Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
File:                     ebb2ceae-320c-336b-bf49-95fc0448750d.roa (raw, json)
Hash identifier:          5XMg8aJDV2cdDWuH4i+luz6N1plr8xCfABgrp9PLNso=
Subject key identifier:   20:6C:02:1B:20:3F:00:64:BA:70:82:12:BD:9B:24:1E:22:A0:39:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430BAA6BA5127DD1363180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa
Signing time:             Thu 19 Dec 2024 13:45:20 +0000
ROA not before:           Thu 19 Dec 2024 13:45:20 +0000
ROA not after:            Wed 19 Mar 2025 12:45:20 +0000
asID:                     396558
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:0b:aa:6b:a5:12:7d:d1:36:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:20 2024 GMT
            Not After : Mar 19 12:45:20 2025 GMT
        Subject: CN=fd976f15-3479-4b89-80c7-9375493899a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:16:a0:33:73:ac:55:b2:ef:89:cf:02:be:
                    51:8a:49:e1:29:bf:46:d8:e6:cc:24:54:ad:06:0e:
                    9d:4a:18:0e:3b:26:f9:22:a6:41:f5:2d:06:7c:fc:
                    16:d1:1b:26:ee:a7:77:d7:2e:3a:14:51:fa:87:1a:
                    8e:0b:ad:35:fa:29:fd:14:de:c7:fb:42:7e:37:8a:
                    13:b6:14:e5:84:a2:a7:14:a7:86:39:90:4c:b3:41:
                    11:24:5b:cd:ed:5f:50:a0:7d:17:5d:d5:7f:cb:89:
                    d8:e6:b5:2b:81:66:0a:5f:96:31:77:0a:16:4e:a7:
                    71:80:6d:5d:45:cd:15:fe:04:b8:01:b7:ee:28:38:
                    72:94:4d:76:2a:fe:ab:ec:98:ca:0b:6a:0b:3d:38:
                    bb:8a:3d:e4:76:ef:16:0d:a1:a5:99:a5:f9:98:6f:
                    4b:f1:99:9d:47:d4:ff:98:7c:4d:e2:36:d5:e9:97:
                    32:63:5a:1d:8c:cd:fd:78:42:bc:e3:3c:c4:07:e0:
                    4e:2c:bc:6b:b1:84:5d:dc:ac:5e:a9:3c:8c:0b:98:
                    c7:2a:8d:ab:1f:16:fe:57:d9:78:68:9e:6b:fc:99:
                    59:58:1d:d8:bd:69:03:8b:ba:79:81:ee:52:95:d5:
                    b4:fc:fc:85:ef:a4:00:d0:ae:b7:d1:0a:1b:25:69:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:02:1B:20:3F:00:64:BA:70:82:12:BD:9B:24:1E:22:A0:39:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb2ceae-320c-336b-bf49-95fc0448750d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1b:b7:d5:33:0e:3a:98:a2:5c:90:f8:e4:67:1e:d3:17:ed:
         ee:b8:b6:65:8e:76:bd:6a:7a:4d:95:df:82:64:ef:ba:ac:9d:
         5b:9d:6f:73:8e:c6:68:81:d9:e9:93:7f:64:c8:0e:78:8d:ff:
         91:58:a0:be:66:3f:a9:d0:b9:12:83:bc:fa:ba:c6:49:36:76:
         6c:e4:b8:78:cd:62:2d:41:f7:da:fc:b6:24:7f:9e:c9:1d:fa:
         8a:fe:50:72:e0:d1:fc:6c:63:5b:18:64:64:d6:b4:d6:89:b2:
         e4:6b:e2:bb:62:a2:8a:c4:56:d2:09:3a:91:82:0c:91:c4:35:
         6a:95:59:04:d7:96:84:6e:c3:9c:6f:4d:87:9b:fa:37:67:19:
         e2:c4:25:f2:e8:7d:01:6f:d9:9e:9f:c4:45:7e:ee:d2:4c:5f:
         0d:52:5d:c8:28:49:c9:3c:cf:4a:d2:a4:f0:e3:35:de:42:fb:
         23:84:cb:e2:48:f6:fa:02:18:9b:6d:21:94:41:7f:1f:b7:9c:
         ca:23:9d:a4:a3:a8:03:36:ea:e1:a4:5a:33:b7:a6:45:ef:92:
         4b:d4:cf:b2:41:85:f3:0e:bc:0c:a0:43:18:3a:69:00:38:97:
         a6:04:c2:2c:75:5b:bb:ba:65:c0:d5:17:ec:4a:6b:82:50:18:
         8e:e5:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:33 2025 by rpki-client