Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa
File:                     c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa (raw, json)
Hash identifier:          5gyQjzaCMedQu9D5b9y5G0naPMU0r7vWBkOVMrRVvNo=
Subject key identifier:   54:EF:DA:BF:F7:30:4F:BA:97:AD:C8:72:DC:E0:AC:DA:E6:3B:3A:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B873ED5CF9B3826C60CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa
Signing time:             Wed 11 Dec 2024 15:17:55 +0000
ROA not before:           Wed 11 Dec 2024 15:17:55 +0000
ROA not after:            Tue 11 Mar 2025 14:17:55 +0000
asID:                     25485
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:87:3e:d5:cf:9b:38:26:c6:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:55 2024 GMT
            Not After : Mar 11 14:17:55 2025 GMT
        Subject: CN=2988635a-167a-4ada-8ccb-37186eb0a2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:69:2d:70:2f:86:7b:a6:72:ca:ac:55:7c:
                    ac:d9:b3:02:87:c9:54:b4:21:bf:39:d1:c9:ae:fa:
                    71:11:b6:32:45:08:b7:0b:94:20:7e:1c:73:af:ed:
                    06:74:1c:28:3b:74:04:93:c6:15:c8:14:f0:3b:aa:
                    98:5d:4d:9b:54:de:46:e4:5b:5c:1f:0d:6d:a5:ed:
                    b4:64:6c:b5:c3:3a:58:5b:7a:e6:f2:47:7b:f0:9a:
                    01:4e:89:52:af:a6:64:72:8c:be:69:f3:4f:e8:01:
                    51:f0:bb:ac:d4:39:ba:2d:5e:fc:75:89:3a:6d:53:
                    da:9b:8d:a8:03:c7:9e:89:87:0d:a4:8d:9c:4d:75:
                    52:55:0e:90:3f:1d:c0:f0:e1:61:24:14:11:d6:bc:
                    85:6f:94:65:82:2f:c0:6d:a8:86:13:10:58:ea:fa:
                    b1:41:ee:01:ea:e1:7d:01:ca:a7:ec:c0:b0:51:82:
                    f8:89:3c:47:cd:3e:88:2b:4e:c8:b9:df:90:87:01:
                    27:f9:80:73:af:00:f7:ff:3a:ff:c0:1c:42:e4:0c:
                    a7:8d:f9:d9:11:fd:08:da:ae:a3:02:e5:46:11:e3:
                    c3:99:11:dc:18:fb:52:6b:a7:c2:a8:d0:4a:93:4b:
                    8b:9d:0c:88:4a:6f:2f:3a:f8:86:fe:d6:97:90:a1:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EF:DA:BF:F7:30:4F:BA:97:AD:C8:72:DC:E0:AC:DA:E6:3B:3A:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4eb463d-9f44-3516-8c18-4e679ff6f77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:7a:35:6b:6f:93:f7:c6:8f:97:e9:04:59:b3:8d:34:3d:
         8a:70:a6:ca:8d:36:fa:4a:04:4c:58:87:9d:80:fb:34:86:9e:
         21:9f:80:f5:fe:38:b7:0c:7d:1f:4a:4a:9a:77:84:ce:74:3f:
         06:8d:d0:84:c3:cd:3b:33:7a:2f:3d:86:38:62:f2:81:8d:2a:
         ee:57:ee:fe:e0:28:8d:3a:72:c4:37:5b:d8:51:1f:90:ce:4e:
         d8:02:e1:85:8b:ba:78:b4:34:ed:26:56:c7:47:b0:5c:ef:80:
         52:fb:72:1a:57:04:f2:d8:96:63:36:36:73:67:18:52:a4:40:
         8c:74:56:d8:d3:e4:3d:5c:03:33:4b:61:fa:bf:e7:a6:ae:70:
         9f:b0:3b:bf:16:31:97:2c:d5:fc:17:30:9f:bb:01:d7:ad:15:
         d1:f9:58:1f:52:bc:0e:3b:d2:23:d7:fd:d8:a2:84:bf:39:1e:
         b4:9c:25:96:15:67:0d:06:fb:40:98:9b:bc:77:38:63:37:b6:
         d6:40:08:65:3d:fd:43:66:7f:50:9c:2c:25:de:7f:4d:b2:91:
         37:45:49:f1:3a:ef:8f:1c:d8:8c:56:7c:0d:e9:ec:a5:3a:bd:
         5c:2f:02:f4:d0:21:9b:cf:97:e2:d7:c1:39:c6:b1:e3:6b:1d:
         ac:04:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----