Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa
File:                     73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa (raw, json)
Hash identifier:          jI08lJiT3ReSSSmkpBvkWwJnXu7kVDoURa9xYaoscyA=
Subject key identifier:   11:CE:00:7C:6D:D8:7E:82:7D:77:63:73:DD:97:F3:F9:F3:91:AF:9A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB575F2CBC7BDEAE0074C00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        71.29.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:75:f2:cb:c7:bd:ea:e0:07:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=e74b58f6-9a6c-4787-9c5c-284cd2241449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f2:f9:80:cd:ae:b6:3a:59:ba:cf:b6:4f:d7:
                    7d:e5:b2:61:6d:8c:5b:9c:ed:36:a4:af:b1:ee:57:
                    90:d4:8d:c8:41:d7:a2:20:1d:7c:8c:31:b0:85:20:
                    40:be:14:ee:6f:f4:98:6e:21:5f:ef:20:40:47:5a:
                    e5:3c:88:ef:96:31:9e:99:7f:a1:d9:0b:bc:26:f5:
                    38:ad:26:09:ea:f4:fc:d2:c7:44:20:b4:81:99:2b:
                    43:02:87:f3:15:f8:d4:ed:03:1f:89:19:6b:73:9c:
                    04:a7:99:47:21:81:e0:c0:06:4d:5c:33:98:5a:e2:
                    79:f4:ff:57:7c:e5:30:f4:7d:83:f6:b1:35:ff:27:
                    e9:32:e3:fc:2f:2b:86:96:0c:66:89:75:2d:5f:9c:
                    8f:d7:68:7e:28:26:30:ea:ef:d0:76:bb:68:96:1d:
                    be:4f:27:61:55:44:38:c8:fc:81:ca:6d:21:01:48:
                    cc:61:90:79:1a:b1:30:b6:9d:7a:8f:3b:9e:72:59:
                    3d:0a:de:7a:b8:54:94:ff:ea:b6:7a:22:68:3c:1a:
                    3a:cc:ed:70:c3:46:b7:31:90:61:c6:0c:2e:19:83:
                    46:e5:72:67:28:c8:56:6f:69:21:b1:98:66:ed:e5:
                    39:ad:b6:85:73:df:4d:ff:81:b0:81:9b:64:ef:d8:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CE:00:7C:6D:D8:7E:82:7D:77:63:73:DD:97:F3:F9:F3:91:AF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:e5:91:2a:65:30:e6:c8:17:fd:26:dd:06:92:04:3c:8f:
         a3:e8:71:73:62:fb:ac:25:61:66:03:48:2d:db:f8:ee:f5:45:
         0a:0b:2d:ff:55:23:a5:a3:cb:44:d7:38:16:e4:e6:4b:43:05:
         bd:7b:6d:84:3b:f3:de:d7:f6:ae:c6:fa:63:c9:c8:4f:24:bb:
         c2:97:80:95:d5:bc:5b:4f:41:19:9f:d2:8e:37:56:67:b6:4f:
         54:48:59:24:b5:15:6a:33:85:3a:3d:6e:07:cc:5f:f9:92:6e:
         2e:b0:f3:c0:d4:4a:29:0b:bc:94:f9:45:39:b0:b3:39:f7:d8:
         23:1a:9d:ad:33:b3:ca:24:70:9c:3b:8a:c2:72:8e:c0:d7:2a:
         f9:74:47:68:0e:d9:13:ae:1d:86:64:9a:c2:42:3a:17:be:24:
         03:83:09:03:aa:8f:66:ad:29:af:4d:0a:70:b6:5e:f1:94:0c:
         f8:87:b9:b6:c8:7a:5c:03:13:73:7b:bf:d4:c5:34:1e:6e:c6:
         ff:07:d3:f3:0f:8f:b7:65:1b:3b:43:17:08:e7:b7:28:15:c6:
         5a:26:b0:eb:0d:af:7a:ec:00:34:f6:99:e3:81:48:a7:70:a0:
         4c:76:e2:cc:14:6b:c3:d5:5d:62:ec:1f:4a:2d:1c:01:20:c5:
         ff:83:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:44 2025 by rpki-client