Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e282fe-7fe1-39b6-b949-e3a1507494e7.roa
File:                     e6e282fe-7fe1-39b6-b949-e3a1507494e7.roa (raw, json)
Hash identifier:          R6YKmDc19TZR8kbzh7NxTyA7CiY6F3iYxbzx+nV2qUE=
Subject key identifier:   0C:51:AD:06:6A:17:82:9E:7E:BC:F5:9A:18:59:ED:E9:9D:1D:00:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73EB3CFC18D9F04C204E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e282fe-7fe1-39b6-b949-e3a1507494e7.roa
Signing time:             Fri 29 Nov 2024 13:58:32 +0000
ROA not before:           Fri 29 Nov 2024 13:58:32 +0000
ROA not after:            Thu 27 Feb 2025 13:58:32 +0000
asID:                     27544
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:eb:3c:fc:18:d9:f0:4c:20:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:32 2024 GMT
            Not After : Feb 27 13:58:32 2025 GMT
        Subject: CN=dd14d230-60a1-4cb7-add1-413ba8a81da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:9c:3a:12:6b:c7:8f:d9:df:4b:cf:2f:a2:
                    51:8d:f8:66:0c:52:aa:68:3b:e8:67:a3:6b:61:88:
                    42:f9:42:3f:5f:ba:2a:cd:77:c4:c0:34:cb:e8:ba:
                    d0:60:aa:41:34:f0:cd:40:ea:65:5c:3f:93:4e:fa:
                    dc:2b:58:44:f2:bf:c6:36:e5:fd:3a:59:51:a4:cb:
                    52:fa:5a:15:2e:2c:cb:47:1c:da:a1:9f:1c:43:0a:
                    16:ac:c9:c9:92:bd:27:c3:67:94:8d:de:b7:20:c5:
                    79:96:61:13:a9:7e:8a:52:9f:1a:ab:96:ea:0d:a6:
                    ca:74:dc:cc:4e:59:28:07:af:67:42:00:ed:b0:64:
                    cf:b6:70:1d:37:28:0e:dd:aa:c4:92:31:ed:25:a8:
                    82:a3:7b:7b:ec:c0:b8:17:09:f5:12:19:c1:41:ed:
                    01:97:7f:6b:80:9b:81:4e:cf:45:00:a8:2c:5a:5a:
                    59:8c:92:be:99:37:b4:3f:c6:74:b4:6d:af:ff:75:
                    15:ef:3b:98:ca:4a:e1:35:40:35:77:01:ec:59:2b:
                    7d:88:cf:f7:cf:d5:9a:aa:74:45:3c:d5:a4:81:3c:
                    8c:70:92:31:be:03:97:1d:3a:45:84:2b:48:c5:df:
                    3d:3d:6f:1d:94:7b:56:8d:ac:3b:f8:1e:7f:45:bf:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:51:AD:06:6A:17:82:9E:7E:BC:F5:9A:18:59:ED:E9:9D:1D:00:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e6e282fe-7fe1-39b6-b949-e3a1507494e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:37:7c:75:a7:20:7a:0f:67:54:41:1f:03:bd:38:e1:5d:ee:
         fd:50:17:d0:7e:9b:d0:e8:27:17:0c:7f:ba:52:77:9e:ed:19:
         4c:ee:59:c5:dc:19:80:c5:3c:0e:0b:33:ae:22:f3:fe:b3:f7:
         09:dc:7c:85:f8:0b:6d:97:4f:0d:cb:f1:21:30:3d:4b:89:b5:
         46:17:bd:34:c9:5e:2f:99:f7:ce:7a:5b:18:ae:0c:32:09:67:
         dd:04:5f:f1:32:2f:aa:4c:ae:5b:13:8b:46:a4:af:15:d8:57:
         3d:f6:7a:69:a4:0a:77:8e:16:ca:6d:46:b1:0e:88:8b:af:4a:
         35:79:99:c1:e7:5c:d9:47:5c:3a:ed:49:10:e8:fd:2e:49:4f:
         98:cc:f4:3c:1e:ea:a9:f4:90:7e:e5:5c:4d:e5:0c:cc:21:92:
         58:76:98:c0:82:2a:0d:a5:46:d1:9c:a0:12:f1:4d:dd:05:dd:
         b1:66:35:ec:d7:82:61:75:56:20:1f:cf:a5:df:de:c0:56:11:
         48:bd:22:bd:a4:37:8d:d2:43:f3:1c:cf:c6:9f:70:bd:68:f7:
         53:8c:3e:7c:21:75:d9:fa:9b:5b:ba:bc:c6:02:42:5f:5e:79:
         2f:a7:a7:1f:d5:68:a1:e9:ff:b7:5b:8a:ae:7e:1d:fd:13:71:
         7d:29:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:54 2025 by rpki-client