Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/267e4cc5-3fd6-3b0c-a75b-edb3ce7645ae.roa
File:                     267e4cc5-3fd6-3b0c-a75b-edb3ce7645ae.roa (raw, json)
Hash identifier:          nePl9NM07Eu6TwxAMLBVbFS3av9oVvNPcyeGWG5Ve+s=
Subject key identifier:   92:41:A2:88:EB:3B:9A:7C:85:B8:64:CE:1A:5B:3C:14:16:55:E7:D2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73FA2FA362A853BCDDC740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/267e4cc5-3fd6-3b0c-a75b-edb3ce7645ae.roa
Signing time:             Fri 29 Nov 2024 13:58:39 +0000
ROA not before:           Fri 29 Nov 2024 13:58:39 +0000
ROA not after:            Thu 27 Feb 2025 13:58:39 +0000
asID:                     396827
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:fa:2f:a3:62:a8:53:bc:dd:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:39 2024 GMT
            Not After : Feb 27 13:58:39 2025 GMT
        Subject: CN=ab0aa687-76a9-4ada-9651-ca4f45b82dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:94:97:fb:83:77:54:ff:18:1c:f5:0f:35:05:
                    ce:2e:16:42:37:b2:ca:38:bc:a3:67:84:74:3a:85:
                    7b:35:9b:41:46:e3:ba:d5:b4:c9:6e:b8:cf:08:0c:
                    d1:7e:74:39:d0:74:7a:0b:de:04:8d:e4:7e:7c:80:
                    38:80:39:44:f7:28:42:d5:41:ee:96:1b:84:28:42:
                    ba:ec:19:58:00:29:a7:6f:20:a5:f0:ea:a9:03:5b:
                    09:a3:d6:3b:a1:74:da:e2:e2:b7:85:d9:74:07:ac:
                    df:cb:e2:f6:07:36:b8:2c:08:93:99:e2:00:91:73:
                    25:78:83:08:d8:f3:b3:1e:d2:82:4a:8e:47:ca:c1:
                    c3:f4:47:8c:2c:f0:a4:34:37:e1:ff:4d:3f:30:e2:
                    df:c2:2d:87:8e:20:ae:90:10:d5:18:62:1c:b9:6e:
                    6c:4f:1e:fe:e8:b7:2a:dd:1a:d5:2d:66:fe:f2:6e:
                    a0:75:88:c1:5a:4b:01:62:f4:76:88:4a:40:ec:40:
                    24:14:fc:d4:a8:95:02:eb:1d:9f:7c:af:36:99:54:
                    4d:48:0e:d2:73:73:d7:52:b5:44:6a:f9:8a:12:3d:
                    26:e1:96:2e:5f:c6:1f:fe:3f:97:47:c6:a9:b3:58:
                    81:30:0f:e9:96:94:ff:ca:b0:28:b1:91:96:43:92:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:A2:88:EB:3B:9A:7C:85:B8:64:CE:1A:5B:3C:14:16:55:E7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/267e4cc5-3fd6-3b0c-a75b-edb3ce7645ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:2e:f5:40:b0:7c:7b:5b:13:e1:ed:94:9d:4d:c0:2c:aa:
         af:5e:be:d5:e4:57:7e:0e:c9:b4:fd:f9:e9:38:c1:8e:f0:60:
         51:ab:c2:99:d0:35:b8:25:e2:60:5f:01:aa:70:ac:07:32:05:
         a3:02:5b:70:d0:10:47:4d:6d:e3:7f:46:05:41:14:d4:97:3f:
         9a:9d:5d:23:34:ec:88:f1:3e:84:0f:cd:57:88:15:ab:59:c5:
         62:f2:1a:8e:e4:9e:1a:88:b5:8e:51:3d:4b:a2:f5:f2:bf:de:
         c3:1e:ed:ec:35:d5:33:27:0d:37:93:5b:7d:0f:8c:d4:19:20:
         46:d3:c8:a7:c2:86:ca:3d:50:bb:73:47:dc:22:4e:9e:fa:59:
         33:08:e1:ca:c1:9f:0b:9b:a6:0b:c6:2e:b0:6f:7c:99:e7:f1:
         76:44:ab:66:79:e0:c8:ea:98:a5:7b:3f:68:6d:d0:2e:d0:94:
         34:dc:a5:32:21:7a:bb:9e:79:33:d2:52:e2:c5:0d:2f:5f:bc:
         a6:b7:31:23:4d:28:f1:0a:2f:6b:6a:53:05:a6:15:b4:61:51:
         8b:d2:9c:91:46:a0:d1:47:68:1e:12:73:86:c8:ed:0f:45:f1:
         74:b3:8c:e2:af:3a:18:d6:1f:92:24:85:17:f7:c8:3b:2a:fc:
         3f:5a:02:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:36 2025 by rpki-client