Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa
File:                     115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa (raw, json)
Hash identifier:          HxwbRTaWeeROc9h/qxXlLE0nehAsSaE1TZQu05KCe1E=
Subject key identifier:   B2:B4:92:E7:7B:6C:AB:E9:C7:86:C8:99:50:0D:5D:CE:DB:BD:76:B5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183D977FDA3D414468E80B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396564
IP address blocks:        192.82.133.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:d9:77:fd:a3:d4:14:46:8e:80:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=0841a32e-1264-4fb8-b47f-8d3cc86d1c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:16:8c:9f:db:2b:79:2e:ec:e5:69:c3:43:
                    37:38:35:00:21:12:7d:60:07:e9:4b:07:25:73:b4:
                    0f:93:d5:2c:9e:13:4c:1c:a4:48:21:56:cb:ae:c0:
                    a8:e8:e3:69:89:73:1e:05:b4:ef:f7:de:9f:8c:be:
                    f4:66:75:86:fb:d8:da:4c:5b:52:0e:7e:8a:c1:5c:
                    ac:60:9a:c9:7d:13:07:59:30:4c:04:cd:33:27:b7:
                    be:32:e3:6c:d4:51:67:29:3b:b8:ba:f1:c0:3a:0d:
                    d9:3f:9d:6e:42:b0:03:be:7c:0f:97:65:91:cf:b5:
                    69:fa:04:ba:76:2c:dc:18:78:dc:c2:61:09:88:24:
                    40:b6:b6:95:7e:67:35:f8:84:18:be:29:e1:13:c1:
                    55:ec:ea:5a:6f:dc:ad:34:27:4f:57:ca:59:76:30:
                    a7:94:cf:1c:d4:9c:ee:4a:77:e4:b3:3e:18:aa:c0:
                    c2:a4:94:9e:80:d0:47:7f:63:31:bc:48:df:32:8b:
                    50:30:05:99:1f:18:b7:f0:30:bc:19:fd:32:09:0f:
                    68:62:f7:a6:e7:e6:2c:87:c1:db:a8:40:7f:af:0b:
                    6d:09:51:42:75:c2:65:5e:85:e8:7f:9e:aa:64:f8:
                    b5:8b:23:ce:17:8d:0c:9e:e2:b6:52:f7:14:67:fe:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B4:92:E7:7B:6C:AB:E9:C7:86:C8:99:50:0D:5D:CE:DB:BD:76:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/115de1c1-9d48-30d8-b75b-f70e8cd70d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ce:79:be:64:55:4d:cb:d5:bf:27:90:27:a4:42:a6:c4:45:
         b3:46:87:b7:cc:99:fe:3c:c6:5c:99:53:da:00:3a:0e:7b:b9:
         cb:a5:d8:ce:19:7c:1a:01:ce:00:e2:b9:84:f3:f5:46:74:f3:
         a3:38:5d:bb:6d:60:e0:6b:49:ea:74:79:a6:d8:f7:3d:46:61:
         6a:97:18:a3:57:57:11:aa:33:ad:50:2b:73:22:f6:b0:e2:1e:
         bc:01:af:3b:8b:68:4c:dd:36:fe:dc:0a:96:f5:a8:67:0c:fd:
         0d:9f:4f:61:33:80:93:be:12:6a:22:bc:3a:74:1e:b5:10:ff:
         84:93:6b:14:71:fe:e0:38:90:bf:02:b2:e2:9c:ce:77:b4:cb:
         49:72:d8:94:01:cd:46:80:67:4f:12:dc:4f:bf:cb:6c:22:f3:
         4d:e5:ae:2e:4d:12:90:d2:05:e3:6a:88:d5:25:d6:88:65:8f:
         a7:92:4a:d6:96:2d:e1:f2:46:4e:c0:9b:ac:0c:5f:d1:6f:3d:
         6a:52:ad:59:4d:2c:6a:9c:7c:1d:96:dd:e6:53:18:ed:65:31:
         59:47:45:bc:56:46:a3:1f:92:e2:9e:d4:0f:28:22:80:d5:c0:
         d6:d3:f9:60:59:95:f0:62:34:b8:2d:69:3a:d3:00:ac:ab:48:
         9e:e6:cd:56
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9l3/aPUFEaOgLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDg0MWEzMmUtMTI2NC00ZmI4LWI0N2YtOGQzY2M4NmQxYzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEAWjJ/bK3ku7OVpw0M3ODUAIRJ9YAfpSwcl
c7QPk9UsnhNMHKRIIVbLrsCo6ONpiXMeBbTv996fjL70ZnWG+9jaTFtSDn6KwVys
YJrJfRMHWTBMBM0zJ7e+MuNs1FFnKTu4uvHAOg3ZP51uQrADvnwPl2WRz7Vp+gS6
dizcGHjcwmEJiCRAtraVfmc1+IQYvinhE8FV7Opab9ytNCdPV8pZdjCnlM8c1Jzu
Snfksz4YqsDCpJSegNBHf2MxvEjfMotQMAWZHxi38DC8Gf0yCQ9oYvem5+Ysh8Hb
qEB/rwttCVFCdcJlXoXof56qZPi1iyPOF40MnuK2UvcUZ/4rRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLK0kud7bKvpx4bImVANXc7bvXa1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTE1ZGUxYzEtOWQ0OC0z
MGQ4LWI3NWItZjcwZThjZDcwZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWznm+ZFVNy9W/J5AnpEKmxEWzRoe3zJn+PMZcmVPaADoOe7nLpdjO
GXwaAc4A4rmE8/VGdPOjOF27bWDga0nqdHmm2Pc9RmFqlxijV1cRqjOtUCtzIvaw
4h68Aa87i2hM3Tb+3AqW9ahnDP0Nn09hM4CTvhJqIrw6dB61EP+Ek2sUcf7gOJC/
ArLinM53tMtJctiUAc1GgGdPEtxPv8tsIvNN5a4uTRKQ0gXjaojVJdaIZY+nkkrW
li3h8kZOwJusDF/Rbz1qUq1ZTSxqnHwdlt3mUxjtZTFZR0W8VkajH5LintQPKCKA
1cDW0/lgWZXwYjS4LWk60wCsq0ie5s1W
-----END CERTIFICATE-----