Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa
File:                     f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa (raw, json)
Hash identifier:          X6ugTC8m/E816XiRaf/UxWWt+oWkoOk989kfvnR3cnU=
Subject key identifier:   E4:07:9C:E8:BC:4C:30:C5:9B:BB:57:6E:1E:AD:19:70:3E:5F:C0:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FDCE6609168D2688C400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa
Signing time:             Thu 19 Dec 2024 13:45:13 +0000
ROA not before:           Thu 19 Dec 2024 13:45:13 +0000
ROA not after:            Wed 19 Mar 2025 12:45:13 +0000
asID:                     396567
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fd:ce:66:09:16:8d:26:88:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:13 2024 GMT
            Not After : Mar 19 12:45:13 2025 GMT
        Subject: CN=8a1a38d1-868b-4c56-9dd1-1c1d49fbceff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e6:50:4f:77:83:a6:bf:65:0f:67:2b:01:1b:
                    4d:a5:60:97:e0:99:fa:cf:39:11:7f:a7:cd:8b:de:
                    86:af:03:dd:dc:e1:b6:69:4b:e5:99:5e:d2:59:c5:
                    1c:f2:8f:4c:ea:48:0b:33:a7:b7:7c:c5:85:db:57:
                    bb:7b:d5:bb:fb:dc:8d:f4:c0:2d:7f:aa:0c:a9:80:
                    0b:ab:c8:46:8f:ca:97:0b:b2:cc:d7:4b:7c:9d:07:
                    a5:42:41:5d:4f:48:36:92:54:e2:b4:f7:12:98:18:
                    72:8b:1a:62:7c:b1:5a:2e:ba:69:03:cc:56:81:c3:
                    18:4a:94:2b:71:f9:04:a9:7c:65:70:00:74:29:d2:
                    91:41:d3:0b:5a:66:8a:7a:4d:59:17:aa:a1:b2:f5:
                    d5:6e:66:fe:90:16:6c:f8:73:95:92:cf:ce:f1:8b:
                    d5:a8:17:ff:14:f0:85:98:7e:c2:4e:ad:7f:90:ee:
                    ba:e1:46:a4:a2:d1:35:c8:b7:cc:bb:d0:0a:1a:4e:
                    b5:e1:5c:84:9b:49:30:73:58:8b:20:60:38:14:b4:
                    23:be:81:24:3b:18:2d:66:53:a4:8d:d0:86:0d:fa:
                    f3:ba:2a:f9:28:5a:25:98:20:55:f6:c2:68:7f:87:
                    a3:c8:9a:b8:9b:99:b9:01:e6:1f:78:8d:88:4b:44:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:9C:E8:BC:4C:30:C5:9B:BB:57:6E:1E:AD:19:70:3E:5F:C0:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f0b1c92f-2c05-3884-b004-f4df1a35c07e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c4:6f:29:59:04:77:dc:db:1d:0d:f7:e0:28:9e:61:f2:e6:
         0a:74:89:48:68:93:ec:33:2b:de:b6:a6:18:76:a1:7d:57:64:
         3f:8f:83:b8:64:dc:6c:cf:05:e3:90:25:ac:ef:cb:56:7b:05:
         32:35:67:16:06:28:da:bf:80:9b:24:9c:b3:7a:e6:1d:d6:ac:
         4c:c6:6d:8d:ee:de:2b:ea:88:68:37:e7:19:a1:b7:0d:e5:96:
         57:b7:31:31:e7:67:5f:5d:02:13:c2:1e:5a:4f:bc:14:bf:c8:
         33:dc:ea:61:f1:d1:e8:3f:60:8f:28:05:19:b6:2a:88:32:c9:
         fd:cc:b4:39:d9:ca:b1:f7:a7:71:ba:44:d2:f0:d6:f9:16:08:
         81:85:54:92:f0:28:2d:9b:8c:86:ab:24:35:6e:18:a2:b2:44:
         e1:c0:5b:54:68:41:4b:80:a6:c9:7b:88:58:f0:09:95:01:2a:
         ea:0f:ed:5d:06:5d:83:fe:6e:45:63:1e:13:24:13:29:e0:c7:
         dc:ea:e9:6f:72:b5:80:de:5e:05:28:00:3f:45:a0:84:4f:2a:
         42:46:3f:b1:d2:8c:e7:d5:d2:59:28:92:81:a5:0d:24:3f:d6:
         da:c9:82:49:7a:19:7d:c7:64:e4:98:c7:bc:fe:03:82:36:58:
         d3:4b:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:31 2025 by rpki-client