Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cf35463-ffed-362a-a108-6ec0f7433781.roa
File:                     7cf35463-ffed-362a-a108-6ec0f7433781.roa (raw, json)
Hash identifier:          QD8q77UG8QEpnIg3Iynu5Ioxg327YG0+aoOC6rYlFus=
Subject key identifier:   9A:DD:EF:19:ED:46:C9:0A:E3:8C:9C:DA:E7:C6:95:4B:87:29:1B:B5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289D370B550BF4E8DA5D300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cf35463-ffed-362a-a108-6ec0f7433781.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        71.28.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:d3:70:b5:50:bf:4e:8d:a5:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=9bb02a09-668b-4621-a463-b77bd7fedccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:cf:b0:40:b1:81:df:9f:a4:78:09:c1:9e:
                    c6:c4:b3:fa:8f:9f:de:de:c4:96:e0:8d:18:03:19:
                    4d:d5:03:b1:4e:6d:8a:89:f3:df:9f:57:75:33:ab:
                    7f:f0:09:bf:7f:3a:32:aa:77:16:ad:6c:01:8e:56:
                    41:03:b7:28:51:2e:5e:66:50:56:7e:81:d2:62:9a:
                    cb:20:68:88:75:62:a7:4d:55:0f:87:2b:66:0c:dc:
                    f1:02:e4:31:1d:25:0d:c3:4e:20:03:02:0c:41:d5:
                    ab:ae:d7:9f:cd:d8:fd:53:91:9e:9e:fa:2a:38:64:
                    5a:a7:47:34:1a:f0:bd:2b:15:f3:fc:f6:4a:b0:c2:
                    cc:d1:c8:39:5c:27:33:78:40:d0:3f:9c:14:cd:47:
                    4d:e9:92:4c:b6:6e:9c:66:3b:01:b0:ad:fc:5e:4e:
                    d8:55:a7:da:0f:4a:4c:04:0b:4e:c8:b0:0c:bb:dc:
                    cb:95:a8:d9:57:64:25:a5:30:8b:37:68:17:19:63:
                    b6:8e:fd:be:06:7c:2f:b3:a9:f5:25:7c:4a:24:3a:
                    cc:51:fc:bd:8f:46:dc:8c:12:4b:32:bb:87:8f:54:
                    6e:6e:a5:1f:ad:9f:12:34:af:95:b4:1e:b3:9f:2a:
                    15:b9:2e:a4:99:f9:93:9a:a9:c4:ce:40:4b:52:34:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:EF:19:ED:46:C9:0A:E3:8C:9C:DA:E7:C6:95:4B:87:29:1B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cf35463-ffed-362a-a108-6ec0f7433781.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:23:28:3d:67:2a:89:1e:dd:91:71:53:d6:9f:40:76:ec:bf:
         a5:3a:0d:e1:ec:24:1b:7e:0c:90:0a:4b:5c:6e:1f:ee:30:aa:
         1c:83:05:0b:12:e0:72:ea:9f:b0:d1:6e:aa:22:0f:b7:6d:61:
         ec:d0:d8:ca:d1:09:bf:13:21:e9:7f:b0:63:8c:d6:13:13:1a:
         3f:88:84:60:ac:9f:95:5b:5d:f6:f0:1b:c9:55:41:45:12:16:
         ae:68:02:bd:4f:72:fe:0b:26:6d:54:bc:a8:ce:74:c8:c2:a6:
         25:80:34:99:f5:46:23:75:97:be:54:60:cb:1e:ea:c1:5e:eb:
         22:3f:c4:17:4b:45:9b:7e:06:58:57:28:fe:f5:6d:aa:cc:18:
         04:ee:21:da:6e:86:49:ef:71:f0:9d:63:52:9d:25:cd:af:e8:
         44:af:74:16:1d:2c:70:30:ce:e0:3d:3b:d2:6e:34:15:c0:50:
         94:d2:19:b0:d5:20:31:78:81:4c:be:db:ce:25:5b:7d:7d:f6:
         a1:64:24:5f:98:fa:60:2d:99:7a:c5:58:e8:95:51:4a:8b:b2:
         ca:06:31:51:fe:2e:f7:5e:73:53:64:7c:c2:b6:25:8a:6d:12:
         2a:48:6f:be:3b:9f:8e:01:e1:c8:87:48:e6:c7:87:bc:cf:85:
         13:18:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:49 2025 by rpki-client