Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa
File:                     f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa (raw, json)
Hash identifier:          M4ak7Q9oivIBdjFyApcBxx/76WN2PekFB8q73gxZ2jU=
Subject key identifier:   AC:A6:8F:03:5F:68:A6:7F:D2:44:27:E1:23:4B:0E:5E:48:FB:50:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B864D9A4C891EC3E48F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa
Signing time:             Wed 11 Dec 2024 15:17:55 +0000
ROA not before:           Wed 11 Dec 2024 15:17:55 +0000
ROA not after:            Tue 11 Mar 2025 14:17:55 +0000
asID:                     19836
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:86:4d:9a:4c:89:1e:c3:e4:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:55 2024 GMT
            Not After : Mar 11 14:17:55 2025 GMT
        Subject: CN=ae4c1957-f259-426b-b806-f664ab95557b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:b5:12:7a:c1:1d:05:c2:27:0d:d2:19:6f:
                    ce:9b:44:fb:f0:8d:86:00:2e:2d:f1:29:fd:29:84:
                    3f:8a:08:c5:7c:67:29:6c:70:52:8b:98:d3:06:15:
                    e1:a5:3a:bb:92:89:27:50:f5:06:f8:f9:97:3d:aa:
                    73:ea:ef:10:f1:0a:dd:96:9e:a8:41:40:cb:d6:b5:
                    60:3d:e7:00:b5:cd:07:21:18:0a:b2:30:2e:e5:8a:
                    3b:3c:7c:6f:51:d4:ee:8f:99:b6:da:8b:0d:a0:df:
                    bd:78:47:15:dc:73:4c:f7:cd:47:4c:dd:cf:5a:7c:
                    e7:e6:c0:9d:a3:1b:3d:ef:0d:27:cc:c9:81:2b:f8:
                    a7:d6:1c:05:dc:b2:0c:ec:88:97:ec:2a:87:40:a8:
                    1c:9c:8a:52:96:29:c8:33:dd:b9:a0:f9:a2:35:c9:
                    9c:8e:e5:a4:2d:0c:26:e2:cd:7b:8a:dc:d8:f4:9a:
                    9c:26:ff:b6:fa:03:86:f8:e6:a4:7d:9a:f5:dd:d9:
                    24:dc:2f:fe:bb:2d:83:da:56:f5:7b:f4:ce:f2:88:
                    a7:f4:6f:db:c6:5d:6f:2f:7b:9b:1e:a7:2f:2e:6b:
                    fa:58:0f:51:69:c7:bc:37:a7:41:61:de:3e:e7:f4:
                    f8:c3:41:59:07:4a:43:69:e0:9a:65:de:66:21:6e:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:8F:03:5F:68:A6:7F:D2:44:27:E1:23:4B:0E:5E:48:FB:50:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8278b0b-7976-3a49-9a77-7cb28d7f06e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:22:e3:d5:b6:61:3b:22:8b:77:b0:d6:54:d9:5f:19:07:
         6d:7a:e4:a9:71:08:20:c1:80:ac:93:c1:9b:7f:8a:3e:41:c2:
         d9:81:9a:52:fa:fd:ac:8a:c9:b7:6f:ca:21:10:de:29:f1:57:
         1a:d6:3e:1e:bb:22:57:54:d4:03:ba:4f:9b:7d:b2:07:d0:af:
         45:55:86:56:78:e3:54:a3:9d:0d:8d:a1:5e:54:6d:1a:12:5f:
         c9:f7:59:4c:af:e3:9d:20:0f:35:50:9b:23:20:21:ba:88:8f:
         63:11:a6:7e:5d:19:8f:23:f7:1c:f0:9b:d1:fc:ce:c1:32:f8:
         09:89:e1:78:a6:3e:07:ad:f5:e4:5a:b0:9a:fe:ca:67:d6:b8:
         05:ff:77:16:e0:b3:16:95:4c:7a:6b:91:e1:61:5b:a3:25:6e:
         af:2f:6f:cb:41:1e:d8:a4:33:73:35:06:5c:8d:0b:27:98:29:
         2b:4b:88:1b:80:a0:f3:43:33:41:8c:dd:db:ea:92:ca:36:81:
         77:f6:d5:0e:eb:f9:19:94:b7:39:25:50:0a:4a:8f:e8:55:ef:
         cd:f0:48:a2:13:ae:72:e6:9e:cb:57:4b:cd:5f:d5:ed:18:36:
         d4:f3:7a:82:78:c9:09:74:3c:ee:05:bd:2c:ed:11:0d:be:62:
         69:89:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:19 2025 by rpki-client