Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
File:                     e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa (raw, json)
Hash identifier:          VmnC1Xmq6wINp8thrK8mhRLBwvF0L6wCraFoWCyjRv8=
Subject key identifier:   B7:53:B0:FF:B9:F0:95:4F:4C:19:4A:62:91:50:DA:AA:7A:C5:32:D4
Certificate issuer:       /CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
Certificate serial:       010D0C9F4328584819CFDE787E7C278FDEBBCB80
Authority key identifier: C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     209242
IP address blocks:        209.46.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:de:78:7e:7c:27:8f:de:bb:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c2a5f43-88ce-4ed0-923f-101346dc0583
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=37541ec2-6589-423b-8c3c-3d7dcd6eb859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:7c:40:33:c5:0a:95:25:4d:3c:bf:6c:fd:
                    b0:b1:b8:76:48:cf:d2:7c:f2:65:d1:dd:e1:23:06:
                    c0:ed:ec:db:a4:c2:d0:eb:e0:94:36:1b:39:07:d5:
                    01:0f:6b:28:44:bc:1b:bf:c6:a0:4a:e3:ea:2c:cc:
                    4d:b7:93:2e:43:2d:6f:da:49:6b:07:a7:5c:ac:73:
                    81:41:6e:36:ec:48:73:c8:c6:94:fd:45:30:a2:7f:
                    6d:82:f0:07:f5:0e:ba:9a:63:2c:a6:b5:84:90:f4:
                    7e:76:41:86:d5:99:1f:00:4e:ac:2d:8b:9f:4f:b6:
                    39:53:c1:93:bc:6c:69:d6:e7:77:d9:72:c4:ad:4e:
                    8f:e6:2e:2f:b1:f5:68:cd:a8:b8:7b:8d:4e:9e:c8:
                    b9:f9:a7:d8:53:f0:7a:63:d7:b7:d3:97:3e:4b:78:
                    01:1e:bf:8c:85:e7:e3:8b:7c:29:b6:1f:d4:69:69:
                    7d:2c:9f:4a:0f:e0:a7:e7:bd:29:a9:bf:70:a9:93:
                    48:11:68:3c:24:85:e6:f8:a7:94:a8:80:30:cd:03:
                    e7:6c:5e:83:9e:06:77:d9:56:a2:29:08:fd:52:63:
                    d6:c4:68:0f:d5:58:b5:73:8b:ab:12:19:78:12:e2:
                    69:af:dd:9e:d2:3a:e5:18:7b:e7:a2:a8:3d:0a:92:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:53:B0:FF:B9:F0:95:4F:4C:19:4A:62:91:50:DA:AA:7A:C5:32:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/e3aec915-0ed4-34d2-9ad7-9141fed0d7d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583/4c2a5f43-88ce-4ed0-923f-101346dc0583.crl

            X509v3 Authority Key Identifier:
                keyid:C4:01:4B:12:AF:34:9B:69:52:4A:2A:CC:0E:1A:9C:09:A3:11:2C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c2a5f43-88ce-4ed0-923f-101346dc0583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.46.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:53:5b:87:bd:1f:43:eb:96:f9:36:18:06:9e:2b:58:02:
         e0:f2:e0:38:eb:5e:99:2d:53:c1:e0:30:4d:de:85:ed:47:43:
         7b:f6:63:f6:d3:5b:6d:29:ba:64:99:35:43:82:a4:d8:c3:cb:
         fc:88:74:ff:19:44:69:30:1a:b0:e7:5f:93:53:9c:4d:81:4b:
         76:d6:00:ca:dc:e9:26:ce:ff:41:3e:24:67:ec:79:45:d1:04:
         1e:1d:b0:3e:81:48:86:65:f2:61:60:79:e1:54:bb:c1:3a:41:
         3c:65:20:c7:2e:b5:82:6b:59:6f:ea:73:32:af:07:7a:72:9e:
         c9:55:c5:98:6a:7b:6a:07:25:a7:d3:57:c3:c8:cf:04:a6:3e:
         5a:44:33:c3:c9:ca:12:9e:26:7b:42:92:48:ab:80:f4:58:74:
         c1:10:0a:15:78:e0:8f:37:52:bf:9a:87:6a:d4:6b:e1:fd:ea:
         22:cf:ed:a0:02:1c:77:90:64:1f:62:6d:d5:60:6e:16:d9:3c:
         65:0f:e2:58:9a:f6:a4:22:e3:b2:60:fa:df:a8:01:f2:31:ac:
         d5:42:ee:b8:a5:bc:33:4d:a7:2d:c6:d5:73:9e:65:18:d0:12:
         13:ca:aa:b2:15:85:ea:32:c5:91:09:92:ea:46:06:c2:3a:b9:
         92:18:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:21 2025 by rpki-client