Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa
File:                     faf66482-7afc-33d4-8de6-1371ecfa4006.roa (raw, json)
Hash identifier:          P9bbr21zQHD5kJosgN+eH2Df/8BqHduvbDlXZaLfWB0=
Subject key identifier:   27:63:BF:02:1E:58:A6:2B:7C:8C:FF:D6:FB:61:7D:8E:16:D4:57:5A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB56C0FB2F216E3079655E0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        71.29.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:6c:0f:b2:f2:16:e3:07:96:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=a2f4366d-1d98-4d44-9f9e-84bdbf7a29c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9d:bd:7f:1b:bb:1f:6f:51:ab:8e:5a:ff:92:
                    99:87:ad:ec:8d:b3:fb:33:10:aa:41:b2:4f:22:89:
                    a9:0b:7b:82:7f:ea:c7:56:05:f5:77:3b:b7:ae:f9:
                    54:c4:f7:68:7b:4d:b2:cc:f6:a7:5c:81:cf:45:7a:
                    68:09:81:88:73:1d:b9:d0:c8:ce:01:67:55:3b:98:
                    6e:00:6d:5d:01:1b:03:11:4b:1e:d9:30:d2:d1:ad:
                    0a:55:1f:fb:51:75:b7:d1:26:dc:b2:77:d7:59:2b:
                    54:de:18:4a:52:ca:2c:31:16:20:71:d8:43:78:c4:
                    e7:87:92:95:5b:45:66:5c:8a:9c:ba:86:cf:81:2f:
                    ca:f3:d6:c8:3c:29:25:cd:f4:08:46:12:75:be:a1:
                    4d:bf:1a:d2:85:70:33:2b:e1:d2:c4:de:20:15:a3:
                    78:91:a9:1b:75:10:74:8e:3c:7d:7c:50:71:6f:64:
                    0a:24:aa:89:54:da:7c:da:a9:c0:b6:05:12:90:d1:
                    77:86:9d:1d:e6:cc:6c:b1:d2:e0:81:d8:13:36:40:
                    6c:48:57:17:50:4c:b8:72:0e:c0:61:fc:99:7a:94:
                    c9:6d:6f:d4:a4:03:af:0d:2f:c0:b9:c9:c1:2d:54:
                    cf:ad:45:61:04:63:65:5e:5d:23:04:67:82:e7:80:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:63:BF:02:1E:58:A6:2B:7C:8C:FF:D6:FB:61:7D:8E:16:D4:57:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6a:07:8c:bd:2d:14:81:e3:21:19:15:1b:19:fe:ff:c4:e1:
         31:5c:c8:f6:68:d6:a3:46:d4:fe:52:78:e7:ec:ce:fa:05:a0:
         e2:b7:b9:ba:08:18:da:9b:0b:34:af:7d:09:f0:ea:d6:44:ed:
         2a:c2:9d:70:5c:83:fc:27:e1:33:8c:25:75:71:68:8b:89:58:
         d9:51:40:55:5c:33:6a:b7:9a:77:98:26:28:50:f2:5a:26:7f:
         5b:44:ec:3e:55:25:f8:9d:a0:58:06:97:61:36:60:7d:46:5b:
         8e:3b:07:91:5a:5e:42:b3:ce:e3:fd:5e:78:ec:1a:76:f5:0e:
         d6:2a:cd:70:a7:47:17:c0:a2:e3:30:db:0e:14:42:a6:93:ea:
         30:3b:63:38:54:39:a1:df:27:3b:33:b9:6d:2d:4d:ef:65:8b:
         d9:3e:24:a3:21:29:cc:c4:c1:80:8e:ba:89:44:77:f4:91:d0:
         49:b2:ec:85:38:f1:75:ce:ae:95:86:80:11:f8:66:31:04:84:
         30:a0:bf:43:fc:66:be:36:89:3a:50:b0:cf:41:fc:b2:d0:62:
         33:17:a3:f9:a8:62:f8:8c:22:8c:8a:8b:a1:16:9a:6b:0c:fd:
         8a:bf:dd:a9:2b:81:bc:54:0b:c4:81:d7:c4:6d:d3:70:11:06:
         fc:21:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:35:01 2025 by rpki-client