Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa
File:                     d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa (raw, json)
Hash identifier:          9B1mZI0hWcQv3dwxaOdNwyxWeq4hu14Hr9XvFtXpy0U=
Subject key identifier:   F4:04:43:8D:98:FA:84:BA:AA:71:2B:10:03:DB:1D:71:A8:D2:DE:77
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848C9B0D80AC974EE9F5C210300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        71.30.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:d8:0a:c9:74:ee:9f:5c:21:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=50e73964-f630-4389-9f88-fe9327900e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:e7:7a:05:23:c8:58:81:63:e6:6f:44:58:
                    4e:ff:22:fc:2c:15:7b:72:5e:a4:9f:51:b2:24:63:
                    b5:a5:e8:49:e2:3c:68:fa:91:d4:b7:8e:aa:d3:7f:
                    c5:0b:5b:25:1c:a8:21:e4:ee:5d:29:a1:ee:e0:e1:
                    50:e2:f5:73:d8:bd:c9:07:6b:90:7e:40:f2:f5:69:
                    66:fb:d4:8e:7b:6c:57:53:4d:70:a2:d6:d4:fa:30:
                    42:4a:7d:35:19:69:18:11:31:1a:f1:13:f4:d9:12:
                    8a:73:95:b4:42:ce:02:e2:96:2a:ee:87:7e:e4:c4:
                    75:3b:5a:15:d7:8b:f5:07:64:53:a5:f3:38:ed:86:
                    ee:e2:60:a3:67:9a:c5:89:d1:44:18:ba:c8:37:e1:
                    4f:7a:07:8f:d2:4c:4b:01:6c:67:e3:60:4e:7d:06:
                    f6:65:ef:39:a8:04:a1:6e:0b:37:93:01:d6:3a:e0:
                    d6:29:50:44:ab:b3:54:61:5b:d9:35:37:5d:46:2a:
                    91:37:8f:74:80:96:07:cc:07:ff:5a:17:94:48:43:
                    e7:42:44:ad:8c:c8:d3:7b:87:79:fd:75:1b:ed:ef:
                    28:dd:81:0a:91:93:a2:ca:0f:2d:7b:d4:ff:1c:ac:
                    a9:e3:77:70:d0:cc:c1:ee:77:32:4f:65:64:a1:64:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:04:43:8D:98:FA:84:BA:AA:71:2B:10:03:DB:1D:71:A8:D2:DE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:18:d1:5c:4f:61:73:ae:76:91:0c:b0:53:d9:64:39:5d:
         0a:32:e0:c4:70:2c:8f:21:67:d1:8c:08:a6:f9:7e:1e:35:00:
         34:78:b3:54:16:d9:1d:90:93:d8:49:ac:01:03:37:a8:65:e5:
         5b:45:be:e9:59:f6:e0:0d:45:5e:a9:ca:8e:96:b0:8d:cb:3d:
         ca:af:ad:2a:f0:1c:5f:47:71:7d:4e:5a:5b:11:76:45:9e:00:
         d3:4a:85:be:b2:2e:f0:57:a0:48:78:1d:42:a1:6d:4f:35:c8:
         52:b3:36:db:5b:c0:ca:ac:f3:10:2c:62:a8:7f:46:65:4a:9b:
         99:da:94:38:af:f2:4f:05:47:ac:80:6a:a5:ef:d5:e8:68:d2:
         3d:90:e2:c0:c6:44:79:98:52:30:77:14:92:b6:49:1c:15:1a:
         ab:54:74:57:e6:77:76:34:97:71:93:c3:4d:6d:5e:4d:ff:5c:
         20:85:ce:8e:65:b3:ac:f7:4a:ea:cf:57:97:76:46:4a:c1:ec:
         56:1c:8c:89:6b:06:76:32:de:0a:0f:c6:3a:a2:f1:30:41:81:
         82:7d:bb:f2:0c:27:14:b1:9f:5a:7c:8c:8d:3c:50:ff:ea:f9:
         cd:e7:01:43:55:ec:43:2c:f4:1b:b9:1e:67:70:50:a5:41:cd:
         3b:6e:8d:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNgKyXTun1whAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk
NTBlNzM5NjQtZjYzMC00Mzg5LTlmODgtZmU5MzI3OTAwZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3nnegUjyFiBY+ZvRFhO/yL8LBV7cl6kn1Gy
JGO1pehJ4jxo+pHUt46q03/FC1slHKgh5O5dKaHu4OFQ4vVz2L3JB2uQfkDy9Wlm
+9SOe2xXU01wotbU+jBCSn01GWkYETEa8RP02RKKc5W0Qs4C4pYq7od+5MR1O1oV
14v1B2RTpfM47Ybu4mCjZ5rFidFEGLrIN+FPegeP0kxLAWxn42BOfQb2Ze85qASh
bgs3kwHWOuDWKVBEq7NUYVvZNTddRiqRN490gJYHzAf/WheUSEPnQkStjMjTe4d5
/XUb7e8o3YEKkZOiyg8te9T/HKyp43dw0MzB7ncyT2VkoWSrTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQEQ42Y+oS6qnErEAPbHXGo0t53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDkwZWIyMjUtY2IzZS0z
NGQ1LTkyYmYtY2ZkY2U3OWU3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQ+GNFcT2FzrnaRDLBT2WQ5XQoy4MRwLI8hZ9GMCKb5fh41ADR4s1QW
2R2Qk9hJrAEDN6hl5VtFvulZ9uANRV6pyo6WsI3LPcqvrSrwHF9HcX1OWlsRdkWe
ANNKhb6yLvBXoEh4HUKhbU81yFKzNttbwMqs8xAsYqh/RmVKm5nalDiv8k8FR6yA
aqXv1eho0j2Q4sDGRHmYUjB3FJK2SRwVGqtUdFfmd3Y0l3GTw01tXk3/XCCFzo5l
s6z3SurPV5d2RkrB7FYcjIlrBnYy3goPxjqi8TBBgYJ9u/IMJxSxn1p8jI08UP/q
+c3nAUNV7EMs9Bu5HmdwUKVBzTtujfE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:11 2025 by rpki-client