Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3687874-45f6-3320-8189-038edd736d79.roa
File:                     b3687874-45f6-3320-8189-038edd736d79.roa (raw, json)
Hash identifier:          31ffSOsYL9T4RU/aXSGlGVFr9b/Gv3AIjmdJhdBvIqU=
Subject key identifier:   47:EF:AA:5A:9E:C4:AF:E2:A9:D7:12:63:B2:7E:94:44:4C:B0:8E:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B81A1B8B6F57E45037F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3687874-45f6-3320-8189-038edd736d79.roa
Signing time:             Wed 11 Dec 2024 15:17:53 +0000
ROA not before:           Wed 11 Dec 2024 15:17:53 +0000
ROA not after:            Tue 11 Mar 2025 14:17:53 +0000
asID:                     36616
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:81:a1:b8:b6:f5:7e:45:03:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:53 2024 GMT
            Not After : Mar 11 14:17:53 2025 GMT
        Subject: CN=85841593-fb94-40ad-bcb7-111a865b1677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:29:7d:8e:95:6d:61:59:be:fe:88:ac:6f:
                    f3:6b:31:b2:af:07:ba:19:ed:c5:f7:c2:b4:d4:03:
                    ee:2e:6c:15:a3:fb:31:d8:87:55:70:80:fd:58:53:
                    37:07:96:28:22:e1:a9:fb:05:dc:9b:57:ff:10:cb:
                    83:c9:d9:99:a5:bc:93:b1:1d:e8:4e:f0:cc:50:9c:
                    b1:49:e9:85:b8:c4:1c:27:4c:36:e9:1e:e5:d2:13:
                    1d:0f:a8:98:ff:13:33:83:b1:b6:f8:e9:5d:d2:38:
                    a2:8e:ad:60:75:1f:d4:75:f0:52:ea:a4:16:ab:85:
                    0d:e4:5d:10:ea:cc:8f:31:0e:29:a2:4b:e6:93:89:
                    e2:1c:fb:49:bb:2a:a9:6a:39:dc:e7:6c:3c:92:b5:
                    e5:3a:36:1d:6b:f0:a1:3e:fe:87:e1:61:b7:3f:29:
                    57:7c:67:a7:e1:c4:8b:c4:57:1a:11:8b:13:fd:18:
                    23:79:46:79:13:8a:eb:4f:05:24:88:a6:4c:d8:4f:
                    85:c2:92:9d:9a:b3:f8:10:cf:80:08:3e:d2:9e:80:
                    66:e2:ba:5d:d5:35:8a:36:af:3e:9e:3f:fa:3d:b2:
                    d4:8a:1d:5f:84:6f:0f:da:5d:8d:31:eb:5b:08:fb:
                    75:36:94:b3:06:99:71:eb:dd:5e:da:45:51:76:ed:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:AA:5A:9E:C4:AF:E2:A9:D7:12:63:B2:7E:94:44:4C:B0:8E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3687874-45f6-3320-8189-038edd736d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:1a:8b:42:7f:21:37:06:1d:40:28:6a:a0:e9:ae:45:32:
         ed:c1:88:1b:ac:75:36:7d:42:52:03:07:98:9e:48:83:49:20:
         9a:8e:47:6d:21:9a:15:a7:99:c7:d4:3a:89:d0:ba:f6:38:01:
         d4:86:9a:a6:b6:bb:21:07:f3:cd:5f:0a:4d:4c:6a:57:cf:3a:
         95:74:4e:b4:72:3f:70:99:0d:54:72:cb:67:13:de:63:dc:cb:
         48:92:69:27:92:d1:8c:cc:22:7b:2f:e1:3a:81:59:fe:12:7f:
         57:57:97:ce:c8:eb:5f:4f:4c:8a:92:ca:0e:40:3d:33:6a:04:
         14:a4:af:3b:ff:99:fe:18:41:21:08:9f:17:61:0c:7c:9b:2e:
         dc:f1:e6:e0:e6:41:91:90:6e:b7:ab:06:11:d3:99:29:4a:a9:
         4b:98:2d:ce:e2:5c:f3:c4:81:9a:99:17:6c:14:01:f0:bb:a3:
         36:d3:d4:bb:a3:6c:88:72:b0:27:58:2b:e0:0a:01:ff:b3:2d:
         89:39:da:e9:6b:55:91:cb:c3:c9:f5:6f:2f:c7:e3:f4:1e:0a:
         65:d7:be:28:1e:af:59:50:c2:88:80:b4:7e:05:a9:67:34:9d:
         20:c1:17:b5:66:22:e5:f5:21:88:e3:b8:6f:ef:85:46:7d:7d:
         aa:11:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:33:21 2025 by rpki-client