Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa
File:                     5e1c8865-7ea6-32e8-b986-09b226597db6.roa (raw, json)
Hash identifier:          YmG/M7/qhfeBVyK66VvF9ywKakZi6kkXtm6HgBs40ys=
Subject key identifier:   B0:EA:CB:30:E0:66:1A:11:43:3F:C3:E9:3C:37:35:3C:BB:A1:A7:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB14F277E408F3930B0C640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     36632
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:4f:27:7e:40:8f:39:30:b0:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=07b2ec19-c8b1-45a1-8914-af6b4ab31aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:c4:ed:1d:99:7b:eb:03:3d:f2:8d:ec:0e:
                    c0:89:1c:ef:36:64:5e:27:24:17:5d:5f:f3:ef:f0:
                    e2:c7:db:34:ee:a0:ca:ba:c2:fb:66:ca:f5:ee:be:
                    34:6f:da:1a:bf:fe:ee:f1:8e:3e:43:b4:54:c3:f2:
                    36:e9:8c:23:bd:b9:ff:a3:3e:e7:10:59:ed:12:03:
                    0d:57:83:30:ad:aa:0e:5d:cf:c8:bc:67:ed:f5:d0:
                    d7:07:f3:cb:84:3c:d3:db:7e:ac:f6:e2:1d:4c:7f:
                    11:7a:7a:34:33:44:be:26:6d:5a:8d:f4:d5:b8:41:
                    46:d4:17:da:77:7a:6f:f3:ee:3d:e9:b7:da:19:43:
                    1f:e8:14:6e:71:39:d7:89:b2:70:7b:d4:01:d2:cd:
                    43:b2:7d:2a:42:a4:9a:53:c9:cf:15:5c:24:42:cc:
                    b1:f0:ab:9c:81:4c:e8:37:97:95:f2:99:60:f3:d2:
                    86:cc:4f:2c:34:8f:f0:5e:44:4c:be:1e:1a:59:d7:
                    3f:9c:0c:37:5b:11:6a:78:0a:74:5d:2b:c1:4f:c3:
                    6b:c7:1e:ea:af:ef:3c:72:41:1a:46:64:1e:b5:d0:
                    ce:b2:67:81:41:82:34:34:7c:03:dc:8f:3d:29:9c:
                    57:a5:18:e9:16:39:27:b3:e3:b4:f7:7e:64:7d:43:
                    6b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:CB:30:E0:66:1A:11:43:3F:C3:E9:3C:37:35:3C:BB:A1:A7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e1c8865-7ea6-32e8-b986-09b226597db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:43:4e:46:a0:e6:3c:a2:b3:fc:ea:e6:21:5f:de:cf:a1:d9:
         34:5c:fd:5f:59:bf:8e:88:b8:15:92:fd:b4:dd:cd:d1:04:33:
         e4:4e:64:b9:91:cd:2e:59:a7:64:d9:ca:fe:e4:6b:83:e6:4b:
         87:9d:b5:8a:bb:91:de:ea:15:8f:71:26:f1:15:b3:93:f1:40:
         7c:49:47:9f:54:bb:af:99:8a:2f:f1:e7:65:4d:5c:b8:5e:86:
         d7:a6:cb:5a:3e:1c:ae:27:75:6f:5d:e7:5f:a0:21:34:99:b2:
         c3:35:85:23:29:68:4e:47:55:c0:b2:7b:4a:79:77:d0:c0:2f:
         66:ce:a3:38:a6:d1:50:24:a8:e4:a0:0b:32:03:d3:9c:1f:c4:
         5f:82:24:d2:be:d1:2d:1c:a6:09:8c:c8:cf:58:3e:75:34:5e:
         3c:92:da:f1:49:0e:03:23:8d:bc:06:d0:57:67:ae:c0:73:2f:
         e5:d5:7d:82:de:d8:a7:50:3d:5f:b0:cb:7c:d2:53:a1:a6:ef:
         da:5f:8d:2c:b7:b2:ae:c1:54:da:34:fb:35:17:82:97:77:be:
         f5:34:cc:19:87:de:3c:db:d7:24:b7:0a:e2:7a:42:b8:d7:b6:
         98:86:3e:39:b8:64:62:5a:dc:f7:cd:52:ae:40:fd:84:23:01:
         b7:63:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:37 2025 by rpki-client