Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e04f591-5fb1-32ed-a6e5-0f4eeaee9a33.roa
File:                     0e04f591-5fb1-32ed-a6e5-0f4eeaee9a33.roa (raw, json)
Hash identifier:          1Vrdgvsu2O66/aRJoz4S5dj+GKgUY1E9VWV4yoer28M=
Subject key identifier:   84:91:16:3F:39:7E:C6:18:E4:E4:36:61:0D:42:18:25:1D:30:60:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15D21F18375D03E9DA800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e04f591-5fb1-32ed-a6e5-0f4eeaee9a33.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396605
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5d:21:f1:83:75:d0:3e:9d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=a6864d07-9203-40e0-9437-67bbfdc4c4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:47:b2:a8:74:60:24:74:62:d4:14:2c:8a:
                    ab:d7:ca:61:03:a7:76:67:02:7a:dd:7a:c0:af:47:
                    fd:9a:3d:f8:0a:99:f8:0b:28:ee:f2:ea:2f:0f:2e:
                    be:11:d4:13:d1:6f:7b:61:af:81:ec:7c:9f:7b:77:
                    51:f9:d8:28:d8:96:b0:59:b2:65:c3:bd:d9:9c:9c:
                    86:e2:51:4a:30:b3:ad:b4:e3:ae:80:79:91:1f:21:
                    f2:0a:e4:5c:2b:7c:3d:40:d6:18:a2:b0:b2:d6:dc:
                    dc:aa:3a:0b:0b:f7:cc:aa:ad:62:aa:74:74:40:c1:
                    c7:a0:b1:f9:26:7c:36:b0:9e:44:d8:61:85:0a:30:
                    9b:6f:1f:04:3c:c2:71:df:db:d2:7c:0c:db:02:71:
                    23:d8:67:5d:9d:8c:5f:5c:4e:bf:30:a7:bf:7b:c7:
                    e0:b1:03:55:15:8d:b1:43:24:e2:0a:6e:8a:8a:f7:
                    98:08:dd:f9:03:e6:8d:0a:3b:d8:63:e5:bd:6f:44:
                    97:a5:84:21:88:92:27:a4:ab:42:2a:4a:67:e5:af:
                    98:0a:5f:fd:3c:72:88:ee:36:4a:9a:15:3f:33:ab:
                    9b:ec:54:17:e1:d7:96:6c:97:e7:99:6f:9a:68:5c:
                    26:9e:80:1d:66:9f:1d:62:ac:4b:8f:7b:1f:a2:b2:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:91:16:3F:39:7E:C6:18:E4:E4:36:61:0D:42:18:25:1D:30:60:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e04f591-5fb1-32ed-a6e5-0f4eeaee9a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:38:8b:68:7e:d3:8f:e3:b2:ac:e4:ad:2b:6c:bc:82:05:
         6c:a5:7d:43:96:90:56:c2:91:0c:ea:20:f8:06:a6:9b:5d:84:
         ed:22:36:9a:a4:8c:1e:a8:14:9e:6a:f5:05:06:f1:5e:57:3c:
         f7:43:a2:50:17:d0:d8:1c:53:53:b8:40:8e:bb:c2:c4:e7:5e:
         81:3d:7c:e0:e1:99:18:03:b2:b1:45:c2:43:84:7c:c3:06:b0:
         08:2e:60:0b:02:f3:f2:6b:43:3d:d3:a1:61:5b:79:1b:41:d5:
         5b:39:b4:74:be:31:0a:69:5c:39:4b:58:38:21:29:c8:0e:a9:
         96:18:4a:66:45:34:2a:c5:17:c7:d5:40:03:1b:6d:6e:12:83:
         6f:81:2e:ae:3b:83:37:f4:c4:40:11:e2:af:e6:3b:73:dc:d7:
         8e:5b:cd:d2:5e:30:8d:b6:8a:0f:d3:b8:45:c9:93:98:2d:b5:
         4c:a5:2e:c9:96:bf:c1:d4:a9:4a:87:d6:4e:0a:72:95:4a:d1:
         7e:a8:58:54:9e:ee:38:97:34:01:95:73:e4:cd:8f:03:a4:76:
         63:aa:5d:46:63:fe:d5:dc:ff:6c:6c:28:5f:88:fd:d7:73:f2:
         98:9f:b8:1e:48:80:08:1c:1e:5c:d2:d9:d0:ed:3c:36:ff:bd:
         de:2e:de:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsV0h8YN10D6dqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk
YTY4NjRkMDctOTIwMy00MGUwLTk0MzctNjdiYmZkYzRjNGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgphHsqh0YCR0YtQULIqr18phA6d2ZwJ63XrA
r0f9mj34Cpn4Cyju8uovDy6+EdQT0W97Ya+B7Hyfe3dR+dgo2JawWbJlw73ZnJyG
4lFKMLOttOOugHmRHyHyCuRcK3w9QNYYorCy1tzcqjoLC/fMqq1iqnR0QMHHoLH5
Jnw2sJ5E2GGFCjCbbx8EPMJx39vSfAzbAnEj2GddnYxfXE6/MKe/e8fgsQNVFY2x
QyTiCm6KiveYCN35A+aNCjvYY+W9b0SXpYQhiJInpKtCKkpn5a+YCl/9PHKI7jZK
mhU/M6ub7FQX4deWbJfnmW+aaFwmnoAdZp8dYqxLj3sforL+rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISRFj85fsYY5OQ2YQ1CGCUdMGBlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGUwNGY1OTEtNWZiMS0z
MmVkLWE2ZTUtMGY0ZWVhZWU5YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALrpOItoftOP47Ks5K0rbLyCBWylfUOWkFbCkQzqIPgGpptdhO0iNpqk
jB6oFJ5q9QUG8V5XPPdDolAX0NgcU1O4QI67wsTnXoE9fODhmRgDsrFFwkOEfMMG
sAguYAsC8/JrQz3ToWFbeRtB1Vs5tHS+MQppXDlLWDghKcgOqZYYSmZFNCrFF8fV
QAMbbW4Sg2+BLq47gzf0xEAR4q/mO3Pc145bzdJeMI22ig/TuEXJk5gttUylLsmW
v8HUqUqH1k4KcpVK0X6oWFSe7jiXNAGVc+TNjwOkdmOqXUZj/tXc/2xsKF+I/ddz
8pifuB5IgAgcHlzS2dDtPDb/vd4u3kk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:01 2025 by rpki-client