Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
File:                     efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa (raw, json)
Hash identifier:          BJRzP5JFsROVLFgmVcJSZOzdevQKPh8CzGxOhtlf270=
Subject key identifier:   B3:9F:28:F7:F0:A7:3A:D5:CA:77:7E:BA:F2:88:86:A7:8B:F6:EC:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B88FBEE1FBA27814C6B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa
Signing time:             Wed 11 Dec 2024 15:17:56 +0000
ROA not before:           Wed 11 Dec 2024 15:17:56 +0000
ROA not after:            Tue 11 Mar 2025 14:17:56 +0000
asID:                     36618
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:88:fb:ee:1f:ba:27:81:4c:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:56 2024 GMT
            Not After : Mar 11 14:17:56 2025 GMT
        Subject: CN=d8629f8e-010e-43cd-86b8-7c9671217670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:f2:14:08:a2:19:d2:c2:e0:27:f5:34:ca:
                    e9:73:ac:f3:a8:65:27:43:5b:68:3c:fd:ab:fb:bf:
                    ca:37:65:a3:94:aa:71:b4:ef:d9:f6:9f:4c:12:86:
                    6a:df:23:da:cf:15:a4:1b:32:11:f7:a8:5f:05:7a:
                    5e:45:68:02:90:86:4a:7a:10:0d:ee:45:30:a8:0a:
                    7f:71:5c:7d:56:c0:e6:36:45:45:73:4b:dd:0d:03:
                    5b:24:bf:d0:49:be:0b:9b:a5:f8:3d:af:95:6d:8c:
                    c3:d1:71:e0:e5:dd:3d:8a:4e:bf:b5:5a:99:15:c9:
                    66:35:30:55:b8:2f:13:a6:b2:96:4b:ee:d4:a8:30:
                    f1:f8:f7:c9:52:d3:c9:76:7c:1e:42:d8:37:d1:71:
                    d3:63:75:58:59:4f:f9:cb:21:48:95:10:81:bc:e5:
                    de:50:6e:69:6f:6e:5c:cf:2e:d8:ba:6e:76:4e:0d:
                    8c:5e:ec:1e:5f:46:1d:09:e5:91:f4:a5:2e:d3:5f:
                    a1:80:47:78:a2:d1:bb:e7:93:22:4c:1e:15:6f:ac:
                    26:0f:4e:16:cc:4a:88:4f:79:94:73:e9:e0:22:01:
                    86:e8:94:f6:f5:f8:e5:9c:27:62:4d:3f:b2:b9:2d:
                    27:6b:db:76:88:8a:af:d1:e5:0a:70:1a:90:13:20:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:28:F7:F0:A7:3A:D5:CA:77:7E:BA:F2:88:86:A7:8B:F6:EC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efbe50ce-5f9a-3f1c-b434-ec626cbfa27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:ac:bd:4a:0e:bf:8f:fa:09:8c:02:de:ea:9d:33:dc:3e:
         04:62:b9:c9:02:81:9b:03:ea:01:3b:a2:6d:e5:c5:1a:65:c4:
         70:b5:41:cf:9c:60:2e:23:73:38:f5:56:cd:38:d4:90:6b:fb:
         29:52:bb:8e:d1:67:bc:3a:42:1d:f7:23:e6:44:4c:ed:00:d2:
         85:ab:ee:10:07:3e:18:aa:8b:9a:55:61:7f:51:c7:61:68:5b:
         7f:61:10:a0:da:67:ca:2d:39:98:80:00:a9:29:95:4a:57:13:
         15:6f:57:b1:a7:ed:48:d3:9b:5c:38:43:d2:9c:8c:05:13:bf:
         3a:45:0c:40:e1:8c:b7:bc:40:9b:c7:cd:1f:00:af:f7:c5:e3:
         df:18:96:4f:33:ee:91:f7:b0:5d:7a:10:b3:73:a5:61:92:32:
         72:1e:dc:5c:3c:78:cb:75:5a:b9:15:3e:56:da:93:cc:e0:34:
         53:b8:a7:6a:37:20:39:73:30:23:5b:7e:d4:1d:db:bd:dc:17:
         04:43:0f:65:4b:80:60:7b:90:4a:5d:b8:bd:49:14:d6:09:fc:
         18:9b:03:c8:95:68:08:a6:4b:fb:ef:e4:fc:8b:29:20:d9:64:
         a9:87:21:18:87:ea:23:c6:d9:d5:8d:ca:ac:b9:f5:ff:61:18:
         c2:c3:0c:c4
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgsG4j77h+6J4FMawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTc1NloXDTI1MDMxMTE0MTc1NlowLzEtMCsGA1UEAxMk
ZDg2MjlmOGUtMDEwZS00M2NkLTg2YjgtN2M5NjcxMjE3NjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/yFAiiGdLC4Cf1NMrpc6zzqGUnQ1toPP2r
+7/KN2WjlKpxtO/Z9p9MEoZq3yPazxWkGzIR96hfBXpeRWgCkIZKehAN7kUwqAp/
cVx9VsDmNkVFc0vdDQNbJL/QSb4Lm6X4Pa+VbYzD0XHg5d09ik6/tVqZFclmNTBV
uC8TprKWS+7UqDDx+PfJUtPJdnweQtg30XHTY3VYWU/5yyFIlRCBvOXeUG5pb25c
zy7Yum52Tg2MXuweX0YdCeWR9KUu01+hgEd4otG755MiTB4Vb6wmD04WzEqIT3mU
c+ngIgGG6JT29fjlnCdiTT+yuS0na9t2iIqv0eUKcBqQEyBO/QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLOfKPfwpzrVynd+uvKIhqeL9uyNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZiZTUwY2UtNWY5YS0z
ZjFjLWI0MzQtZWM2MjZjYmZhMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBgwqy9Sg6/j/oJjALe6p0z3D4EYrnJAoGbA+oBO6Jt5cUaZcRwtUHP
nGAuI3M49VbNONSQa/spUruO0We8OkId9yPmREztANKFq+4QBz4YqouaVWF/Ucdh
aFt/YRCg2mfKLTmYgACpKZVKVxMVb1exp+1I05tcOEPSnIwFE786RQxA4Yy3vECb
x80fAK/3xePfGJZPM+6R97BdehCzc6VhkjJyHtxcPHjLdVq5FT5W2pPM4DRTuKdq
NyA5czAjW37UHdu93BcEQw9lS4Bge5BKXbi9SRTWCfwYmwPIlWgIpkv77+T8iykg
2WSphyEYh+ojxtnVjcqsufX/YRjCwwzE
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:54:50 2025 by rpki-client