Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
File:                     2863cd8d-e932-373f-bff5-503c406d81fa.roa (raw, json)
Hash identifier:          rk07ow0/AaU2WQwlRRzHpOKXAtwvb4br7RyOlwsVYjw=
Subject key identifier:   59:40:47:A2:D7:83:58:35:9A:61:C8:94:4D:D0:56:14:EB:A5:B0:60
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285847FDE4CFE21343BC492371EC58
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     46455
IP address blocks:        199.71.230.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:cf:e2:13:43:bc:49:23:71:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=0b7bb42b-0104-4d92-8122-40a2804b8359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:25:d1:10:e2:92:d9:4f:5a:ed:a2:2b:30:
                    4f:12:12:e8:fb:45:37:75:6a:8c:92:02:06:12:39:
                    45:97:8d:fb:cd:75:64:3f:e5:cd:08:04:a5:9d:f0:
                    f2:68:45:60:4f:42:ad:69:a7:97:26:8e:91:4c:22:
                    de:ed:03:4c:e5:03:1d:c2:c3:75:fe:eb:35:88:8e:
                    8e:1e:8b:c8:d8:28:65:e3:d8:19:4d:29:8c:89:08:
                    2b:2e:01:d5:74:14:9e:37:91:eb:91:5b:e8:2c:a5:
                    51:71:6d:0c:15:6a:e7:40:ab:70:a7:5c:d9:2d:f1:
                    48:e5:b2:dc:d2:ab:93:6c:e5:fa:f4:43:c9:c5:04:
                    7e:fa:60:53:56:be:3a:db:a2:af:24:12:b4:63:40:
                    87:39:58:40:af:64:c9:8d:8e:63:6d:c9:86:81:b9:
                    57:42:76:e8:c7:55:ac:08:b2:ab:5b:47:af:a9:eb:
                    d8:1d:fc:76:6a:a4:7d:b6:8b:d9:eb:78:ed:69:31:
                    9e:87:af:4b:d8:1a:5c:d4:52:10:3f:14:e3:eb:a8:
                    ee:e3:b6:54:a7:ab:df:8d:a5:75:c5:bb:17:c3:dc:
                    5c:c2:50:d4:eb:54:a2:65:43:0d:cb:74:88:fb:dd:
                    d5:b5:1b:18:d6:e3:0b:d3:10:85:15:e0:fb:99:0d:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:47:A2:D7:83:58:35:9A:61:C8:94:4D:D0:56:14:EB:A5:B0:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/2863cd8d-e932-373f-bff5-503c406d81fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.71.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c3:77:e2:78:b5:bd:77:80:9b:8a:c1:09:21:3d:65:6b:65:
         8a:14:d2:8b:8b:4e:7b:ff:df:79:b3:49:fb:36:3b:03:66:99:
         dc:10:e5:93:9a:2f:c0:0a:29:c9:8d:39:a6:55:21:c7:9c:6c:
         a0:fb:55:3e:ac:60:88:59:0d:98:92:6a:7b:85:5a:a5:c2:cc:
         e7:b1:ce:ce:59:6c:8d:91:e5:34:a3:bb:85:e8:14:17:43:ce:
         33:ae:fb:22:d6:f1:98:1a:32:94:95:c7:ab:bc:c0:d0:19:1c:
         09:55:b8:73:5a:83:4d:0e:63:9f:d2:5f:1a:aa:ac:06:5c:30:
         8e:bd:43:22:47:71:5e:9e:e3:6b:ad:6f:1b:ed:e1:bb:81:7c:
         d6:27:6c:05:86:59:13:2a:a8:90:ad:cf:f5:4a:a6:75:b6:bf:
         2e:b4:9c:00:72:32:5f:fc:00:5e:18:3c:c1:85:9d:e9:4f:1a:
         df:8a:49:ca:11:ad:c6:e6:05:78:b9:40:9b:40:1c:37:9f:69:
         dd:ff:88:27:86:15:e1:a2:fd:f5:8a:2c:f9:3a:bf:13:9f:aa:
         d0:e5:f9:72:54:a7:41:54:9a:74:1d:5b:63:21:05:46:5d:69:
         ca:af:4e:ac:07:c3:7f:fe:2f:66:fa:ac:81:5b:aa:71:b4:d8:
         f2:e1:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:12 2025 by rpki-client