Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee35cf5-0707-362d-b321-9210eb22b873.roa
File:                     dee35cf5-0707-362d-b321-9210eb22b873.roa (raw, json)
Hash identifier:          MYD4LPLGrEhO3B6wKgO0ufwBfR0EhwmhS9RC5D715h8=
Subject key identifier:   AD:76:A6:F9:4D:E9:87:3E:A1:F3:BA:A6:A5:CB:A0:80:22:8F:54:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848143DCD9A0789F88916EAB040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee35cf5-0707-362d-b321-9210eb22b873.roa
Signing time:             Tue 03 Dec 2024 02:00:40 +0000
ROA not before:           Tue 03 Dec 2024 02:00:40 +0000
ROA not after:            Mon 03 Mar 2025 02:00:40 +0000
asID:                     7015
IP address blocks:        71.232.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:14:3d:cd:9a:07:89:f8:89:16:ea:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  3 02:00:40 2024 GMT
            Not After : Mar  3 02:00:40 2025 GMT
        Subject: CN=feef4459-14a1-4f00-a1f0-3b0bf7d90acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:af:87:9d:c0:15:a8:23:98:49:1d:c4:75:
                    13:a8:9e:1a:b6:4d:1d:4b:fd:0d:0a:2f:17:75:7c:
                    47:30:a8:43:4b:db:81:a9:33:4b:4e:83:b8:cd:2a:
                    0b:1e:07:3b:a2:04:14:44:33:ee:45:85:3e:df:b5:
                    2b:ae:fa:37:f8:c2:e4:b9:16:bb:f3:09:f1:79:f6:
                    ae:90:ee:8d:e5:28:4c:ac:ea:31:b5:ec:8e:8e:df:
                    f8:fc:cc:c2:c3:70:1e:d9:b8:27:1a:4c:c0:49:09:
                    c0:0c:af:90:24:b8:3c:88:4f:11:94:03:fa:57:08:
                    d0:48:0b:5f:36:25:c0:0e:c1:4e:27:13:fd:2d:e7:
                    74:de:7a:ef:e0:be:53:51:93:a0:f3:6e:b9:4d:99:
                    67:8c:af:70:3e:37:c0:96:a8:47:c8:36:01:97:26:
                    14:c1:e4:c5:15:3c:55:bb:09:2c:e2:ca:6a:f5:49:
                    d4:42:72:0c:2e:4b:bc:c4:d9:ad:42:8a:08:33:cb:
                    e0:36:4b:13:6f:c6:88:70:22:dc:13:f9:21:9c:6d:
                    b3:cf:71:2b:cb:04:33:86:18:3d:19:2a:c9:77:a2:
                    13:32:bd:3a:3f:7b:4b:21:de:f6:40:cc:cf:cd:3d:
                    5f:64:4c:66:00:22:57:95:e0:f9:13:a0:32:6d:9b:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:A6:F9:4D:E9:87:3E:A1:F3:BA:A6:A5:CB:A0:80:22:8F:54:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dee35cf5-0707-362d-b321-9210eb22b873.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.232.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:91:73:a7:5d:15:e5:b8:65:23:c7:eb:6e:36:a3:db:02:4a:
         e7:b7:83:15:e0:6f:9a:71:c5:a1:9c:e9:02:8a:e9:ba:9e:bb:
         36:20:ca:7f:67:70:3b:0e:00:8d:22:bd:7c:eb:68:8f:ab:1b:
         b8:b1:77:0e:87:35:04:82:84:0d:a4:70:5a:34:d3:c6:47:86:
         4a:c4:5e:1b:19:e1:5f:40:85:14:4c:e3:9a:be:a7:35:1a:e0:
         7e:04:a2:ed:bb:64:19:2d:4d:3a:24:fb:12:91:11:fc:eb:a3:
         0f:b2:af:db:6c:2d:af:24:b2:5c:94:c9:85:94:84:7d:70:69:
         8c:7a:8e:aa:be:50:43:92:b4:89:9b:2c:ee:f0:30:19:fb:a6:
         6c:f9:8d:49:e5:89:df:9f:1d:c5:06:c4:8f:f8:41:82:56:2e:
         d6:2c:0c:a2:2f:c7:fd:b4:d3:da:8f:91:64:c1:fa:2a:70:78:
         9a:7e:4f:b5:2a:04:c1:01:e4:d9:85:e3:d3:ba:0a:77:13:c8:
         87:2e:e6:69:64:47:5a:a7:00:b2:51:40:91:42:08:ad:ba:9c:
         0d:f7:56:81:21:06:6e:e0:09:37:6c:40:a6:7f:5e:60:5c:bb:
         91:44:33:b7:55:ce:66:1a:a7:d8:ab:b0:6b:bd:80:ec:ad:c8:
         89:3e:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:03:58 2025 by rpki-client