Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
File:                     f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa (raw, json)
Hash identifier:          eoDK3IBSELCS5tD2yIaoEneVKENeJczEbb89Ru7Tefk=
Subject key identifier:   F8:0C:E2:37:F2:2C:0A:AA:17:92:E0:0A:82:01:6B:A1:30:5E:EC:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C0B0DC5A749643558E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396603
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c0:b0:dc:5a:74:96:43:55:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=68f1105f-2219-4e33-882f-0014f198c81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:7e:8d:55:80:35:aa:f3:3d:d3:82:07:b8:
                    db:86:96:5f:10:9f:10:8c:d0:e6:df:ed:8f:10:7b:
                    5e:76:f8:ce:df:68:1f:79:b4:56:ce:8b:ef:61:bb:
                    7e:41:b2:1c:d8:0e:bb:bf:d2:91:2e:7a:03:72:83:
                    5c:63:cf:be:3e:8f:31:7f:87:e5:3e:08:34:35:c0:
                    0d:76:31:70:f0:2b:c4:ae:8c:67:38:ff:66:29:bc:
                    40:01:da:bf:2f:ac:45:61:53:1d:69:7a:1b:f7:83:
                    9e:f3:a8:58:52:96:63:90:b2:26:d0:9f:2a:41:bb:
                    77:cc:8b:26:4d:f4:eb:bf:df:54:af:4e:dc:63:ba:
                    d8:c1:cd:c8:a5:ba:28:84:74:81:dc:c3:5d:68:4b:
                    09:d1:1e:85:d5:e2:0d:52:28:ed:fe:73:db:b4:3c:
                    9c:2f:43:ff:73:f4:c2:0d:84:a6:d0:a0:b5:82:a0:
                    98:60:07:26:2d:fe:d7:29:c9:f4:07:30:16:4f:4f:
                    25:1a:1d:78:dc:58:d9:a8:ae:3e:1e:96:9d:2e:10:
                    f8:f4:fc:0b:64:06:56:5a:db:6e:77:88:c9:22:ed:
                    de:6e:26:25:e3:e0:d1:3b:9d:d0:a1:ff:d3:b2:89:
                    ff:0a:6d:d6:f3:88:f4:08:81:00:c1:59:c0:80:0e:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0C:E2:37:F2:2C:0A:AA:17:92:E0:0A:82:01:6B:A1:30:5E:EC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2becbda-031b-316c-9d75-bd8c4f6a57a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:dc:48:6f:46:06:26:9f:58:59:a8:41:0c:46:23:b8:67:
         93:fb:87:32:ab:83:a8:ea:9a:78:fd:5b:1c:33:08:14:de:9e:
         cb:b5:87:b1:44:86:34:e6:10:dc:41:67:20:6e:42:14:6c:99:
         e0:e5:9d:35:76:a9:79:ef:11:4f:fa:60:8f:ba:40:bf:5d:ab:
         3b:30:d6:d6:59:52:32:70:b9:e2:ff:8b:89:28:4f:2a:72:7e:
         7f:5d:07:cb:ef:c9:d1:63:61:4b:19:7d:8a:80:02:79:82:fe:
         2e:3b:53:d8:fa:34:11:19:34:71:c0:03:38:7e:5d:c2:fc:ab:
         35:f8:ce:a8:1b:06:58:93:6c:a1:bc:3b:6a:7b:4d:dc:ee:85:
         e2:f1:9c:20:0e:5a:f9:cb:26:e4:24:9e:92:76:42:42:bc:a5:
         91:09:c6:83:dd:ba:ff:44:b5:1e:ba:52:59:18:73:87:e0:ca:
         e6:ce:69:3a:2f:d1:3b:40:67:82:75:30:f0:af:29:7c:38:d1:
         cb:d0:e4:4f:31:8d:30:3a:82:ad:08:d5:9a:ac:6a:57:41:52:
         0b:5b:3e:ad:99:87:a4:78:89:4a:e5:a8:d1:1a:8a:d1:b7:8d:
         1f:92:2b:dd:d4:32:f3:6a:0b:b0:f6:11:2b:39:25:02:71:31:
         80:0a:0f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----