Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0af9bc-820a-3b65-99d0-b2b53a96e6c2.roa
File:                     fc0af9bc-820a-3b65-99d0-b2b53a96e6c2.roa (raw, json)
Hash identifier:          8NGjq8QV4+bKvxmwbnmHjPZlTICyTcsJ5zDarwilZqQ=
Subject key identifier:   91:4D:6D:B1:D3:5D:A4:53:45:60:A8:25:22:BE:9C:8B:DE:DF:71:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B39E66F6301C6CA39A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0af9bc-820a-3b65-99d0-b2b53a96e6c2.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396570
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:39:e6:6f:63:01:c6:ca:39:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=cfde7692-7368-4016-ad6d-d42032aec0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:c9:f5:3a:14:b8:97:ae:a1:09:70:49:d4:
                    74:64:d1:e0:73:9f:7f:f7:b1:07:63:7c:eb:8d:24:
                    a1:7c:40:a4:a6:69:b8:f5:02:5e:fb:7c:b4:f8:49:
                    03:98:79:1b:f0:c9:f0:21:3e:9a:2a:6c:45:f5:07:
                    48:25:32:94:3a:a5:2b:ca:bc:6b:de:20:cf:8e:5a:
                    2f:b6:13:ac:f3:57:52:39:ae:2a:65:d5:8c:0f:dd:
                    8a:70:6a:a1:20:56:11:d5:11:9b:e6:08:db:19:2e:
                    c4:0a:d0:7f:b9:59:6c:0d:3d:5e:d5:dc:7d:72:fc:
                    1a:8a:d5:79:2a:c9:25:c4:f3:2a:02:a7:2a:b8:43:
                    0a:d4:82:45:18:09:e0:a8:b9:50:2d:a7:b1:ba:dd:
                    b7:39:4e:81:4e:88:f1:20:e9:0c:9d:91:d0:05:8d:
                    bf:be:d1:15:c1:6c:8c:56:74:a5:93:f6:b2:6f:0c:
                    bd:d4:93:7c:bb:2b:99:9c:63:7c:5c:c4:a7:2d:64:
                    13:9c:3e:28:54:c7:9a:aa:2d:5b:99:d8:a3:13:fb:
                    54:b2:50:a2:82:01:26:44:b3:33:83:69:a8:43:ca:
                    8d:11:1b:cc:9b:11:7f:3d:b9:19:f4:30:ed:a0:e9:
                    15:2d:33:5a:dd:7b:97:75:8f:21:3d:a5:d5:a0:2a:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:6D:B1:D3:5D:A4:53:45:60:A8:25:22:BE:9C:8B:DE:DF:71:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc0af9bc-820a-3b65-99d0-b2b53a96e6c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1b:79:29:8f:b0:9c:b9:4d:de:b3:d8:05:b3:28:99:2b:76:
         fd:79:27:76:b6:59:59:80:fd:53:4f:13:e8:c9:53:85:bc:de:
         b2:1d:94:5e:45:d2:fa:b7:2e:31:f8:86:a4:7b:df:39:a4:23:
         a0:8e:9b:31:08:fc:01:52:c6:29:28:68:c2:c1:29:b7:81:37:
         cb:51:8e:b7:56:3f:20:ce:e5:fa:14:64:c8:4b:ad:26:70:8e:
         21:a0:3f:a3:1f:fa:9c:a9:db:c8:03:ee:75:4a:18:fd:0f:b9:
         19:0f:18:0a:92:26:0b:e4:48:61:ab:e9:b7:c7:50:f7:16:eb:
         5e:16:7c:06:99:0f:41:1b:09:78:31:e7:39:72:9a:6b:d3:ee:
         83:6f:b8:86:d5:04:35:77:1f:d3:a6:a2:fa:3e:7d:c7:91:50:
         c2:5d:73:01:e5:0c:96:69:d3:d8:fb:b5:1a:31:f1:8d:5e:70:
         3b:e4:99:9d:c6:00:c1:29:83:dd:94:a9:99:9d:b2:6f:c7:b4:
         89:47:68:08:e3:cf:76:4d:99:fd:d3:47:2b:a0:8e:ab:eb:ef:
         c1:81:bd:5b:6d:b2:17:06:64:73:3d:1f:1d:25:92:a7:7c:a4:
         97:50:50:ef:1d:30:8b:23:2e:c1:4e:a0:81:bd:97:d4:7a:9c:
         dc:cd:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:44 2025 by rpki-client