Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa
File:                     5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa (raw, json)
Hash identifier:          H5guN5/yVUZRnDlKV7bLndJ9x/sX8njf90EWV2EwHcA=
Subject key identifier:   F6:5C:C8:5F:BA:C6:C2:10:9E:E1:C8:01:5A:70:6B:7A:11:42:A4:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F1C27815FF71B0219880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396587
IP address blocks:        192.82.134.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f1:c2:78:15:ff:71:b0:21:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=05d775da-fe46-4ed2-91dd-4c77f0944336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:5b:0a:ba:80:cd:24:63:7d:08:f8:48:ed:
                    03:f4:2d:b3:c5:53:d3:83:a6:f6:57:ca:f6:fc:2c:
                    30:5a:93:fc:bd:3e:07:7b:47:65:3b:cb:71:b4:69:
                    a3:87:e5:e7:45:88:16:ec:a4:b2:82:85:93:6b:cc:
                    7d:91:12:40:14:f0:55:91:9a:0c:f3:3f:e2:44:f6:
                    e7:ef:af:d8:83:8b:f4:1e:88:9a:7b:e1:4b:07:5b:
                    3e:40:2e:2d:33:15:2d:ee:60:92:03:07:86:5c:bd:
                    8a:ba:6f:ed:c8:69:a3:bd:94:cb:d6:a0:52:b4:31:
                    74:9e:a3:1e:51:c1:e2:1d:b7:7e:c7:bd:8c:bd:b4:
                    52:73:37:45:e6:21:79:d3:73:28:be:b8:18:47:d4:
                    32:c8:7f:e5:90:ef:44:e2:f9:2f:cf:ed:26:fc:1e:
                    e7:62:b0:a9:97:f3:e9:5d:ff:07:fc:b7:9c:be:86:
                    db:e3:78:ef:13:bc:14:78:68:a7:a2:d7:b5:04:b7:
                    82:6f:6e:42:d6:92:a5:8e:48:13:15:36:f8:e4:28:
                    bd:32:0a:08:e9:c2:e0:64:77:5a:e2:88:26:1d:d2:
                    e1:67:67:21:11:fa:fb:3c:1e:e3:63:2c:d9:a5:89:
                    31:8a:68:33:e3:ee:33:11:46:e2:da:c0:2a:57:54:
                    9f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:C8:5F:BA:C6:C2:10:9E:E1:C8:01:5A:70:6B:7A:11:42:A4:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5aa1d0c1-e367-37aa-8082-0b6e94b7e769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:90:52:60:d9:5d:52:90:f5:fa:4a:6d:17:cd:7a:52:fc:06:
         7c:cd:66:70:3d:2b:63:63:54:e9:6f:ee:2f:bc:58:e8:8c:39:
         79:93:e3:9f:1d:e5:7d:4e:ed:91:c4:d6:fe:7d:c2:06:fa:6e:
         75:0a:f2:c4:8b:6e:6a:a9:44:55:ca:d8:36:18:19:75:1d:07:
         cc:15:56:28:88:35:b1:08:ef:9d:49:09:9d:0f:78:c4:00:98:
         33:8b:b8:b4:47:22:99:54:9e:5d:06:b3:fd:2e:52:1a:84:a2:
         e7:14:fd:93:89:a5:6c:a3:6f:39:5d:ef:62:8d:29:b7:cf:ac:
         65:9a:18:39:5c:62:9a:9c:bb:55:54:30:e4:4f:c5:25:2e:20:
         e1:38:08:23:61:79:78:fd:47:d4:69:cd:dc:e4:05:c0:10:20:
         1e:38:59:d3:3b:cf:54:a5:33:79:12:f2:a5:01:e1:18:20:16:
         68:eb:6e:e1:e1:33:22:f8:f8:43:5d:75:b0:c8:bc:6e:2d:63:
         67:10:d0:f0:6c:f3:cf:16:7c:09:26:dd:67:d6:0d:7e:40:ff:
         26:d5:3b:02:89:02:b5:9c:a4:dc:82:3d:c7:08:1b:61:20:f4:
         71:b2:b3:c5:5a:99:d8:cb:be:04:de:9a:c0:37:45:ba:41:1e:
         a7:7e:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----