Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a51beb59-3b4e-34aa-b96f-a5532fca1a65.roa
File:                     a51beb59-3b4e-34aa-b96f-a5532fca1a65.roa (raw, json)
Hash identifier:          boStPRCrVvi+x6sxT1RK20NgHA0mVhf6PTpM0+RmFCo=
Subject key identifier:   AF:51:BB:BE:5E:D9:D5:78:0B:2A:54:54:3B:7D:C4:F3:E2:62:2F:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73DCF7356B9AB0B54A3500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a51beb59-3b4e-34aa-b96f-a5532fca1a65.roa
Signing time:             Fri 29 Nov 2024 13:58:25 +0000
ROA not before:           Fri 29 Nov 2024 13:58:25 +0000
ROA not after:            Thu 27 Feb 2025 13:58:25 +0000
asID:                     21313
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:dc:f7:35:6b:9a:b0:b5:4a:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:25 2024 GMT
            Not After : Feb 27 13:58:25 2025 GMT
        Subject: CN=21047ede-7937-470f-81d8-2684d7d8485e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:46:d5:99:db:5e:30:00:e1:5a:44:2a:7b:
                    58:8a:93:22:f7:a6:76:52:5c:95:32:7c:df:3e:0e:
                    5d:3e:08:2c:6a:c1:7f:7e:bd:69:e5:a9:a2:e1:12:
                    a4:bf:22:b4:23:09:8f:64:6b:21:78:9e:f7:b7:2a:
                    4b:b7:35:1e:96:45:de:29:cb:c3:3e:e0:21:6d:42:
                    9f:10:dd:ea:c1:e6:45:ae:66:98:c8:52:7c:42:fd:
                    1d:f3:c0:ae:ad:56:2d:ef:bd:f3:c3:01:d5:74:03:
                    ba:f0:1d:57:65:11:a3:3b:63:00:d6:fc:59:16:4c:
                    86:4a:32:b8:83:03:43:f5:59:6f:0d:0c:09:ff:bd:
                    23:6c:f0:f7:59:06:91:7f:49:70:5a:79:a4:bd:3f:
                    90:47:ae:3b:c2:17:39:04:d6:ca:b2:37:b8:b7:04:
                    c1:0e:e1:32:92:13:b8:b3:41:e7:6d:53:ae:ea:cf:
                    83:b0:36:64:55:e2:fd:c5:f0:f2:80:5f:ef:df:5e:
                    ad:4e:a7:b3:57:92:56:36:4c:51:31:03:35:ca:88:
                    64:00:2d:9f:83:f3:b9:95:aa:5e:d3:47:5c:2a:85:
                    66:2c:d1:19:a7:9b:4f:6a:ec:b0:89:4a:52:cb:d0:
                    84:ad:a6:de:4f:33:21:4f:03:f3:62:a6:be:f8:d0:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:51:BB:BE:5E:D9:D5:78:0B:2A:54:54:3B:7D:C4:F3:E2:62:2F:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a51beb59-3b4e-34aa-b96f-a5532fca1a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:28:25:25:13:63:b7:8a:31:7e:ec:e2:75:fa:e9:ee:80:0a:
         d1:cf:63:6c:ba:dd:95:9c:ac:01:06:cb:2e:ab:6c:0f:ab:cd:
         b3:c1:44:9d:ff:f7:df:e3:13:93:9f:13:32:ec:9a:1f:18:1d:
         c3:be:c5:a1:ee:c1:5e:ad:d1:39:69:6a:d8:05:35:b7:e4:ef:
         e3:38:83:35:b4:48:49:e2:64:07:32:0f:8e:6c:7e:4c:92:55:
         7a:7f:78:d0:c8:61:65:dc:0e:16:78:35:27:6b:db:e5:43:5f:
         37:62:04:b1:01:f3:26:0f:ec:3e:c6:5b:45:3f:20:3f:30:3f:
         a7:44:8c:cf:d8:e9:d9:59:8f:8f:90:e8:65:9b:eb:95:9a:91:
         aa:6b:bc:2c:e9:19:b4:65:84:60:c3:05:82:df:3e:76:73:7d:
         5a:6d:25:02:58:62:59:59:7c:5c:9c:3b:0e:2d:c6:99:3d:c4:
         b0:a8:37:96:12:4c:34:a7:e6:d6:37:e2:ad:d1:e7:e9:f1:28:
         94:99:f6:f4:3b:34:3f:56:af:b0:c1:65:6d:2e:cf:64:fd:c9:
         14:cd:0d:24:63:2d:ac:b1:d7:bf:ce:af:2b:54:f1:fd:1e:66:
         2e:a8:ed:34:9c:52:98:c7:7f:41:e2:25:7e:b6:a9:75:5f:3a:
         7b:8b:a1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:00 2025 by rpki-client