Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb0516de-ad23-3ce8-8a74-91045ce8ae0e.roa
File:                     eb0516de-ad23-3ce8-8a74-91045ce8ae0e.roa (raw, json)
Hash identifier:          hnRuoiYH5kwou8q3Vu35d++zm3WBUwcGGkM75DKhy2E=
Subject key identifier:   DD:C9:F8:19:E7:72:47:44:9A:CD:4B:21:B2:DE:4C:6F:E1:E0:49:27
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66183A26D462122FC7491F00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb0516de-ad23-3ce8-8a74-91045ce8ae0e.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.28.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:18:3a:26:d4:62:12:2f:c7:49:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=1808dbf2-2093-4622-b549-6457100f8429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0b:2b:94:07:47:3d:c8:5b:7c:54:fc:a0:b8:
                    f6:f6:f5:3d:80:67:6f:eb:aa:c6:02:80:c7:c9:90:
                    60:b7:ec:8b:86:ed:23:ef:f9:fc:2a:1f:7c:ac:cb:
                    79:91:9f:fc:ec:36:64:e1:58:89:ca:65:64:7f:8a:
                    d7:da:dc:00:53:44:38:1a:b6:a1:48:39:89:e7:68:
                    fe:09:a2:68:46:82:9a:5b:5c:18:75:cc:76:e5:a1:
                    5a:1c:ea:b5:92:b3:b6:05:02:e7:55:02:c6:f5:1d:
                    23:64:50:3c:1a:2e:d8:52:c5:cc:da:31:41:9c:8b:
                    eb:7c:b6:39:83:fa:0e:d1:16:d4:95:95:8d:f2:a0:
                    68:b3:15:43:07:dd:7e:77:85:64:8b:d9:40:38:79:
                    5a:3c:6d:6c:09:f3:f7:7a:86:d9:e3:1b:cc:02:cb:
                    ac:07:93:2a:22:a0:f9:9c:c8:db:27:7d:07:8c:18:
                    fc:53:ee:8b:59:6b:c6:f3:88:8a:68:0f:9e:d7:72:
                    d0:b2:bd:e5:c1:b6:f5:f5:43:ed:46:37:b1:4b:e5:
                    29:4e:ea:af:9c:2b:22:25:19:6b:58:4d:35:37:e1:
                    99:44:ee:83:26:9a:e6:70:fe:b2:20:83:74:5d:9b:
                    ce:85:38:f4:dd:59:9b:85:5e:8d:00:77:69:f4:ea:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C9:F8:19:E7:72:47:44:9A:CD:4B:21:B2:DE:4C:6F:E1:E0:49:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eb0516de-ad23-3ce8-8a74-91045ce8ae0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:89:5c:eb:0f:5c:57:3a:c2:0f:28:d4:0a:fa:9c:a1:a0:29:
         55:53:63:3c:85:0b:3f:25:ad:88:e9:36:75:05:35:bb:f7:6e:
         53:e0:bb:21:af:15:e2:f3:cc:bf:77:ce:a6:ad:9e:97:33:42:
         72:04:35:23:7f:c2:08:5d:5c:07:7b:f4:e3:25:23:e9:e1:0b:
         28:47:53:30:ac:c5:92:1a:15:8c:31:99:2a:d4:af:13:0d:04:
         cd:12:a8:2c:46:7c:5a:da:de:f2:c5:0e:5e:43:52:24:d4:eb:
         89:d6:c8:40:1c:8e:ec:49:57:ac:d5:93:b6:6f:95:d5:bd:29:
         5c:7e:29:61:c8:18:7d:e7:cc:d1:c5:8d:bf:98:1d:18:70:e7:
         0c:a6:6b:fc:ad:06:7b:ba:2c:bb:ae:7f:97:8c:85:8b:b0:e1:
         70:86:6e:d3:8f:bb:7c:55:3a:b5:57:3b:a1:2a:65:76:d1:d1:
         7a:eb:b7:40:90:f4:1d:4c:39:fd:d9:26:05:18:f8:81:09:35:
         9a:51:0f:c9:ab:2a:33:94:9a:2b:7d:71:16:67:e3:95:3c:05:
         48:1a:b1:36:f1:e4:18:1b:95:84:78:8d:d2:63:a7:d9:92:10:
         7e:43:cf:50:ce:82:45:f0:b2:3c:24:23:d6:63:25:8d:56:bd:
         6d:a2:fb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:38 2025 by rpki-client