Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
File:                     0ece9ded-a213-3cef-a817-7375a4dacf4b.roa (raw, json)
Hash identifier:          fPOdSZcdx16RkmoUE0eAf8LYowhszwivaYEXKQo3j/E=
Subject key identifier:   1D:C9:1B:FA:5D:78:97:62:5A:C5:14:61:5B:74:AF:5F:16:73:4A:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744B047D79DC51A17BC1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396578
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4b:04:7d:79:dc:51:a1:7b:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=91c258d4-64b1-41a1-96de-28285f56f5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c6:c4:e6:53:1b:f4:f9:1a:0a:07:e4:ac:99:
                    86:41:0a:b8:8e:64:95:3c:ae:cf:b6:f5:43:0e:c8:
                    12:55:a7:e7:68:e3:00:80:01:38:c4:00:37:fc:fe:
                    b8:89:dd:95:0a:bd:a5:4c:94:16:2b:fa:7e:ff:d8:
                    68:54:7c:50:b3:51:6c:9d:bb:a5:f0:16:74:23:99:
                    99:f8:41:44:8f:41:02:6f:23:ca:76:51:e9:ed:28:
                    c6:65:25:0e:10:c3:94:b4:b4:b1:71:49:cf:0e:78:
                    07:ff:7d:ed:e1:37:f3:3d:52:e5:3e:1c:7f:59:f4:
                    6c:d0:06:88:28:bb:a4:8c:db:fe:f5:fa:b8:5b:ee:
                    9b:e4:13:ba:73:08:73:55:76:d3:49:97:c1:69:a4:
                    25:12:77:43:39:34:27:ff:c3:15:98:d0:b8:85:7f:
                    98:1e:3e:f9:f3:c7:33:6f:f8:38:0c:4d:35:41:db:
                    64:85:ac:0e:e7:39:c2:26:ea:35:d3:ed:4a:3f:9d:
                    69:6b:46:2b:f9:c7:24:ec:b1:b2:60:33:bd:3a:d3:
                    d5:03:9c:9d:82:37:1a:7b:ed:44:cf:44:32:a8:fd:
                    9f:d7:ab:49:cc:cd:9b:24:e0:9d:d9:4d:d3:8a:91:
                    b2:57:73:bd:d1:f8:77:f7:b0:36:a4:4e:0a:46:2b:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C9:1B:FA:5D:78:97:62:5A:C5:14:61:5B:74:AF:5F:16:73:4A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:4c:32:53:67:fd:55:f3:77:9e:b3:81:aa:83:f9:ca:dc:25:
         90:0d:68:52:73:c7:69:e0:72:6e:b5:c4:75:49:fa:dc:28:d8:
         78:27:e3:ce:03:e3:90:23:3b:be:d0:43:b3:d8:e7:cb:ab:15:
         36:95:16:71:d2:ac:ec:28:e1:9f:67:9c:8f:7f:9b:6b:71:91:
         e9:8c:a8:76:52:44:19:3a:05:ac:ad:28:7a:12:22:4c:ec:64:
         f0:88:ca:06:80:95:25:41:ea:8a:4b:77:8f:21:b4:9c:b1:55:
         44:c8:95:70:6e:6b:47:f9:70:89:5e:66:3c:50:8d:dd:88:41:
         5e:7c:4f:df:d3:92:0e:6c:e5:91:44:f4:fa:08:ca:b6:cc:fc:
         b3:65:a4:45:08:6d:40:1c:43:2b:a7:3a:94:33:1d:b2:29:e9:
         97:03:ac:8e:04:ed:c1:6b:9b:ca:89:40:67:bf:95:b0:30:47:
         37:ce:40:a4:a5:65:b4:4e:a0:88:f1:5f:c3:17:01:cb:c8:f6:
         08:8b:39:c0:ad:19:7b:12:92:6e:4e:95:00:e9:83:85:74:6c:
         ec:80:a2:38:83:0c:3f:e5:8c:75:93:9d:cb:d4:5f:f0:dd:1a:
         0a:ef:0f:6f:7d:85:34:33:4c:96:5c:30:8f:0e:f8:d0:c3:f3:
         de:83:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----