Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/981d7db8-7c78-3d65-b73e-ff50409127fb.roa
File:                     981d7db8-7c78-3d65-b73e-ff50409127fb.roa (raw, json)
Hash identifier:          lhigp70N7PnVYB6MhPKRKRJPzZrmWcENd6QlQ1nBSus=
Subject key identifier:   6B:28:1C:52:C5:BF:90:BF:C9:D2:FE:CD:E0:DA:08:1E:B9:A5:16:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF2F729CA56EB85E26840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/981d7db8-7c78-3d65-b73e-ff50409127fb.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     397196
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f2:f7:29:ca:56:eb:85:e2:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=21512af7-9d48-4d88-be06-9d381a85e854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:95:57:74:f6:29:86:53:8c:68:77:7b:6b:
                    5a:0c:e3:c3:5a:8f:32:36:56:0f:3c:8f:d0:84:21:
                    d7:2a:7e:37:ab:af:6e:c7:f9:97:32:cd:06:85:c1:
                    91:ab:f9:80:34:99:fd:34:bd:5d:c8:8d:67:0e:79:
                    8f:e1:b6:00:70:fe:4c:9e:00:9b:12:db:32:33:8b:
                    5b:d5:2c:5a:98:91:a6:0c:58:b0:2d:4e:3e:69:aa:
                    8c:26:c4:86:34:6b:b7:e5:85:ca:f8:0b:e4:df:08:
                    51:05:da:41:8c:1a:58:5f:43:f7:79:24:46:48:a6:
                    c3:48:2f:ae:1a:06:5f:16:9e:b5:5c:db:88:23:15:
                    d7:52:f6:c2:d7:c7:13:c6:e0:47:c1:95:ec:ef:92:
                    e4:01:8b:4a:02:69:0d:c5:14:ff:6c:52:11:8b:08:
                    16:37:33:93:e4:50:97:4d:9f:71:b9:a9:b4:9d:eb:
                    ad:a3:a4:db:e2:3d:b2:14:31:ef:a8:11:9e:2d:eb:
                    01:80:37:8b:20:01:a9:ef:1b:e0:c5:42:16:06:f0:
                    e7:da:b3:25:d5:4b:51:10:8d:56:b7:7b:c3:79:0b:
                    8d:d0:6c:db:53:ea:47:1b:f8:d2:26:cd:a0:ee:9b:
                    34:30:5a:35:ff:bb:6a:75:c6:ba:68:21:55:d4:42:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:1C:52:C5:BF:90:BF:C9:D2:FE:CD:E0:DA:08:1E:B9:A5:16:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/981d7db8-7c78-3d65-b73e-ff50409127fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:69:bb:ce:d6:b7:2c:f5:e5:f4:53:ee:81:0a:7d:74:5f:98:
         4c:0d:4b:1a:c8:5e:25:15:79:6a:8b:1c:19:59:f4:f5:e3:f4:
         3f:52:42:9d:31:de:f0:ca:a9:a1:9c:dd:28:4f:3f:1e:64:09:
         c1:9e:08:9d:d3:c6:c7:8e:c7:eb:9d:a7:54:5f:fe:6a:9e:f8:
         b2:18:4e:ef:30:d3:30:8c:09:85:e7:a0:3c:d0:02:b2:20:9c:
         08:0b:2a:68:b1:8f:42:06:a8:73:98:1e:18:d0:fc:c9:98:3f:
         05:f9:39:c8:17:91:b3:08:f5:a0:93:90:eb:5b:23:b9:01:89:
         df:b0:4d:f5:59:c7:bb:ce:b2:f0:15:8f:b8:d5:49:54:03:ea:
         e6:64:b8:71:ea:7d:58:74:68:a3:11:69:82:52:72:d6:47:61:
         57:8e:df:96:bf:d9:57:4d:9f:d3:7f:49:12:e8:de:18:0a:0d:
         23:55:ee:fd:96:44:67:73:11:dc:69:98:13:d0:20:fd:16:f9:
         ea:50:c0:ac:22:a1:50:d8:93:3c:03:20:70:5b:e6:62:98:25:
         f2:5b:20:12:e7:18:f7:3f:34:8f:53:46:df:35:76:67:bf:a3:
         59:97:27:f8:64:c8:d4:4d:2f:a5:b7:b2:87:fb:6d:8f:96:f5:
         43:1d:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----