Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa
File:                     be60be4d-47c3-3ffc-824b-5141972a9289.roa (raw, json)
Hash identifier:          JOz90kp+ffXHRcm226hRLjKONccrjv39sTwxptzbqYU=
Subject key identifier:   2D:A8:18:07:4B:E0:13:EE:B8:F3:7F:5F:4D:A8:AE:04:8D:5A:A1:27
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483E1AB38E461B0D0438E2CE80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     6461
IP address blocks:        71.19.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b3:8e:46:1b:0d:04:38:e2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=a93c9d83-cba4-4f86-8fac-b57be9f0ef93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:00:dc:83:06:1c:ce:7f:b4:70:2b:a8:c3:
                    a8:b8:66:53:ad:09:a0:02:3b:db:f4:70:ec:13:f2:
                    e4:87:b7:21:fc:d2:c6:5f:4f:84:eb:a2:6a:e5:f1:
                    97:d8:40:c5:30:a6:b6:df:50:18:f1:71:fe:1f:6f:
                    d1:1e:9a:6d:31:da:62:75:fe:60:b3:45:87:1e:dc:
                    db:47:d8:06:fe:94:e0:e0:af:23:c7:11:a9:cc:57:
                    5a:76:18:e9:bd:ec:57:9a:29:09:9e:28:4e:9b:8e:
                    7b:cc:77:d0:f4:88:80:58:fe:9d:f3:9e:50:b0:13:
                    36:05:9a:d3:fd:d1:d2:5c:52:03:d9:68:d9:31:d5:
                    e3:af:aa:e6:68:57:1e:e0:dc:3f:5a:86:7d:19:4a:
                    8b:fa:fd:5c:b7:11:88:06:13:92:75:3d:b5:84:59:
                    e1:1f:fc:51:27:ba:f5:70:ea:3d:20:2f:35:69:7f:
                    1b:e7:78:75:6d:a2:c1:70:6a:eb:d8:13:0c:b6:9a:
                    7a:12:9e:4d:ee:9f:ed:b7:b4:71:c0:e2:e7:18:25:
                    b9:a8:6e:4e:e4:89:0b:c1:9b:96:25:20:75:74:5e:
                    50:ad:c6:a5:68:8a:62:c7:4c:b7:96:c0:50:81:43:
                    fa:d7:c1:ce:d6:e5:8a:52:01:5c:20:9b:84:58:d0:
                    4c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:18:07:4B:E0:13:EE:B8:F3:7F:5F:4D:A8:AE:04:8D:5A:A1:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.19.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:54:3e:d1:ce:55:0b:7d:8d:51:dd:2c:77:ac:6e:ed:1a:18:
         8b:29:f1:0a:fb:4c:25:70:e5:41:bf:30:79:db:b2:a1:e7:ca:
         36:ff:09:71:40:f0:b9:5e:3c:e5:40:99:b3:d9:15:16:d4:5e:
         bf:6b:6c:ea:0f:70:6e:08:78:e3:69:d1:38:3c:ea:80:1f:eb:
         a3:b5:c1:02:6c:25:f2:f6:1c:8a:17:d4:e8:56:39:b5:b3:0b:
         55:1e:e5:12:39:70:32:54:0f:69:29:9e:2c:e1:06:fe:40:66:
         31:ef:c2:f2:78:cd:67:e5:d1:d9:43:a8:ce:11:bf:93:ef:6b:
         01:69:c7:0d:84:86:6b:f7:12:a3:55:f3:da:21:ae:d6:37:e5:
         b4:b0:37:93:3e:a6:39:f2:5f:43:f7:08:20:8d:aa:bb:4f:05:
         c6:48:e3:ee:05:a0:8f:e1:56:38:af:9c:0e:98:f5:b2:98:64:
         f5:9f:23:31:5b:48:93:f7:16:9b:c1:ed:ef:89:2a:c7:c9:51:
         9d:b1:4b:66:43:60:8f:31:2d:93:cf:1b:c3:93:59:f5:72:3b:
         9e:00:4a:32:b5:e8:5f:b4:99:98:0d:53:3f:e7:bd:4c:04:c6:
         a6:69:b6:54:b3:12:99:b5:ba:38:09:30:6f:5e:55:2d:94:fe:
         8e:93:b6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:06 2025 by rpki-client