Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa
File:                     126c6742-4df7-3e16-966f-3b9c4b85cad9.roa (raw, json)
Hash identifier:          Qwjm9lHAfz8zytGI7C0Uwp2h5em0pitcZkZz2WI7x+I=
Subject key identifier:   20:A4:CB:57:3A:48:7F:F2:FB:75:90:0E:6C:53:5F:02:7D:75:20:15
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848116FB86A410965AA29251080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     7029
IP address blocks:        71.28.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:b8:6a:41:09:65:aa:29:25:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=40dd0226-477b-442c-9869-e3839ea85181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a7:5d:33:cb:9f:37:77:25:d9:b1:38:53:41:
                    20:34:14:96:50:4d:dd:f7:6e:54:d2:5f:0d:31:b5:
                    b0:15:15:44:07:4f:e2:b7:16:9d:48:23:ef:cf:70:
                    f0:fb:56:c6:b7:43:e0:37:32:16:f2:f5:7f:b8:ea:
                    a3:24:51:e1:de:e1:04:97:4c:e2:c7:be:12:d2:99:
                    87:9f:2e:84:1a:e8:e0:fe:71:98:ee:d9:ad:4d:5a:
                    d1:ef:56:48:cf:93:1d:06:1a:22:46:4b:06:b5:d6:
                    be:59:f8:31:66:29:cf:0e:31:03:dd:ce:c2:17:02:
                    19:62:c7:c0:3c:59:c3:54:cf:33:80:c1:22:65:6f:
                    d6:a7:67:eb:63:19:94:09:9a:c2:14:df:00:44:54:
                    d9:fa:09:8b:4a:69:1e:5f:4c:11:f3:48:68:67:fb:
                    0a:5c:00:03:30:83:77:5c:3c:14:1d:9b:3f:e2:bf:
                    46:de:eb:76:70:74:95:6b:d7:f8:f7:63:05:78:20:
                    f7:d0:27:c1:de:b9:de:d4:84:0f:3f:0d:44:98:3d:
                    32:bf:cc:09:e4:31:f9:fb:5a:52:2b:f7:93:17:fe:
                    a2:e4:0e:0a:8e:f1:11:6d:c7:4b:9f:a5:34:ae:db:
                    e2:65:d0:b5:a9:ad:4a:da:03:db:2a:6f:02:26:70:
                    d7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A4:CB:57:3A:48:7F:F2:FB:75:90:0E:6C:53:5F:02:7D:75:20:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.28.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:61:de:f3:82:8e:a6:02:50:bb:d7:03:e2:ce:63:78:c5:ae:
         0e:55:dc:a8:b5:e2:fc:6a:2e:d5:78:0a:18:f6:b1:a0:b8:88:
         34:b8:1f:fb:39:cf:69:22:99:6f:ac:7e:f9:fa:ea:22:84:44:
         91:ce:9c:2c:7b:90:fd:67:2c:e0:72:b1:9a:86:5c:02:8d:fa:
         b5:13:24:ab:94:75:0f:d6:46:88:05:8a:af:e8:fc:12:71:f3:
         40:fc:ca:97:b7:6a:8a:9f:dc:1b:0f:cc:ad:2e:6e:48:e9:64:
         b8:7e:54:f6:a4:bd:d6:0e:6c:e0:e4:ee:08:34:7d:31:cd:67:
         34:01:25:fa:2c:b5:87:82:46:43:98:6f:2d:6e:0a:9f:8e:77:
         30:f8:fd:65:75:93:33:00:e9:04:31:02:40:e0:d0:83:c3:41:
         c4:c7:59:96:c2:59:9e:9b:d4:10:b9:6a:c8:bb:56:68:49:ea:
         9e:6f:32:a4:64:8e:a4:11:70:76:85:f0:b6:4b:55:4b:37:d9:
         f0:15:06:e4:e9:fa:7f:f4:64:6f:8e:77:4a:20:94:1e:89:8f:
         20:a5:10:d5:6c:ee:a1:49:5c:2f:9d:95:00:3f:b8:3f:e5:c2:
         ee:f6:c0:78:5a:a8:27:a5:14:0f:94:f2:c3:0f:61:46:9f:e7:
         35:10:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:02 2025 by rpki-client