Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44720c-6b01-3357-af46-d3a0cde2d3ae.roa
File:                     3f44720c-6b01-3357-af46-d3a0cde2d3ae.roa (raw, json)
Hash identifier:          mRXJrUXU7yYUYmVrcltIjPaV64ix1t/w4vnkHGxu96U=
Subject key identifier:   09:99:1F:83:52:C2:CB:0F:75:F5:44:6F:C6:7C:C7:0B:57:EF:95:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB09696DC4B1DFA6B47DC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44720c-6b01-3357-af46-d3a0cde2d3ae.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33287
IP address blocks:        71.230.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:96:96:dc:4b:1d:fa:6b:47:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=1580816d-754f-4771-bc78-288b4d337f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:36:d5:7e:12:a6:a3:76:d6:66:e3:51:0f:
                    ba:d1:a3:48:44:5e:95:f4:16:86:88:a1:d3:bf:78:
                    cd:4c:72:3b:0a:49:58:aa:e3:2f:40:ca:6e:29:41:
                    a1:6e:0f:ee:6d:04:ae:40:e7:3d:7e:81:45:fd:56:
                    da:4a:d5:11:de:99:13:7a:6e:5f:4c:c9:62:dd:95:
                    a9:7f:6e:b2:44:a6:89:de:b4:c8:a2:54:0d:5e:7f:
                    ab:31:77:78:d3:4f:ca:1a:b9:82:4a:d2:fe:ac:12:
                    b7:5f:cc:84:99:bd:07:78:94:5f:3e:6b:f2:bc:65:
                    09:18:4f:85:ce:69:57:f2:df:c4:12:30:2f:ff:99:
                    40:20:03:c8:ed:ec:30:d0:9d:79:6e:2f:b4:be:2c:
                    74:7e:d2:40:c6:10:8e:fb:63:1b:ba:c5:fb:3c:9f:
                    28:3d:87:12:fd:62:68:48:cf:8a:d7:46:f2:2f:78:
                    70:cb:ac:80:d5:56:62:4c:37:82:9d:bd:63:62:e6:
                    76:af:cf:24:f7:cd:10:57:9b:d3:5a:99:f2:aa:4c:
                    5c:ae:d9:ea:ad:1a:e0:75:92:06:ce:3a:36:a8:f9:
                    bc:48:d4:4f:75:2b:65:cb:5f:7e:f0:76:10:f1:b6:
                    ff:53:ee:66:79:45:03:90:a0:91:d4:34:51:8c:b3:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:1F:83:52:C2:CB:0F:75:F5:44:6F:C6:7C:C7:0B:57:EF:95:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f44720c-6b01-3357-af46-d3a0cde2d3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:5b:09:62:54:3f:c5:86:57:ce:d9:2b:16:ca:e4:4d:fb:
         8e:17:08:10:65:65:10:36:b4:80:d7:6f:ae:05:0a:41:c8:b5:
         54:f0:67:2c:2b:39:8e:4f:42:77:cb:b9:10:79:6d:14:a8:b5:
         93:81:b7:2d:93:6e:f3:cd:9f:2d:4b:e6:b0:28:bb:9c:30:1f:
         8c:9c:15:f7:49:d6:0c:c6:6a:db:3e:d5:92:82:0f:bd:2c:1d:
         f1:39:98:a6:b5:ae:08:5b:b0:66:76:2d:a7:d2:39:82:b8:77:
         2a:f4:af:a6:82:a9:db:95:56:88:f8:38:0d:2e:e7:2e:b0:f6:
         4a:c9:ca:9e:a1:68:fd:c9:92:03:f5:f4:31:76:36:91:02:4f:
         27:f3:dd:b5:07:28:09:8f:c2:d4:59:d2:70:28:29:d1:32:76:
         b8:30:31:7a:f5:40:af:ae:2f:5e:36:3a:99:98:b0:3f:f9:ee:
         f3:cf:f8:95:0b:0f:84:c3:74:c9:75:72:9f:ce:81:dd:07:16:
         e0:5e:b6:12:cf:33:1f:d2:38:ed:15:c2:81:62:e5:1f:0c:89:
         81:d8:d6:76:3f:61:c8:e1:87:e6:8b:ba:27:2b:0a:cb:cf:a7:
         9d:8a:a5:24:96:68:17:f3:aa:80:b6:e2:10:29:d4:65:82:ba:
         76:23:d4:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJaW3Esd+mtH3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
MTU4MDgxNmQtNzU0Zi00NzcxLWJjNzgtMjg4YjRkMzM3ZjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroc21X4SpqN21mbjUQ+60aNIRF6V9BaGiKHT
v3jNTHI7CklYquMvQMpuKUGhbg/ubQSuQOc9foFF/VbaStUR3pkTem5fTMli3ZWp
f26yRKaJ3rTIolQNXn+rMXd400/KGrmCStL+rBK3X8yEmb0HeJRfPmvyvGUJGE+F
zmlX8t/EEjAv/5lAIAPI7eww0J15bi+0vix0ftJAxhCO+2MbusX7PJ8oPYcS/WJo
SM+K10byL3hwy6yA1VZiTDeCnb1jYuZ2r88k980QV5vTWpnyqkxcrtnqrRrgdZIG
zjo2qPm8SNRPdStly19+8HYQ8bb/U+5meUUDkKCR1DRRjLOaHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmZH4NSwssPdfVEb8Z8xwtX75XUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y0NDcyMGMtNmIwMS0z
MzU3LWFmNDYtZDNhMGNkZTJkM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+YwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHf/WwliVD/FhlfO2SsWyuRN+44XCBBlZRA2tIDXb64FCkHItVTwZywr
OY5PQnfLuRB5bRSotZOBty2TbvPNny1L5rAou5wwH4ycFfdJ1gzGats+1ZKCD70s
HfE5mKa1rghbsGZ2LafSOYK4dyr0r6aCqduVVoj4OA0u5y6w9krJyp6haP3JkgP1
9DF2NpECTyfz3bUHKAmPwtRZ0nAoKdEydrgwMXr1QK+uL142OpmYsD/57vPP+JUL
D4TDdMl1cp/Ogd0HFuBethLPMx/SOO0VwoFi5R8MiYHY1nY/Ycjhh+aLuicrCsvP
p52KpSSWaBfzqoC24hAp1GWCunYj1MQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:16:50 2025 by rpki-client