Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d77c8748-9017-3f58-945c-758ac2d0a697.roa
File:                     d77c8748-9017-3f58-945c-758ac2d0a697.roa (raw, json)
Hash identifier:          so0DFBJOXCnGpycOn+jEnLUJYXWKMIHszVseW/EOTBo=
Subject key identifier:   FC:F1:22:86:33:79:27:88:55:87:A0:A2:99:84:EB:E8:42:01:35:C7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584668F9E411B2043BE1E313D8C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d77c8748-9017-3f58-945c-758ac2d0a697.roa
Signing time:             Wed 03 Jul 2024 01:00:24 +0000
ROA not before:           Wed 03 Jul 2024 01:00:24 +0000
ROA not after:            Tue 01 Oct 2024 01:00:24 +0000
asID:                     7029
IP address blocks:        71.31.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:68:f9:e4:11:b2:04:3b:e1:e3:13:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul  3 01:00:24 2024 GMT
            Not After : Oct  1 01:00:24 2024 GMT
        Subject: CN=a46e2826-9a6f-41c7-bdb8-0d1a70688127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:71:c1:68:47:d1:a9:c9:87:b0:a0:92:42:
                    7c:c9:18:d5:c9:0f:dc:09:8c:52:55:37:4f:9d:c7:
                    07:f1:83:f2:8b:62:aa:a2:5b:ca:a6:31:c5:4e:8b:
                    73:3b:0e:aa:cc:b1:21:ff:a8:ab:2a:3c:98:77:c7:
                    4a:b6:3d:3a:cc:6d:48:03:70:4c:3a:82:48:80:c9:
                    60:b6:33:88:ea:e8:05:66:f0:00:eb:25:60:3e:40:
                    08:aa:e3:d8:cc:8e:c9:a5:ac:e4:4b:80:9c:2b:59:
                    52:2a:61:e2:7a:70:cf:bc:00:8f:a3:d0:ab:c7:d0:
                    40:0f:3c:5e:d4:1e:cb:00:4d:1c:41:3e:5d:e2:7f:
                    c9:90:67:7f:6f:2f:76:3b:76:21:7e:4f:45:5e:e1:
                    a8:7d:65:d9:e6:38:3f:79:69:ae:dd:24:ae:a3:9d:
                    23:02:82:92:f1:d0:b7:98:0e:27:8a:9c:17:5f:e3:
                    b4:14:9f:fa:6e:c8:f3:f5:05:92:a4:ef:6c:c1:25:
                    5e:4f:db:c7:5a:f7:dd:c0:c7:3f:e9:00:4e:fc:3d:
                    c4:e8:50:e8:9e:59:89:30:5a:ea:ca:57:04:16:60:
                    77:bb:d8:62:64:11:ad:4e:1e:ad:7b:31:e0:b6:a9:
                    d1:ba:01:dd:89:46:39:48:15:49:70:90:fe:4d:03:
                    90:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:22:86:33:79:27:88:55:87:A0:A2:99:84:EB:E8:42:01:35:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d77c8748-9017-3f58-945c-758ac2d0a697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:65:1d:52:7c:e7:74:87:26:47:fb:77:86:be:cb:c6:8d:38:
         09:31:c6:5a:17:b5:12:27:95:08:ab:7a:d9:29:c0:91:b5:30:
         87:99:b7:ea:b2:4e:5e:b1:2b:df:33:62:4a:db:d8:1b:d9:93:
         d4:0a:e0:c5:53:83:7f:30:9e:e4:41:81:d5:d7:1c:e9:19:18:
         e3:3e:c3:c4:4b:fe:db:90:a1:fc:1b:1c:5b:5d:cf:48:be:b8:
         e2:49:73:f9:31:cb:ea:b7:d3:95:00:da:18:da:39:0f:d9:a6:
         fd:28:a8:54:84:c9:c0:2c:e0:f2:47:44:95:c1:3b:19:c7:48:
         07:e1:66:ff:03:17:54:1a:62:27:bd:41:99:1d:26:db:43:cd:
         c6:a2:d5:d1:34:dd:6a:9b:98:ca:aa:db:01:49:33:61:ea:aa:
         a4:bf:79:b7:16:58:25:36:fc:78:d0:92:f5:51:ed:b8:5e:f4:
         2b:c6:27:42:cd:e2:f1:d2:84:c9:47:ce:cd:93:ee:a8:1a:9f:
         61:42:c2:23:39:4b:1c:d9:44:d3:ef:82:3e:b3:43:ae:da:13:
         1c:5e:18:ce:66:cb:e4:d5:41:e8:7e:b9:03:bc:83:07:76:70:
         28:6e:b7:98:ed:fb:81:6f:82:2b:f2:fc:34:32:06:0e:b7:d7:
         5b:26:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:45 2025 by rpki-client