Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa
File:                     d50a3f68-e668-371e-b9e6-849f6afb60f1.roa (raw, json)
Hash identifier:          X4cTnTGI4U/9ZOuHYrQ/G4gjspLR/V1Z8TI8Lf9nHWs=
Subject key identifier:   12:15:6C:44:71:69:4C:C3:9F:3C:EE:A5:54:7B:12:F5:DA:A2:D4:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BAAAE5D21713854722EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa
Signing time:             Wed 11 Dec 2024 15:18:12 +0000
ROA not before:           Wed 11 Dec 2024 15:18:12 +0000
ROA not after:            Tue 11 Mar 2025 14:18:12 +0000
asID:                     10515
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:aa:ae:5d:21:71:38:54:72:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:12 2024 GMT
            Not After : Mar 11 14:18:12 2025 GMT
        Subject: CN=9d749fcb-ff58-47df-aafa-60c787c5184a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:1d:1a:d6:9c:6d:d9:09:f6:ce:0c:7f:e3:
                    9d:6f:51:11:98:e2:ee:ef:ee:34:18:8f:b5:6a:98:
                    7a:0b:24:d1:32:7b:ac:8b:45:70:f7:81:bf:ea:5d:
                    94:c5:cf:72:68:87:2d:e7:a9:ea:f3:c0:9b:50:27:
                    d0:67:5a:65:dd:d1:20:1e:01:66:45:3a:61:60:cb:
                    49:0a:1b:4c:ee:83:6c:11:e1:73:84:8a:06:fc:45:
                    54:e7:7d:2e:3b:5d:79:c3:c2:bc:8a:93:2e:94:14:
                    6f:de:ab:f5:56:34:9d:f0:d2:2d:91:53:d6:ad:72:
                    5a:5e:92:7a:59:df:d2:6b:a2:6e:de:ca:ec:f9:52:
                    70:80:69:ba:e0:ce:71:26:db:da:76:a6:43:32:4b:
                    d5:8e:8c:a0:57:2a:c9:5f:0d:e5:53:0b:f8:46:bc:
                    49:b2:af:9a:56:1b:29:cd:67:b9:d3:c1:bd:d7:67:
                    ac:18:e0:4e:c4:b0:9b:51:09:8a:1d:1d:20:5e:89:
                    85:80:ef:0a:54:58:9d:d5:37:93:99:0e:ff:2b:6f:
                    b7:ca:c7:f0:30:3d:d3:ac:8d:22:14:03:2d:76:77:
                    bf:13:4f:e6:12:49:52:3c:17:bf:7c:f7:b7:34:68:
                    85:55:20:af:9e:4e:bb:75:4e:c0:29:fd:95:19:74:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:15:6C:44:71:69:4C:C3:9F:3C:EE:A5:54:7B:12:F5:DA:A2:D4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d50a3f68-e668-371e-b9e6-849f6afb60f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:c1:d1:90:3a:c9:a7:b6:fe:5f:13:ea:7d:c9:5b:96:15:
         5a:29:9b:b0:87:84:43:36:ed:5b:51:2a:16:28:05:08:42:8b:
         fc:1b:0c:c7:bb:05:50:75:a7:78:34:00:10:63:3f:eb:b8:e3:
         a8:fa:fa:fa:bc:8e:06:bb:5a:59:06:31:c5:19:f6:12:59:a7:
         e6:fa:5a:6e:c6:09:8b:c1:6f:7b:ed:84:2d:27:52:e9:48:31:
         16:c2:1e:0f:52:c2:24:26:8c:f6:21:e7:fe:07:d3:e4:b3:85:
         ff:d1:a9:14:ca:31:a5:c8:b8:8b:79:51:e2:35:cd:0b:bc:a4:
         ba:05:b4:38:af:68:07:89:4d:dd:93:54:98:42:cf:e9:0c:24:
         e7:09:f8:98:34:18:fa:a9:f1:af:d7:29:6f:4a:1e:05:27:bd:
         8d:af:75:a9:cf:63:e1:b0:e1:c0:8f:0e:5d:d1:3c:e0:c9:d2:
         68:7b:ad:b1:db:72:12:9c:81:c3:a3:ab:21:7e:11:12:03:f0:
         36:ef:a8:4d:f7:3d:db:3f:dc:dd:62:21:0b:c3:69:83:ec:2c:
         72:88:09:fd:d7:86:17:d1:96:89:1e:31:14:af:71:f0:b4:be:
         b7:0d:00:f6:aa:0b:a0:8f:c4:70:72:79:b3:d7:86:5f:2c:ed:
         9d:29:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:00:25 2025 by rpki-client