Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5473e185-34a2-3827-bbc8-305f41d109f9.roa
File:                     5473e185-34a2-3827-bbc8-305f41d109f9.roa (raw, json)
Hash identifier:          E7rKEo81z49B0qSKtuIt7jTAIUPUeEN3/3naEzF0Ht0=
Subject key identifier:   AA:AE:70:E2:47:E0:79:F7:6E:64:7D:81:F0:41:C6:9D:5A:28:81:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E8AF2AD3AFA811BD67C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5473e185-34a2-3827-bbc8-305f41d109f9.roa
Signing time:             Fri 29 Nov 2024 13:58:31 +0000
ROA not before:           Fri 29 Nov 2024 13:58:31 +0000
ROA not after:            Thu 27 Feb 2025 13:58:31 +0000
asID:                     396578
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e8:af:2a:d3:af:a8:11:bd:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:31 2024 GMT
            Not After : Feb 27 13:58:31 2025 GMT
        Subject: CN=f2d67674-5aed-49a9-932b-6e280ea30547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:13:90:21:33:62:ab:bd:e6:88:50:28:32:e0:
                    30:b3:f1:a8:c7:24:c8:c2:28:e7:bb:f6:73:d3:02:
                    d7:fa:c1:ca:71:a8:c1:2f:aa:4c:a3:d1:3c:91:c1:
                    c9:9f:76:b8:db:d3:09:c5:2a:84:96:fe:a0:e8:f2:
                    4f:67:ff:82:2e:26:47:5f:b5:7f:26:f7:16:08:3d:
                    a1:eb:9a:ae:ff:e5:03:58:ca:e3:69:2e:9a:1f:50:
                    1a:e3:d5:34:e5:95:e8:af:d3:57:e0:1e:5a:8f:d2:
                    fb:e1:3c:1e:d8:0a:7d:97:5c:cd:5c:ea:6a:9d:f7:
                    ed:8e:87:e5:a7:04:28:fd:6a:09:7c:85:06:80:cb:
                    e0:b1:93:69:49:64:f0:73:fa:9b:4a:d3:6c:e9:c1:
                    d5:80:2e:69:66:18:4a:3e:35:a7:65:74:de:41:da:
                    dd:ef:a3:b7:e5:85:41:d3:4e:a1:7b:f1:91:da:ce:
                    ca:da:f5:8a:3f:00:3c:90:16:9a:2a:0d:d4:56:39:
                    cf:d2:79:6f:8d:0a:05:76:f9:47:84:44:3c:56:3c:
                    91:25:a0:5e:32:54:56:2a:00:9b:34:ce:1d:3a:47:
                    ad:a3:eb:af:0d:bb:4e:90:f4:8c:41:15:8a:93:9b:
                    f1:aa:f6:2f:4c:5c:ac:ea:34:aa:f4:1c:9b:2d:94:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AE:70:E2:47:E0:79:F7:6E:64:7D:81:F0:41:C6:9D:5A:28:81:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5473e185-34a2-3827-bbc8-305f41d109f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:0c:cb:fa:12:cc:1b:37:6a:e0:29:df:48:7b:9b:02:b7:79:
         9e:13:37:0b:a7:dd:b3:64:8d:a1:aa:0a:59:02:c9:27:53:ac:
         cd:a8:40:d8:f8:11:08:12:cd:03:59:d9:1f:3f:98:bd:2c:53:
         6b:8c:ba:be:ed:4b:c6:5f:67:00:ec:9a:a3:a3:4b:f0:54:ee:
         6b:21:e8:92:7b:b8:b4:21:89:20:2e:cb:61:b9:66:12:90:3c:
         b7:f0:f5:a8:5d:82:31:73:5e:94:9d:de:d2:97:be:04:82:2d:
         81:c2:dd:3e:12:df:db:6f:d7:92:a7:65:b0:73:5e:eb:ce:c1:
         d8:09:b7:3b:d7:f7:8d:a8:f2:55:6d:7c:5f:71:df:f5:1d:30:
         f7:58:ee:41:2a:83:65:ab:50:1e:c9:35:22:fc:58:c3:39:3f:
         07:57:8e:2e:33:e0:b8:41:85:89:63:85:38:06:58:5e:37:14:
         09:95:59:bf:ad:40:a2:02:c9:fb:ca:27:bb:cd:64:7d:a0:6c:
         10:8b:e0:23:13:e8:b2:ae:eb:d1:c4:ef:78:b8:f0:84:9f:64:
         72:95:40:e4:37:6c:ae:b0:ae:20:21:d6:89:04:14:16:32:3f:
         d8:cd:37:ce:57:d3:52:cb:5f:ba:91:20:7c:07:92:f6:f4:79:
         2d:6e:6e:37
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc+ivKtOvqBG9Z8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMVoXDTI1MDIyNzEzNTgzMVowLzEtMCsGA1UEAxMk
ZjJkNjc2NzQtNWFlZC00OWE5LTkzMmItNmUyODBlYTMwNTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hOQITNiq73miFAoMuAws/GoxyTIwijnu/Zz
0wLX+sHKcajBL6pMo9E8kcHJn3a429MJxSqElv6g6PJPZ/+CLiZHX7V/JvcWCD2h
65qu/+UDWMrjaS6aH1Aa49U05ZXor9NX4B5aj9L74Twe2Ap9l1zNXOpqnfftjofl
pwQo/WoJfIUGgMvgsZNpSWTwc/qbStNs6cHVgC5pZhhKPjWnZXTeQdrd76O35YVB
006he/GR2s7K2vWKPwA8kBaaKg3UVjnP0nlvjQoFdvlHhEQ8VjyRJaBeMlRWKgCb
NM4dOketo+uvDbtOkPSMQRWKk5vxqvYvTFys6jSq9BybLZRb2QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKqucOJH4Hn3bmR9gfBBxp1aKIF2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTQ3M2UxODUtMzRhMi0z
ODI3LWJiYzgtMzA1ZjQxZDEwOWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCHDMv6EswbN2rgKd9Ie5sCt3meEzcLp92zZI2hqgpZAsknU6zNqEDY
+BEIEs0DWdkfP5i9LFNrjLq+7UvGX2cA7Jqjo0vwVO5rIeiSe7i0IYkgLsthuWYS
kDy38PWoXYIxc16Und7Sl74Egi2Bwt0+Et/bb9eSp2Wwc17rzsHYCbc71/eNqPJV
bXxfcd/1HTD3WO5BKoNlq1AeyTUi/FjDOT8HV44uM+C4QYWJY4U4BlheNxQJlVm/
rUCiAsn7yie7zWR9oGwQi+AjE+iyruvRxO94uPCEn2RylUDkN2yusK4gIdaJBBQW
Mj/YzTfOV9NSy1+6kSB8B5L29Hktbm43
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:08 2025 by rpki-client