Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa
File:                     0211fb73-7b2b-30ac-adfe-af5404647b0a.roa (raw, json)
Hash identifier:          8uzkFBiKAbraJOuQo4P/QjN+pq5cdblU//qI9D5MMng=
Subject key identifier:   F6:2A:3D:E7:01:DC:51:B0:F3:D7:23:A7:40:47:6A:32:57:04:C4:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B81CE2D2B8DC2B2BD9A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa
Signing time:             Wed 11 Dec 2024 15:17:53 +0000
ROA not before:           Wed 11 Dec 2024 15:17:53 +0000
ROA not after:            Tue 11 Mar 2025 14:17:53 +0000
asID:                     396557
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:81:ce:2d:2b:8d:c2:b2:bd:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:53 2024 GMT
            Not After : Mar 11 14:17:53 2025 GMT
        Subject: CN=71c9faa9-a8ad-4d03-92a9-84f467a50ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:b1:c5:38:d0:8b:8c:d6:f5:a7:26:07:b2:
                    b5:b0:21:9d:9d:a1:0d:1b:a0:57:8b:de:41:5b:a2:
                    43:71:45:a7:0f:2c:1a:c5:1d:3a:19:ab:74:77:4f:
                    3b:50:e4:37:3f:d4:ab:01:b8:e4:88:e4:74:1f:21:
                    4c:ef:1b:de:82:91:b5:45:66:dd:fe:8c:c4:12:8d:
                    e8:1c:3d:d8:26:5a:66:5f:d2:0f:29:38:dc:a0:a4:
                    61:e9:d5:ec:ce:4a:ff:a8:50:a0:48:ab:0b:bd:9c:
                    d4:24:5d:d5:5e:05:33:e6:00:1b:62:ec:16:7f:df:
                    30:7e:96:f6:09:d9:3d:21:5a:ee:80:d2:98:c5:19:
                    ea:bb:d9:e8:45:59:6e:58:a4:08:b7:56:3d:6d:d5:
                    f1:06:87:01:f1:e6:72:39:9a:c8:2c:47:81:1a:b7:
                    68:ae:7c:56:a3:a9:8f:c0:4f:aa:cb:5a:90:b4:e2:
                    fa:83:7a:7f:9e:94:f2:ae:6b:84:0f:07:24:1c:03:
                    9b:84:92:e2:08:6a:78:55:f3:cd:19:65:8d:23:4d:
                    85:8b:a5:94:41:18:2d:5b:5e:7c:3a:85:77:eb:0b:
                    bb:4e:95:6c:7e:40:04:fb:a1:39:fe:ec:05:01:82:
                    f5:d4:f2:fd:0b:f4:4a:3c:83:f2:5d:e9:0b:c0:87:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2A:3D:E7:01:DC:51:B0:F3:D7:23:A7:40:47:6A:32:57:04:C4:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0211fb73-7b2b-30ac-adfe-af5404647b0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:8e:21:e8:16:0b:c1:db:e9:1b:6c:16:9b:35:e1:70:37:
         06:23:e0:08:54:16:1d:6d:8b:cd:99:3b:f0:3e:b1:8b:74:8a:
         8d:c8:8a:21:ee:75:77:95:6b:02:e8:49:48:51:8d:14:07:96:
         b1:ad:24:7d:90:00:c5:1a:26:55:74:c9:d0:ea:65:0f:e8:2f:
         f8:8f:82:c1:d1:20:9f:13:e4:03:6a:e4:33:0b:32:d1:d6:7a:
         fd:d9:0c:3d:52:0f:9d:fe:c8:34:51:1b:d1:b6:4c:59:83:a8:
         a6:ee:10:2c:db:b4:d6:e4:51:0d:44:82:4e:7f:ea:b8:70:18:
         bc:7f:b2:4d:b5:86:71:8f:4c:cb:68:6b:f4:99:25:88:1d:63:
         7a:4a:c7:85:f9:53:5c:de:bf:1f:86:bf:af:c7:c2:25:47:c7:
         81:8c:2f:ad:88:c0:08:65:d3:d8:39:c1:80:e4:4f:5c:a4:4b:
         4f:d3:bf:57:61:20:6a:0e:91:df:9e:88:55:03:7e:0f:9e:61:
         9a:ae:f3:15:5f:3b:eb:9a:a0:f8:83:f9:e4:65:67:c1:df:a0:
         24:a9:eb:f6:55:79:1c:f4:10:6a:98:f5:22:46:82:2b:26:fe:
         ff:bc:6e:5c:40:dd:aa:eb:65:a4:75:fc:3b:30:90:b7:e0:1c:
         0d:23:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:15:31 2025 by rpki-client