Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa
File:                     ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa (raw, json)
Hash identifier:          nuHLPsd2FAUnTS3IvQQfffE1yuhrQv87+/d9gX2slfA=
Subject key identifier:   84:DB:08:07:65:C9:65:23:CD:0E:A7:FD:EA:20:7B:47:CB:F3:38:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA8C817F9F1B1E5C48180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa
Signing time:             Wed 11 Dec 2024 15:18:11 +0000
ROA not before:           Wed 11 Dec 2024 15:18:11 +0000
ROA not after:            Tue 11 Mar 2025 14:18:11 +0000
asID:                     396614
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a8:c8:17:f9:f1:b1:e5:c4:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:11 2024 GMT
            Not After : Mar 11 14:18:11 2025 GMT
        Subject: CN=d8038736-8e1b-4a15-be21-c9e05874323a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:41:d9:fc:c2:e8:11:86:de:62:a9:fb:0c:
                    e5:e2:a1:fc:d2:00:ff:27:e3:30:30:4a:03:fc:5d:
                    d5:f6:9c:84:e6:7c:3e:8e:4e:93:3e:5c:6d:5a:d3:
                    d9:66:ac:dc:8c:b4:a6:26:3d:a1:e2:81:4f:6b:4f:
                    35:7a:c3:b8:4c:00:de:19:b9:05:d2:7b:1f:42:ca:
                    dc:4b:f9:89:a2:5d:52:9c:c9:bb:aa:be:97:8a:de:
                    fa:6d:1c:4c:18:cf:1c:13:2d:6c:00:4c:1a:05:99:
                    8c:32:ff:eb:d1:b1:05:cb:eb:ac:64:19:d6:d1:46:
                    9a:76:c0:46:87:33:58:f0:1c:ec:f4:81:6e:f1:e6:
                    bb:78:37:24:fe:43:d9:77:ac:84:99:75:8a:ef:bb:
                    44:05:36:69:ea:36:a6:b5:fd:d6:5a:81:87:b4:8f:
                    b4:11:ba:04:46:12:56:fb:c2:10:c1:f8:46:e5:6b:
                    84:c1:f8:c9:74:52:0f:43:ff:67:4d:75:fb:c2:4d:
                    55:1c:f5:0b:2d:40:fa:c0:f8:ad:5b:26:ff:ce:76:
                    b8:fb:65:c2:f6:28:b5:0f:1d:47:62:ab:ba:5d:d3:
                    5f:05:a8:42:73:10:6d:43:c4:1b:19:c3:b9:85:0a:
                    51:5c:25:cf:47:d6:68:17:09:48:f8:94:2d:12:6e:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:08:07:65:C9:65:23:CD:0E:A7:FD:EA:20:7B:47:CB:F3:38:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef8fc2c7-ff2b-3705-97ff-f15b52de8b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:12:80:7e:3b:49:78:0b:5e:d5:a6:e4:a3:01:92:bf:eb:b5:
         35:0a:98:7c:52:08:d7:11:f1:04:5b:68:9a:b7:e6:e1:b9:45:
         60:6d:c9:df:d2:4f:98:c3:2a:60:1f:6d:51:7e:b3:36:d6:66:
         be:74:f9:8f:b4:3e:8d:c4:94:8e:44:ff:43:33:56:c7:dc:14:
         9d:69:f8:17:18:88:b3:f5:1b:8d:7e:a3:c4:41:86:7c:a3:6d:
         ea:ad:48:2f:88:d8:62:d8:c1:9c:ce:91:a9:3d:fa:78:e7:9f:
         99:2a:58:e2:64:3d:15:f9:85:dc:2f:9b:18:73:cf:8e:32:dc:
         5b:35:9b:1f:57:d0:b2:87:c4:f5:8c:fc:44:ac:90:dd:b1:1d:
         13:c1:5a:ca:dd:d4:5e:07:34:6e:0e:84:52:3d:ac:97:40:06:
         9e:22:66:bc:df:01:be:df:99:bb:5e:5d:60:97:a6:22:c0:b5:
         80:8c:4f:a8:90:de:a5:87:55:ab:5d:40:98:d8:37:62:f1:e7:
         a6:12:00:a8:5c:fe:34:b9:52:ed:5b:34:1e:10:57:0a:16:15:
         25:d5:29:cc:b3:48:5e:6a:12:59:30:7a:42:2d:55:b9:41:3f:
         11:cb:f0:df:4c:4c:38:58:67:92:d1:d1:89:9e:c4:4a:54:b0:
         2c:fc:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----