Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc23386-dfb8-390c-9c98-843348ee4af2.roa
File:                     fdc23386-dfb8-390c-9c98-843348ee4af2.roa (raw, json)
Hash identifier:          r/TEfi0BWklUh3OG4M8txOor5b4gR5hFciYhHpqbmuA=
Subject key identifier:   53:7E:F1:FD:50:EF:A0:D4:CD:A5:21:1D:90:A4:92:4D:F8:92:33:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FCABD691A2C659343F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc23386-dfb8-390c-9c98-843348ee4af2.roa
Signing time:             Thu 19 Dec 2024 13:45:13 +0000
ROA not before:           Thu 19 Dec 2024 13:45:13 +0000
ROA not after:            Wed 19 Mar 2025 12:45:13 +0000
asID:                     396585
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fc:ab:d6:91:a2:c6:59:34:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:13 2024 GMT
            Not After : Mar 19 12:45:13 2025 GMT
        Subject: CN=206c1d2b-1b38-4ef5-a82b-7e72843bfc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:43:f0:4a:8b:72:cc:4d:4f:bb:19:64:16:
                    9c:c2:a0:88:77:3e:d4:6d:0d:96:2a:73:ea:a4:e1:
                    76:ec:80:e5:5c:de:c2:0a:08:12:62:fb:88:a5:3e:
                    2e:1c:3d:e1:50:4a:53:0b:71:d1:e8:d1:ad:70:5c:
                    08:e4:42:8c:86:67:79:85:03:85:b8:33:c0:22:7d:
                    10:c5:46:82:63:42:21:b4:dd:42:74:84:b3:d1:e3:
                    41:93:10:5a:91:59:75:62:d9:6b:7b:c6:6e:82:b3:
                    22:f3:66:49:41:98:49:6d:1f:8c:a2:45:b0:5c:1f:
                    d0:bd:33:65:ad:1e:ba:a3:80:11:96:6b:e1:a3:a1:
                    70:99:1b:f2:fc:f0:65:03:00:8f:f0:ee:72:34:15:
                    31:c9:46:5e:18:53:2f:df:51:67:af:28:dc:a9:94:
                    0c:73:88:0b:9f:1e:33:1a:00:ef:58:7d:b6:7c:50:
                    84:5c:a7:55:bf:aa:35:3f:87:8a:62:d2:c8:b5:7d:
                    30:36:fb:67:aa:f1:13:92:ec:bb:5a:f2:9d:f9:92:
                    65:60:7d:fd:56:40:74:de:fd:e3:c2:89:93:f4:d1:
                    17:95:eb:cf:bb:9e:56:33:16:32:9f:f5:34:57:c0:
                    16:be:27:0c:25:f4:c3:94:de:4d:25:3b:a8:d4:9f:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7E:F1:FD:50:EF:A0:D4:CD:A5:21:1D:90:A4:92:4D:F8:92:33:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc23386-dfb8-390c-9c98-843348ee4af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:ba:b8:a1:83:a8:1e:10:7f:e4:36:29:e0:56:af:ac:af:
         dd:54:64:43:78:3b:16:9f:89:b0:96:f8:b7:82:57:2d:a5:59:
         89:5f:b5:55:7f:d1:c5:3c:56:d4:54:2b:af:b7:32:61:b2:36:
         5d:8f:9b:26:06:94:ec:65:ac:ba:80:b3:a4:58:61:fa:de:bc:
         ac:3e:fc:19:b9:ce:52:89:0a:0a:b8:3c:b5:e9:ac:67:c5:12:
         c5:cf:21:4b:04:5a:8f:2b:8c:ff:58:f9:1e:e3:aa:70:ee:d5:
         67:3f:6d:93:f6:12:86:33:7c:ec:7c:46:48:c9:12:40:ca:7a:
         94:28:7f:c5:9e:39:bd:1e:a6:58:ea:08:00:45:5e:59:fc:b9:
         c0:bf:17:08:10:a3:00:ef:96:e5:c7:91:e1:80:86:37:a3:27:
         ac:4d:44:df:78:f5:30:33:67:e5:da:68:61:d2:7a:fa:ec:12:
         cf:b4:66:25:98:09:e4:35:39:b4:4b:db:8d:b6:89:23:e7:8e:
         fe:af:12:48:c1:e4:8e:e9:f0:90:63:ad:99:ac:fb:4d:66:e6:
         7d:fd:4c:97:a3:cb:d5:9f:04:6d:b4:f2:4f:7d:c4:6a:3b:b5:
         21:68:26:ba:09:40:f2:bd:9c:c5:45:22:0a:69:95:b8:48:c1:
         91:1d:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:06 2025 by rpki-client