Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa
File:                     81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa (raw, json)
Hash identifier:          PTygsMPYEJCkxVcQ2A4+f28tHG1P+8aDUHYwPTMR1Kk=
Subject key identifier:   8D:59:71:C8:45:D5:13:70:12:1B:59:45:6C:85:D9:EF:7E:32:15:A5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849568EBB90BDCAB3BA74A3B720
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa
Signing time:             Fri 28 Mar 2025 13:00:51 +0000
ROA not before:           Fri 28 Mar 2025 13:00:51 +0000
ROA not after:            Thu 26 Jun 2025 13:00:51 +0000
asID:                     7029
IP address blocks:        71.29.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8e:bb:90:bd:ca:b3:ba:74:a3:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 28 13:00:51 2025 GMT
            Not After : Jun 26 13:00:51 2025 GMT
        Subject: CN=f953aa36-6406-45b6-a6ab-36699e1ef05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5a:ba:0e:99:e0:78:32:4d:7b:2e:ee:ec:0a:
                    32:0f:e1:44:2b:d2:fa:48:f8:ed:f2:14:02:46:6a:
                    36:40:29:bf:e8:78:bd:47:96:41:27:6a:a8:b3:a7:
                    60:f7:d9:38:2f:a7:cb:83:25:b1:68:3a:bd:64:25:
                    9a:5d:05:bc:e4:ea:dc:18:c8:18:af:fc:7f:f1:52:
                    40:49:47:a1:19:7d:9f:9c:1c:96:d3:e4:ff:a5:b5:
                    26:39:7c:23:ca:52:15:e1:03:64:56:43:ff:cf:a0:
                    07:f5:2d:26:3e:c3:a2:55:e2:8c:f2:f4:19:f2:ef:
                    4d:06:02:32:3b:6b:c9:28:d0:6f:67:40:a9:01:83:
                    d3:86:0d:f2:77:03:1e:ab:c8:4b:7f:e6:28:88:5e:
                    19:fe:11:f9:26:ec:9c:2c:76:d6:68:5a:a2:74:52:
                    0d:c1:eb:42:f1:3c:a6:22:cc:c2:ed:ac:b8:73:aa:
                    c1:b5:ec:c7:7d:72:ae:ce:72:03:84:b3:79:f7:7a:
                    ca:32:64:c7:33:e3:1a:62:31:74:f8:a1:0d:9a:03:
                    ef:9e:93:64:6d:e2:c2:48:19:7f:0c:5e:58:37:da:
                    e8:e7:c0:1b:7d:d1:fa:14:77:ae:56:da:94:7b:bd:
                    eb:ab:62:41:09:96:94:09:87:92:dc:7f:f8:b9:47:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:71:C8:45:D5:13:70:12:1B:59:45:6C:85:D9:EF:7E:32:15:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:bd:57:a5:68:9a:d5:ea:12:d7:82:62:38:7b:91:d7:fc:
         3b:65:53:40:11:ac:ac:77:c1:bb:42:1c:2e:2c:df:78:62:aa:
         07:37:84:33:92:0e:73:44:64:f5:db:d2:75:7f:6f:50:ee:22:
         c3:b3:b4:d5:84:83:6c:29:90:fe:50:c5:41:5a:72:98:76:ef:
         35:7b:64:5d:b5:8c:b1:f0:42:5c:07:ca:c4:da:e6:1d:c7:25:
         1a:15:8d:ac:a5:1b:06:24:37:63:65:1b:46:45:3b:10:fb:60:
         ba:49:b2:c6:57:ba:60:b5:37:07:e6:e5:ae:20:d4:c9:b0:81:
         f1:85:b4:ad:b7:8d:e6:4a:b2:f2:52:a2:1f:a1:5f:9e:8c:19:
         3b:2b:e9:6a:fc:cc:a5:c9:7d:3e:d7:59:04:20:c6:d9:4b:47:
         54:78:b3:3b:57:66:3d:81:39:54:84:00:6e:3c:be:16:b2:5e:
         2a:6f:ca:df:cc:50:28:95:a1:0b:e9:ab:d1:e7:6d:2b:f5:5b:
         ac:86:53:90:41:35:a2:52:af:60:5a:81:be:80:96:2b:95:d5:
         4b:84:f9:df:f1:19:cc:ca:0f:2d:a7:c3:fa:90:be:ee:9d:c7:
         af:6c:4c:4e:8f:76:e9:bd:3e:32:93:23:da:a2:ed:c6:60:6c:
         33:1e:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:52 2025 by rpki-client