Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc524934-c2ac-333c-83d9-bdaa40f2500d.roa
File:                     cc524934-c2ac-333c-83d9-bdaa40f2500d.roa (raw, json)
Hash identifier:          1aETOae0tBOD8kK2uIm4mYYKvP0e+zbwK/GjcJiMh9w=
Subject key identifier:   D9:80:EC:EE:8B:C3:83:CD:B7:F8:2B:32:1E:A6:2D:0A:73:41:5F:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844562A2078C09D4A5AF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc524934-c2ac-333c-83d9-bdaa40f2500d.roa
Signing time:             Thu 30 Jan 2025 13:46:19 +0000
ROA not before:           Thu 30 Jan 2025 13:46:19 +0000
ROA not after:            Wed 30 Apr 2025 12:46:19 +0000
asID:                     396545
IP address blocks:        192.55.83.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:45:62:a2:07:8c:09:d4:a5:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:19 2025 GMT
            Not After : Apr 30 12:46:19 2025 GMT
        Subject: CN=df5c6de5-e5d9-4e63-910c-f988231bb612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:17:c2:c0:32:a4:8d:13:94:81:57:ab:5a:
                    ec:e2:fb:fa:3d:e1:65:e6:1f:4f:0d:18:3d:dd:38:
                    94:0a:5a:4d:ab:0d:78:3d:7d:16:af:02:0c:80:09:
                    94:a3:29:a0:80:74:e1:7f:1a:a0:23:5f:32:d2:2a:
                    ca:03:3f:4c:84:38:39:d0:88:3a:00:34:8d:89:9f:
                    04:12:ca:de:c9:12:c8:03:63:d6:38:68:fb:05:96:
                    64:a2:09:19:dd:ff:48:90:16:7b:7e:39:32:77:0c:
                    47:97:a8:63:06:ea:80:6e:47:20:0d:55:77:d6:1f:
                    db:6e:51:17:8f:c2:03:fe:1b:04:ca:ef:f0:cb:d6:
                    55:99:59:94:6a:50:70:3e:0d:24:c6:1b:56:f0:37:
                    2a:77:06:f8:25:0b:42:ea:59:bb:e9:cf:43:81:bf:
                    f0:04:6b:84:25:7e:ed:05:21:73:fe:ce:f5:66:ab:
                    68:bf:3a:78:f8:a4:52:78:27:dc:44:19:52:49:60:
                    e2:b0:b8:fc:05:04:a8:d7:16:80:da:b0:e9:07:2d:
                    e1:eb:4a:ba:5e:aa:35:ea:32:2b:15:90:7b:e6:04:
                    ed:d1:cf:21:c2:92:a5:6f:5a:16:86:02:26:8c:eb:
                    a1:ff:88:03:13:cc:90:a7:db:51:00:c6:a2:84:9b:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:80:EC:EE:8B:C3:83:CD:B7:F8:2B:32:1E:A6:2D:0A:73:41:5F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc524934-c2ac-333c-83d9-bdaa40f2500d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:70:19:af:c7:07:ba:11:03:0e:55:7a:85:29:3f:c8:bd:
         14:be:83:82:15:42:3c:e5:e8:29:49:a0:ed:92:0a:60:a1:94:
         9c:a4:d6:8b:d3:37:c7:7d:2a:ae:5d:66:a0:88:fc:fc:a8:9f:
         c9:bf:41:b5:38:72:02:83:66:a2:4f:68:56:56:64:35:0b:35:
         d5:1a:97:34:26:71:7f:b9:b6:a4:65:1a:3d:06:00:3b:2f:d2:
         f2:22:dd:0b:98:bd:8b:de:2a:53:3a:8e:28:38:08:16:ff:b8:
         ea:b3:73:26:40:3a:c1:fd:92:d9:97:ed:2a:ba:c0:d4:ca:ff:
         d9:b2:a0:19:90:12:3c:4a:98:5b:38:fa:25:cc:dd:c3:2f:71:
         fb:bf:9a:1f:71:1d:ea:1f:da:96:53:bd:9f:03:c7:f0:35:fd:
         f1:62:08:de:46:bc:5f:c0:70:32:ad:df:46:12:e6:2e:34:ca:
         2e:5b:44:a0:34:b9:0f:dc:7e:1a:f9:5f:1f:62:26:21:1c:31:
         7e:6b:62:e3:0f:94:92:90:8f:ac:0d:09:fa:93:8e:f9:6d:ff:
         6a:8c:88:dc:38:29:2d:9c:07:72:5f:4c:ea:81:62:be:69:ab:
         c1:07:15:e3:a2:f3:7d:13:b4:06:e9:64:ec:79:4c:67:9a:77:
         ae:5e:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----