Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa
File:                     4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa (raw, json)
Hash identifier:          nIudVe456dZ9wSoon4uolbL6wA3MpmecgqLgXs/QNWY=
Subject key identifier:   B0:BC:2E:E6:CD:8C:B5:66:EB:10:A6:CD:FB:6E:D7:67:F3:CE:E6:D5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858491D71602632FA14EFA4046880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        71.30.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:60:26:32:fa:14:ef:a4:04:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=d63478f9-3da3-42ec-be49-53ef97b0c229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:f0:09:bf:c0:a1:12:bd:73:f4:76:fd:18:
                    2a:4f:f2:66:8f:3c:6c:41:a9:be:ef:62:92:6e:00:
                    bc:b0:49:e3:18:31:11:2a:53:49:a6:4c:2a:e6:31:
                    c5:40:90:7d:a9:71:30:be:62:e2:4f:0a:38:05:87:
                    b2:ea:2e:fd:9a:31:a0:fe:3d:56:a6:e0:19:52:71:
                    65:c2:57:59:82:14:f3:0e:3a:a3:b0:87:a6:83:da:
                    32:f0:e4:bf:b2:50:f4:d5:b4:b8:fc:23:80:b7:6a:
                    5b:f4:fb:da:b9:e1:5b:24:24:1b:a6:20:47:bb:51:
                    99:76:e3:c5:f2:05:dd:d2:d0:06:46:90:d0:81:b4:
                    30:ca:21:63:3e:e0:a2:74:f7:d7:96:a8:3c:6e:34:
                    78:0e:f3:75:85:f3:a3:7a:a3:38:66:df:c2:da:96:
                    37:ca:a8:20:5c:c3:7e:b1:ed:fc:f1:94:ef:80:ef:
                    c6:ae:29:42:c2:62:2e:e8:aa:98:10:3e:f8:01:ad:
                    bd:35:1b:a5:24:3b:d2:76:d6:8a:a1:c2:7d:11:9b:
                    03:73:e1:ee:be:19:eb:29:36:43:23:8c:64:92:ed:
                    c6:bc:b5:05:6f:04:4c:5c:54:62:71:ce:08:fb:65:
                    a7:ee:e8:81:7b:0b:c5:a1:fc:7c:fb:a3:22:e2:19:
                    7a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:2E:E6:CD:8C:B5:66:EB:10:A6:CD:FB:6E:D7:67:F3:CE:E6:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:bc:0a:ff:47:96:14:4d:1a:98:62:c6:83:f2:97:e4:0e:
         b7:13:d7:7b:fa:18:40:99:1f:53:22:23:9f:9f:48:e8:c2:16:
         31:39:64:a3:48:6f:ed:a4:31:7e:38:e8:86:16:1f:11:99:40:
         f8:6f:b5:38:46:cc:42:fb:dc:07:83:9a:e3:9e:89:45:8e:cc:
         77:82:f4:81:ad:11:d4:a9:60:64:c6:db:81:74:b8:fc:cc:69:
         e0:f2:dc:2b:fb:b9:fc:fd:78:c8:4b:21:37:bb:e5:02:b7:be:
         ca:41:31:b0:3e:d9:66:6d:4b:51:b0:9e:2d:5c:01:f6:f7:0c:
         5c:69:d7:fa:50:6d:15:c4:08:30:66:92:56:78:84:9f:8f:15:
         f6:2d:86:17:38:97:20:af:84:bd:b3:b7:75:6e:30:35:be:46:
         df:3f:47:16:72:58:a3:c0:d4:c9:f3:7b:c4:0c:f3:e3:85:7f:
         de:1e:d1:00:11:ea:fd:79:45:7a:96:1e:39:f6:53:71:79:aa:
         3c:52:4a:7c:35:4b:6e:b5:ce:76:56:00:ee:66:9f:06:51:79:
         54:55:11:24:9f:df:5e:17:62:e1:69:58:65:4c:40:34:f8:ef:
         69:a7:c9:44:8d:11:7e:68:9f:05:d5:ac:54:d8:cb:05:81:27:
         18:2b:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:33 2025 by rpki-client