Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/50753ce1-d05e-3c67-9b71-97b24621f922.roa
File:                     50753ce1-d05e-3c67-9b71-97b24621f922.roa (raw, json)
Hash identifier:          2p+NcTdM/bzxs+Wr/1/gOr7BqikGh+V8SJfosXNDlkM=
Subject key identifier:   1E:FA:70:13:CC:8B:A6:78:FB:44:DC:00:3D:82:52:85:B1:6B:A1:71
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E006872F5F5DB287A30E7480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/50753ce1-d05e-3c67-9b71-97b24621f922.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     16787
IP address blocks:        71.44.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:87:2f:5f:5d:b2:87:a3:0e:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=177456ba-7a0c-424f-ac9b-64cea52ac688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:f6:09:c4:73:03:25:c9:25:da:bc:10:dc:
                    dd:83:87:2c:95:ad:67:8e:03:42:2f:6e:b0:c9:1c:
                    b7:ba:10:00:99:54:d0:43:75:63:58:4b:38:5e:e1:
                    6d:42:18:d1:e0:ad:5e:1b:6d:b3:0d:1a:a3:ce:78:
                    cd:ca:c8:c8:6b:46:fd:6b:21:98:dd:dc:66:22:2c:
                    0d:e0:f8:c5:51:d6:51:c8:de:2f:8c:f1:5c:75:45:
                    0d:c1:68:50:a8:55:04:83:a3:0f:e4:e1:21:23:a5:
                    d3:b4:4a:09:40:a9:b2:b3:bf:0c:16:fa:92:2d:69:
                    7b:ac:0e:e8:7d:d6:92:c0:af:ea:ae:bc:08:1e:27:
                    f8:66:38:d1:37:b8:b8:da:0f:ea:fb:53:68:ff:2d:
                    48:a9:34:ff:c6:17:5e:d4:7e:cd:b2:46:2f:7e:71:
                    98:ba:25:94:73:3b:79:81:22:40:6b:52:89:79:30:
                    f0:1c:9b:b5:79:a8:41:df:4b:bc:fa:08:6f:18:7e:
                    1b:7d:b6:36:29:1f:8c:82:ba:20:e2:9f:97:7f:00:
                    7f:ca:14:01:d4:13:8a:f8:1b:72:3f:0b:2f:8e:11:
                    30:a1:19:8b:6e:cc:44:ba:d0:83:be:04:5f:c4:f4:
                    b5:d6:7f:67:f8:29:0a:5e:f7:6f:a3:fe:b2:8e:39:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:70:13:CC:8B:A6:78:FB:44:DC:00:3D:82:52:85:B1:6B:A1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/50753ce1-d05e-3c67-9b71-97b24621f922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b3:96:94:60:59:d9:3c:6e:b8:42:37:61:69:80:f5:9f:1d:
         c7:a2:ff:fd:16:c2:67:7b:e5:f7:00:a7:3d:16:87:1e:1a:e0:
         ba:d6:db:86:11:1f:a3:ed:a3:93:c9:63:87:52:fb:13:30:b2:
         ea:08:56:cf:9c:05:30:c0:15:97:21:41:37:26:16:b9:da:aa:
         46:56:5b:ab:56:16:3e:c7:26:bd:85:46:fb:12:6f:85:a7:a9:
         3a:35:59:40:d2:f2:f7:45:4c:65:bf:c4:d6:b6:fd:cc:de:f5:
         f6:1c:60:30:dd:e4:3e:7a:7c:9e:b6:a0:11:96:ca:56:13:95:
         d8:02:6e:13:31:d0:92:7f:41:7f:d3:6f:79:18:1c:97:75:4b:
         a9:e7:2b:35:ac:2d:e7:67:57:d4:83:6c:08:6e:7c:fc:d7:8b:
         a7:c5:a0:92:b2:6c:20:97:ac:37:69:b1:fc:66:6f:28:fb:83:
         91:b6:12:2f:b1:66:6b:8a:80:f3:4c:53:37:4b:5b:de:31:d2:
         8c:6f:1b:d6:e2:39:87:dc:fa:08:3d:d6:b4:86:5c:8b:f0:57:
         75:98:bd:a0:86:77:ea:38:df:33:bf:7d:ce:73:25:cf:f4:97:
         7d:e2:40:04:4d:27:95:9a:b6:5c:ba:5a:58:39:3f:59:0a:7e:
         37:a7:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:02 2025 by rpki-client