:FB:E1:5F:74:F0:A1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e683d821-2aed-3f22-b0c6-a0d8c26aa039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d6:57:2a:83:44:96:ba:16:8b:11:68:d3:38:bc:63:a9:f5:
         f4:6d:59:56:20:14:0b:0e:c5:20:8a:25:07:bb:fe:48:f5:d4:
         de:60:df:3b:cf:21:bd:75:fa:57:21:ce:4e:df:5a:37:55:10:
         e9:ed:77:81:7a:d2:0f:9a:33:59:48:94:d2:a9:99:63:75:3f:
         b6:94:0d:cb:03:f6:8a:3b:99:47:00:97:12:c7:70:26:1d:f4:
         26:0d:41:4c:da:d8:f8:13:78:17:4c:b9:3d:94:3f:2c:d9:ba:
         77:39:50:04:6d:97:e3:58:6b:8f:da:3d:c2:62:e3:62:fa:1f:
         de:16:d6:07:bd:05:b8:42:72:3a:bf:7d:a6:68:a7:58:f3:6b:
         4e:a2:70:fa:46:23:cc:bd:ae:7a:a2:83:50:86:3f:b2:1f:c8:
         89:3b:fc:c7:33:72:1a:8b:0c:50:45:3b:3d:61:74:e2:f8:2a:
         c7:da:eb:af:68:ed:0b:fc:8a:86:91:d6:bc:7b:81:c0:92:7f:
         d6:eb:27:96:96:c5:bb:85:7b:c7:a3:c2:63:c0:68:b4:07:be:
         13:5f:0a:96:28:fe:d8:64:b9:2e:fc:4a:b0:c2:25:95:58:a4:
         25:8c:43:77:41:54:a1:ef:fa:12:b0:14:57:63:4a:30:f1:77:
         0d:94:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:00:32 2025 by rpki-client