Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa
File:                     7d5bce6c-90ea-3951-a197-aa0526142d66.roa (raw, json)
Hash identifier:          P0MHCIpk0MujQ32ggKWyFuiOBNE7os3y0QDwrAdcXp0=
Subject key identifier:   EC:1E:6A:96:4E:0F:AF:D2:FA:08:1C:03:FC:E6:63:67:45:2E:A0:8E
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068F4FF1C900EADFAE81C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     33363
IP address blocks:        71.44.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8f:4f:f1:c9:00:ea:df:ae:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=233fed9e-17cc-4ca9-be8e-2f5cdeb8c453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:b5:5b:fa:db:48:be:d2:12:ec:42:ef:73:
                    46:c7:d5:3c:58:84:32:f9:bf:44:2d:4d:df:76:08:
                    1b:3c:ec:e4:ff:b2:b9:4e:4e:c4:bc:b9:7a:5a:12:
                    74:7b:50:fe:3b:ba:be:1c:dd:9d:18:46:23:03:2e:
                    34:4f:be:5d:de:da:d3:9b:7e:d7:40:df:cd:25:d6:
                    68:5e:63:d1:40:5d:d3:4c:a7:4e:79:55:6e:be:49:
                    a0:63:8c:a2:ab:c8:d2:51:26:26:be:9a:c2:2a:e8:
                    d9:19:7f:a4:90:c4:69:7d:f2:66:b3:6a:e8:06:ac:
                    ed:00:0f:a7:f3:7e:06:99:16:ac:84:ba:2c:2b:d7:
                    ff:05:f8:c3:aa:e7:f5:b4:dd:5b:70:4a:32:7e:c6:
                    6c:ab:b9:9c:47:a8:3b:b8:4a:76:b3:a7:f9:22:9c:
                    36:6b:a0:98:c3:35:99:91:0a:ac:92:8e:33:ea:88:
                    28:47:12:a4:9c:ec:35:c1:0e:f7:d3:3a:4a:a4:16:
                    d8:2f:81:38:48:e4:4f:e5:91:7a:04:5e:57:50:c5:
                    7a:7d:ec:7e:32:4d:c3:0f:cf:47:f4:cf:ee:3d:f4:
                    dc:f3:b9:3e:c0:59:3e:fc:1e:c2:55:27:37:ac:96:
                    60:1c:cd:2b:01:ea:b3:a8:01:41:c3:61:08:47:68:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1E:6A:96:4E:0F:AF:D2:FA:08:1C:03:FC:E6:63:67:45:2E:A0:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7d5bce6c-90ea-3951-a197-aa0526142d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:46:b0:71:ac:db:f0:17:de:d9:2b:d0:64:8f:4f:e2:ed:
         2e:c2:4c:ed:c1:9c:74:d5:5f:cc:f6:c9:4e:4b:d0:25:8e:d4:
         e4:69:da:93:7f:f6:71:c9:4b:ba:6e:ac:49:fa:b8:0c:cd:f6:
         68:f1:f8:a8:a1:35:26:bc:8e:53:1b:4c:dc:56:97:fd:fb:79:
         74:28:55:e2:e4:ed:5b:b7:f9:a1:be:87:86:5e:de:c8:66:d8:
         d8:2b:35:79:8e:39:5f:22:16:db:2b:cb:8e:4e:ac:0d:e5:8d:
         5f:28:a4:cc:d7:b9:b2:c4:9a:cc:ad:e3:6c:b0:9d:d0:8d:28:
         36:ca:4d:2d:8d:14:56:b6:6a:cc:05:af:69:14:f6:d6:14:18:
         5b:33:b1:e9:6e:c6:42:bb:91:28:18:cd:80:8f:2e:fe:d6:12:
         46:be:fd:5a:17:cf:30:db:90:e3:b5:cc:21:c9:8d:2e:6e:2e:
         60:63:4b:2b:21:4d:8d:4d:1e:df:11:d0:7a:0b:a2:84:4f:b8:
         61:71:4b:cc:5f:20:9b:cf:b8:61:e6:34:26:52:70:f0:28:08:
         90:8a:39:ed:ea:e5:a7:9c:d4:69:ed:9b:b7:c0:60:27:16:46:
         62:b4:26:e7:44:80:c4:63:bd:77:da:4a:94:62:dc:7b:ce:98:
         ad:8a:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:33 2025 by rpki-client