Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
File:                     fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa (raw, json)
Hash identifier:          rAd/0m15z5y1TabDo3/taaKatOCUONHP5CmPk219NcY=
Subject key identifier:   13:F5:4F:43:4E:A4:55:64:BF:2A:E9:E7:5E:6D:0B:0E:E1:50:6B:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584894A5DCB7FEDA8E5A3E2A4D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     396572
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:dc:b7:fe:da:8e:5a:3e:2a:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=033f25d4-7154-4638-b80a-df1684b5a650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:2f:eb:59:18:2a:8b:5c:13:3e:72:2e:84:
                    f1:6e:29:77:4d:5d:26:34:b7:73:64:6e:81:71:6b:
                    a4:fc:06:ff:88:15:30:4d:d1:7d:93:3e:33:04:58:
                    b7:27:02:96:d6:9d:91:58:7b:c2:28:73:41:e5:90:
                    d2:51:55:57:ad:7c:23:af:f9:b3:19:81:f4:56:81:
                    d7:2a:c7:64:26:9a:1b:e9:21:b9:e5:fd:21:bb:34:
                    24:6b:78:12:85:87:70:7a:77:87:45:29:ee:91:51:
                    72:68:0c:ef:71:76:cd:19:f6:24:eb:54:93:d4:8c:
                    f3:dd:21:a8:79:72:c8:ff:fb:d4:2c:83:e9:cb:95:
                    3b:59:70:e7:fe:7f:62:8b:b7:f5:e7:4f:27:bb:6b:
                    57:11:ae:ea:cd:c2:21:1f:ef:97:dd:71:6d:9e:0f:
                    1f:91:b6:96:2b:3e:5a:ee:be:0f:f7:f4:a7:8a:2d:
                    a8:63:39:2f:ed:ff:66:02:18:ff:ef:45:89:75:7e:
                    98:92:dd:1d:3b:8a:6c:17:67:82:22:23:06:a0:fd:
                    7c:84:8b:c3:2c:67:db:f5:52:20:24:8c:46:a3:93:
                    ae:b1:b9:5d:79:19:84:9c:b7:a9:90:4a:c6:71:9d:
                    be:93:a7:fb:b9:ce:74:e8:9d:c3:49:3f:f3:c4:6f:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:4F:43:4E:A4:55:64:BF:2A:E9:E7:5E:6D:0B:0E:E1:50:6B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fce8cac9-8615-3bf7-9bfb-f95895c1e947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:0a:3d:1a:79:60:88:41:c0:39:e1:09:4e:4f:5a:49:56:
         3b:3c:ee:d8:8a:41:72:b2:32:a0:a7:99:fe:2a:53:88:73:0e:
         e8:71:3e:7e:40:a2:80:3e:de:75:e3:54:b4:c4:df:1f:53:ed:
         bd:08:ba:4c:0f:33:91:0f:14:92:6c:52:c9:85:ab:9c:ad:d9:
         d9:d3:03:6e:8b:a9:93:a0:37:3e:06:98:9f:9e:18:46:de:51:
         c6:c6:1f:05:fa:40:b5:e8:40:da:ad:77:e7:7f:43:a7:96:41:
         d3:3b:26:17:51:22:51:54:d7:02:b8:06:65:23:3c:56:96:f2:
         66:83:bb:0d:36:09:d8:96:26:00:76:50:30:46:d1:b0:9c:6e:
         9c:08:68:f1:b1:9f:d7:4b:83:7f:34:2d:90:59:91:8e:06:f2:
         e8:c2:56:2f:69:28:5e:fc:01:90:2b:ba:e3:4b:90:9d:77:9b:
         68:2c:e2:24:bb:fe:1b:23:63:28:b6:1f:5c:f6:d2:50:0c:73:
         8f:9b:cf:11:75:37:d3:0b:34:82:6b:f2:25:38:28:7b:cd:9b:
         aa:a0:e8:c4:6b:ef:cc:5c:1d:68:b6:0c:67:af:c0:d5:93:6a:
         2d:48:6f:c0:d6:9a:7e:6e:1d:f1:2f:37:6c:d9:b2:44:d1:ef:
         33:f7:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:10 2025 by rpki-client