Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebe964c6-16d3-3b10-bded-d184bcc6b267.roa
File:                     ebe964c6-16d3-3b10-bded-d184bcc6b267.roa (raw, json)
Hash identifier:          hikkyGgXXn30PBNQ+nTyUDyr5ydV1m028SxW6bwdZyI=
Subject key identifier:   F2:52:D9:BF:4A:71:CA:0A:3D:C3:72:7D:96:98:8D:E8:0C:95:71:86
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D66192BD560513C429E023A00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebe964c6-16d3-3b10-bded-d184bcc6b267.roa
Signing time:             Tue 29 Mar 2022 04:00:00 +0000
ROA not before:           Tue 29 Mar 2022 04:00:00 +0000
ROA not after:            Tue 21 Mar 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        71.31.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:19:2b:d5:60:51:3c:42:9e:02:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 29 04:00:00 2022 GMT
            Not After : Mar 21 04:00:00 2028 GMT
        Subject: CN=10f4f5a9-e61e-434e-aa73-591ac74e0bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:d3:4b:92:28:54:f2:ef:40:ce:93:a7:92:
                    d8:cd:11:dd:b5:90:30:cd:f6:83:6e:0e:ca:cb:07:
                    d6:96:f2:26:4b:52:48:06:8f:51:44:cf:1e:56:67:
                    b9:f7:7e:32:67:b6:f7:94:d5:5f:89:97:b3:74:73:
                    b5:82:15:e1:09:ca:18:6d:da:cb:45:5b:50:99:6d:
                    9a:a2:03:4b:24:49:43:44:69:51:84:29:46:2f:f8:
                    e0:3c:40:88:0a:fc:5a:c8:ac:5f:65:f1:50:97:d5:
                    f3:23:b8:b9:f9:99:70:1f:6a:1c:42:71:ce:69:89:
                    88:b3:13:67:d1:1b:a3:2f:e1:da:a3:64:4a:a2:2a:
                    50:dd:2d:6a:2e:93:65:7b:b2:86:bc:89:48:c1:f9:
                    fc:e5:18:22:c7:a8:05:56:db:69:2e:80:28:ae:41:
                    eb:d8:9c:13:20:e8:d3:75:fa:f3:28:a8:7c:a4:ac:
                    39:94:b6:f5:39:21:8b:4d:7c:a4:37:0c:80:4b:0d:
                    21:d8:59:5f:e3:4c:ee:e2:d2:f0:2e:e5:99:ad:61:
                    b5:23:bb:67:2e:26:92:c5:9a:32:e2:71:73:a3:6e:
                    9e:39:55:99:7e:0c:b6:c2:80:a8:9c:5c:3b:4b:c1:
                    cc:57:2c:88:ea:c3:b3:68:d3:a4:17:c8:0d:c8:77:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:52:D9:BF:4A:71:CA:0A:3D:C3:72:7D:96:98:8D:E8:0C:95:71:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebe964c6-16d3-3b10-bded-d184bcc6b267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:de:11:6e:72:92:4b:b1:a3:0f:db:eb:5d:be:e1:8c:b7:64:
         19:3a:0f:41:89:02:07:c8:4c:05:4c:0d:78:1f:3d:99:0b:66:
         0b:47:38:da:42:d1:f5:65:89:48:13:3a:b6:ee:84:22:07:71:
         2d:60:dd:f1:8f:3b:e0:a6:59:0b:17:6e:96:c6:c3:2e:2c:c5:
         d1:80:c9:ae:81:f4:50:f5:5f:97:2c:d6:55:8b:a5:64:05:b4:
         8c:0e:48:1e:6b:73:c5:aa:e4:8f:1f:cf:06:7a:8e:a8:24:5b:
         53:82:bf:47:d0:ad:58:59:32:47:a2:7d:60:cb:76:16:31:6a:
         d2:02:01:a0:c9:ab:69:71:b7:ed:96:bf:fc:c9:57:b0:b2:74:
         85:67:4c:e5:01:eb:0b:29:9c:b4:79:59:cf:12:8d:b1:04:50:
         97:5d:53:ba:6e:3a:42:46:80:ac:ea:91:ba:75:f3:88:c3:86:
         f3:fb:6a:f3:12:13:e8:dd:ef:04:6c:1f:12:53:60:4a:4a:e5:
         2a:0f:42:a4:c8:1c:80:87:7e:39:71:b6:e3:d3:78:d3:2f:14:
         54:d6:0f:c7:19:9e:08:7b:35:b6:78:01:49:4f:11:f8:5a:b7:
         af:7a:69:46:33:88:65:aa:a9:68:e0:15:3a:10:f6:c7:ae:d9:
         ea:88:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:31 2025 by rpki-client