Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27dedb3-478f-3fd3-9f2a-c114f7224423.roa
File:                     f27dedb3-478f-3fd3-9f2a-c114f7224423.roa (raw, json)
Hash identifier:          wTpB5V3WuY3FB69BKekkt/A76puWNN7O/Mm1BqMpxlw=
Subject key identifier:   C8:34:6F:E2:5F:36:4B:E8:5A:89:C1:AB:54:00:0F:46:3E:FE:8B:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB149AC0A7F130319CD1080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27dedb3-478f-3fd3-9f2a-c114f7224423.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     40717
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:49:ac:0a:7f:13:03:19:cd:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=ad0ab8e4-bae9-4c34-877a-843d54506d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:2b:38:f5:f9:7e:74:c9:08:6f:88:66:28:
                    ef:c9:24:0e:65:13:29:7c:3f:f7:2c:c2:66:bb:aa:
                    1b:c0:c9:6d:5f:dc:3f:ae:42:00:61:05:4c:42:e2:
                    9b:bf:6b:33:b4:da:0b:b5:ec:08:77:94:1e:10:1b:
                    a0:df:b9:4b:d5:03:71:4c:63:65:76:e8:d3:c4:46:
                    38:be:bf:d2:39:79:98:2d:09:6c:f2:db:a1:05:39:
                    f6:b6:eb:04:5f:d2:95:ba:e9:cf:95:18:1d:f8:ad:
                    8e:d7:cc:fc:db:98:b7:8a:b7:07:b0:44:39:f6:d1:
                    a8:08:09:26:ca:c1:41:a2:f9:29:c8:af:a6:a2:8a:
                    0c:f6:db:cf:88:9d:e9:af:81:cd:3c:4b:fb:02:b4:
                    66:56:e4:e6:cf:f4:57:80:08:3c:d9:e5:44:db:8a:
                    eb:2d:30:07:8d:b7:e2:3b:f5:13:d1:21:86:e7:fc:
                    50:72:00:4e:bf:5d:a5:a8:f8:80:56:cc:90:fb:10:
                    7f:50:1b:90:b3:73:35:9a:26:9b:53:56:df:35:48:
                    80:82:12:d0:c8:ef:2c:68:80:1e:84:5b:3f:ea:2d:
                    7a:c9:be:97:70:06:25:d9:38:d6:27:34:7e:6b:be:
                    90:31:31:6c:af:ba:92:ef:c3:e6:71:2a:f9:52:cc:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:6F:E2:5F:36:4B:E8:5A:89:C1:AB:54:00:0F:46:3E:FE:8B:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f27dedb3-478f-3fd3-9f2a-c114f7224423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:d7:f6:6f:de:a1:78:43:7e:4f:47:45:83:eb:d9:12:e4:
         58:29:d1:b8:b5:1f:42:bc:01:81:52:39:14:9c:0b:9e:ff:3d:
         02:c0:6e:61:14:af:7a:66:e5:1c:58:2a:d6:53:e7:4e:72:85:
         0c:3e:41:2e:04:a2:51:93:97:d7:96:35:bd:f3:f8:16:34:e8:
         bb:1d:da:ec:3a:c2:07:77:de:29:b3:5c:ec:38:bb:c3:64:87:
         47:f4:c0:cc:c6:da:32:82:16:88:13:15:3a:0c:65:92:6e:db:
         94:41:d8:80:14:73:14:32:cc:43:30:84:f2:c1:52:0c:4e:19:
         4a:0a:79:c7:80:b9:2c:0d:2a:71:3c:1b:eb:ee:62:65:2b:38:
         75:20:92:93:2f:0e:b3:f8:47:a9:9a:a5:14:8a:a0:e3:a5:19:
         4c:fb:df:47:dd:3d:fc:b3:ce:c2:3f:95:ec:6d:ea:f4:71:e5:
         5f:de:12:24:6d:58:d5:8a:ab:82:bb:c9:a8:8a:22:d5:4d:59:
         00:e1:e5:5d:9e:1e:b0:fb:cf:59:81:29:b7:7a:b9:62:60:6b:
         16:dd:c2:00:0d:5a:10:b4:0e:fe:ef:0b:fd:2c:79:32:4f:82:
         06:7c:f5:4a:82:16:fb:32:aa:53:e6:a8:56:c2:6a:fc:72:f8:
         45:11:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:34:44 2025 by rpki-client