Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa
File:                     f3acdabd-de67-395d-a125-ff8f03fad851.roa (raw, json)
Hash identifier:          d4lnTE6G7U0ScgX3wpm8Sr9Q/Ev2uGB+Tglh1dW7LJM=
Subject key identifier:   7C:A1:38:C4:A1:60:9F:18:98:B6:EF:9C:6F:7F:2A:B9:06:9B:01:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485E35A3810EE515CA5932A800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     396571
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:a3:81:0e:e5:15:ca:59:32:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=371917bf-46c7-4d57-9f24-e42e9a672faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:f5:1f:63:e4:f6:54:50:b4:60:63:79:82:
                    98:55:e4:8a:16:48:d2:b1:91:5d:60:f2:da:93:6d:
                    a9:73:a5:68:c8:34:72:8d:58:78:bf:73:a3:5d:8c:
                    98:3d:60:d6:1f:99:d0:4a:fb:f3:4b:72:b4:84:ab:
                    89:48:a8:3e:28:47:b5:75:83:fe:b1:98:aa:db:3f:
                    a6:9d:e8:60:30:76:47:93:f7:10:5b:1a:bb:38:14:
                    58:4a:48:f5:ff:5c:90:23:73:cb:21:68:9d:10:f1:
                    47:43:28:88:00:14:88:82:19:90:02:8f:65:86:50:
                    40:39:36:6c:16:04:5d:2b:89:ee:de:f7:f2:b9:7f:
                    8b:08:94:59:d3:19:c6:0a:6e:09:85:c6:4b:72:36:
                    44:1d:c2:db:5c:c5:b5:c9:8f:73:76:df:64:5e:f5:
                    fe:9c:58:84:56:ca:99:1d:e6:10:04:60:6a:fc:f7:
                    56:f0:86:20:93:85:46:00:cc:a2:3b:15:4b:74:60:
                    df:2b:82:f5:09:78:6d:45:7b:2f:05:84:f4:90:da:
                    8f:79:03:e2:f4:22:21:d3:54:9f:1e:c1:07:26:53:
                    51:3a:44:84:4b:2d:0f:c6:63:c6:88:d8:83:31:f6:
                    37:34:71:9c:9c:ee:45:8c:36:a7:7c:6c:36:b8:c5:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:38:C4:A1:60:9F:18:98:B6:EF:9C:6F:7F:2A:B9:06:9B:01:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:9d:cd:e6:93:7a:4c:0f:0a:43:ae:c9:75:5f:ac:38:dd:
         1e:40:48:08:73:f5:5a:6e:4f:0f:b1:15:65:c3:17:5e:45:6f:
         88:d1:17:a7:b8:b8:d1:d9:e8:2c:d8:f7:2f:da:2f:6d:94:8a:
         fa:0a:b2:3d:c9:88:0a:4f:71:8d:ee:40:a4:42:08:0a:2f:77:
         bd:cc:41:32:da:0a:8a:d0:a6:61:3a:82:22:88:03:b3:f4:bd:
         43:60:29:7f:9e:03:0b:b3:4b:3d:82:e3:80:88:3a:a8:c2:e7:
         8a:84:69:04:85:44:31:be:fa:9d:cd:00:ae:8a:0b:3d:4f:83:
         e5:20:2f:82:83:0e:88:6d:66:3f:55:d4:bd:67:ea:13:13:ca:
         18:01:23:a6:7f:ce:ad:5d:ba:43:70:06:9a:90:b7:73:89:2f:
         46:67:99:59:00:e8:bb:6d:b6:dc:61:60:48:48:77:f9:de:3e:
         bb:60:af:4e:7c:c7:4a:da:05:69:0d:99:4e:be:aa:55:72:93:
         eb:00:c6:70:db:bb:c3:f0:d3:b1:92:4c:87:ff:00:51:7d:d7:
         65:f7:b1:3a:16:78:01:5e:43:58:cf:bc:2f:a0:07:0e:99:77:
         43:dd:ea:c5:a5:39:e0:e5:b3:f0:ca:d5:cd:8a:da:63:95:84:
         87:4b:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:40:15 2025 by rpki-client