Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe71b146-3111-3e70-84b6-28fa21c17173.roa
File:                     fe71b146-3111-3e70-84b6-28fa21c17173.roa (raw, json)
Hash identifier:          ywwx7/+6gQ3u4Wri8s+RuJH3l0/yXNLKmOCn0zZSss4=
Subject key identifier:   0A:41:48:BA:28:6F:11:FA:59:7F:DE:4E:50:BE:26:DA:3C:61:A3:4B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858483CB574F73DB0CF783103CA80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe71b146-3111-3e70-84b6-28fa21c17173.roa
Signing time:             Tue 17 Dec 2024 14:00:52 +0000
ROA not before:           Tue 17 Dec 2024 14:00:52 +0000
ROA not after:            Mon 17 Mar 2025 13:00:52 +0000
asID:                     7029
IP address blocks:        69.30.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3c:b5:74:f7:3d:b0:cf:78:31:03:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Dec 17 14:00:52 2024 GMT
            Not After : Mar 17 13:00:52 2025 GMT
        Subject: CN=ca4f38c9-ef3f-4736-b66e-6d3d082be9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:8a:be:b2:2c:75:3e:d5:61:d1:0b:c1:b8:
                    30:6a:a8:ed:a7:9f:af:19:95:59:9c:1e:8f:2f:fa:
                    33:6a:0b:0f:23:33:99:22:27:83:e2:ce:49:10:42:
                    c3:bb:52:b4:dd:eb:5c:f9:81:dc:17:45:53:ef:29:
                    26:a1:14:fb:0d:58:95:d6:3e:b1:f2:30:b2:19:64:
                    c6:42:d5:7d:9d:6f:70:32:f9:15:d7:74:69:45:d7:
                    b7:33:a6:54:23:53:8d:13:a8:e4:ff:37:ef:48:f6:
                    76:59:c5:47:e0:b3:da:25:3f:1b:87:0d:a6:e6:b4:
                    6c:14:7b:43:06:64:a0:c5:63:93:99:6c:fe:26:74:
                    62:5b:91:b8:62:73:5c:76:2b:04:07:b3:63:cf:8c:
                    5d:67:d2:8c:10:52:94:8e:a4:a5:a7:0c:29:e5:d7:
                    df:8b:ba:d6:8b:c7:68:21:db:0e:65:83:ff:d6:9a:
                    ff:60:66:5b:45:17:61:ee:2f:42:81:cb:12:0d:42:
                    58:6e:1a:78:8e:4d:70:07:27:93:3f:31:01:c4:85:
                    e2:04:7d:25:56:06:3c:13:fe:48:66:b0:a0:c2:5d:
                    a7:2c:ae:6a:4d:63:09:09:2a:54:cd:70:2e:26:a6:
                    37:ed:b1:5b:16:0f:0f:96:15:68:21:2d:7f:b6:16:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:41:48:BA:28:6F:11:FA:59:7F:DE:4E:50:BE:26:DA:3C:61:A3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe71b146-3111-3e70-84b6-28fa21c17173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:c6:34:be:72:fc:60:71:33:36:fd:33:a3:2d:1c:84:e9:
         04:69:9a:ad:72:f8:71:8c:56:e4:c8:44:e4:6f:86:d8:4c:20:
         97:ad:9b:8c:a4:c3:10:d2:a1:76:86:ac:f2:9f:23:2b:0e:3b:
         49:c5:b7:db:21:69:e2:8f:fe:92:2d:c5:c0:0d:89:3c:32:e7:
         70:fa:3a:65:52:4a:54:a7:0c:01:bb:db:da:01:49:87:04:16:
         a3:0b:34:fe:43:56:c4:8f:35:e4:12:bf:6a:8d:7f:d9:1a:4a:
         d8:ae:5a:09:86:da:98:cd:06:56:13:6f:83:75:c8:ea:22:52:
         6f:2f:5c:86:f0:d8:64:e9:34:79:cf:77:65:ca:e3:f5:bf:b4:
         3c:52:61:8e:7d:18:be:fb:31:96:57:41:e1:ad:6e:df:6f:d9:
         ba:6e:2b:89:90:a8:9f:f5:91:f6:94:bf:6e:a9:87:3c:77:5f:
         ad:4a:06:c3:fe:b6:bb:15:4b:44:02:39:c5:06:62:2d:d6:bf:
         06:eb:54:62:4d:2d:b0:3f:b2:63:71:b0:61:ee:97:13:28:ae:
         96:05:15:df:6e:7a:4f:a1:6e:6c:37:90:33:98:1a:00:96:c7:
         a8:c5:27:ca:42:6a:5a:f0:60:a0:84:18:97:3c:c9:db:68:69:
         32:e7:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:56:17 2025 by rpki-client