Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ea5bd6-0af0-38ea-9b12-e26b1e1f23bf.roa
File:                     20ea5bd6-0af0-38ea-9b12-e26b1e1f23bf.roa (raw, json)
Hash identifier:          xwV5FndupZyC6YrSSO86XN92ni9yO8QfL40d2rNn9zc=
Subject key identifier:   48:06:78:D1:4C:E2:A8:B1:E1:CB:31:AF:90:B7:1A:D2:05:22:19:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B91BB59E7FE5CAD901500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ea5bd6-0af0-38ea-9b12-e26b1e1f23bf.roa
Signing time:             Wed 11 Dec 2024 15:18:00 +0000
ROA not before:           Wed 11 Dec 2024 15:18:00 +0000
ROA not after:            Tue 11 Mar 2025 14:18:00 +0000
asID:                     397200
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:91:bb:59:e7:fe:5c:ad:90:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:00 2024 GMT
            Not After : Mar 11 14:18:00 2025 GMT
        Subject: CN=abe83c41-61b1-4755-ba05-d26800556407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:6d:75:5a:4a:18:1f:64:f5:0c:6d:dd:60:
                    24:1e:73:86:bd:17:40:6a:08:a2:70:44:e1:06:8d:
                    86:b9:59:ce:cf:dc:2c:8c:59:03:aa:f9:e9:b7:47:
                    fc:b0:a0:61:6f:e5:bd:85:17:05:fc:7f:a2:50:38:
                    6e:d7:03:f2:bc:57:34:1b:4d:ad:66:dd:97:4a:ac:
                    df:49:f5:67:d9:78:a2:c5:c7:35:92:e0:d8:a5:63:
                    6c:f1:8d:4c:f1:02:50:b9:e1:b4:36:29:d6:47:90:
                    82:a7:91:a3:6e:7c:0c:74:a1:e3:54:9f:be:60:5a:
                    a4:2a:ce:31:3b:c9:58:04:1e:14:d7:5d:20:98:f9:
                    10:5c:db:83:6f:c9:fb:ce:04:2a:47:9c:82:7b:bc:
                    af:aa:e6:8a:6a:d9:2c:16:e1:e9:5a:28:ae:86:33:
                    55:39:59:5e:da:d4:18:e8:f8:b0:e2:d0:4c:fc:1e:
                    8a:b7:da:40:38:53:76:51:f1:a5:28:22:67:97:dc:
                    09:a0:ab:2a:49:48:fc:e5:3e:56:aa:1e:c9:85:6d:
                    7c:4e:d3:00:cd:d0:f9:42:6c:b2:01:b0:86:4f:ee:
                    a4:93:f6:38:55:7f:bf:b5:7d:66:37:6b:1c:c5:b1:
                    a2:a5:6d:4c:c7:34:18:e2:93:8b:7f:a3:83:8e:2f:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:78:D1:4C:E2:A8:B1:E1:CB:31:AF:90:B7:1A:D2:05:22:19:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20ea5bd6-0af0-38ea-9b12-e26b1e1f23bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:1c:92:d8:01:a2:0b:c1:c3:96:cb:cf:d5:69:a3:86:5e:
         c0:80:79:fa:4f:3a:e5:20:ec:0b:76:a3:cb:1a:43:d4:2f:08:
         e3:cc:69:e6:fa:af:2d:2f:f1:a2:62:17:20:90:72:ce:99:a0:
         1c:6c:b4:b5:dc:d0:11:96:e4:9d:a6:5f:6f:ee:d4:06:ba:85:
         19:da:f9:da:ad:28:d8:7e:a4:0a:c5:e8:9d:5a:80:c3:cf:6f:
         b7:00:7b:3b:4a:2f:d3:83:1e:df:4a:00:87:54:92:5b:16:ed:
         98:19:55:9c:f1:8b:60:e3:b9:8e:8c:fc:1d:0a:4d:21:83:bd:
         50:a3:a6:71:e3:b3:31:93:05:07:91:13:6d:d4:98:56:b3:76:
         47:e5:26:ef:22:fb:65:2b:44:22:f1:70:5e:cb:77:ad:fb:d2:
         fd:f8:a2:e0:ce:f7:a2:55:06:b8:cf:41:7f:34:1f:8e:0f:58:
         7b:2f:a7:fc:d8:62:7b:d4:7e:38:f3:d4:91:5c:f3:13:fa:04:
         98:28:88:23:c9:52:e5:6c:fb:78:af:31:74:02:d5:df:cc:d2:
         d8:ff:ba:f1:0d:fa:f7:eb:20:2c:36:50:2c:d4:57:96:6b:13:
         76:4f:47:2a:d0:38:ba:48:61:a0:83:c1:c7:9a:4f:43:a5:d5:
         a9:b1:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:10:06 2025 by rpki-client