Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7807598f-6349-3677-a427-4cd17fdde552.roa
File:                     7807598f-6349-3677-a427-4cd17fdde552.roa (raw, json)
Hash identifier:          +RUcwOtVHOXOEpwbyjGaL0twAsH3sfWBUpJZxddmNGs=
Subject key identifier:   EC:21:FC:1C:51:16:5E:2D:9A:21:65:3D:4C:92:6A:56:FC:9C:B7:CD
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB75F3A62247771FE6C80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7807598f-6349-3677-a427-4cd17fdde552.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        71.46.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b7:5f:3a:62:24:77:71:fe:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=fb65d0a1-0bb6-4384-813f-4f1505911520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:32:c7:63:fe:d7:e5:0a:98:ee:3e:0c:0f:f1:
                    a5:5d:15:67:1f:b7:3e:e6:fc:9e:35:9a:84:77:64:
                    7c:ac:c6:3b:53:7c:98:e0:5e:43:83:61:10:8f:ff:
                    85:ca:cd:71:b9:23:d3:50:73:50:32:34:47:4b:3e:
                    18:13:aa:48:68:82:e1:ea:40:a3:16:b6:71:9a:68:
                    81:c7:9e:a1:2c:6b:27:c3:11:11:41:16:34:33:7e:
                    3f:1b:e4:76:f9:d0:91:a9:f4:5b:5e:27:4a:99:0c:
                    90:23:bf:b1:57:53:df:5b:89:26:79:37:3c:f5:73:
                    c2:e0:e6:3c:6a:dd:5c:57:f2:dc:98:aa:03:89:63:
                    e5:88:d1:83:08:82:3a:5b:39:d9:0a:fd:40:83:a7:
                    6b:41:75:64:22:dd:0c:13:87:61:48:df:09:6e:0d:
                    c7:9d:f1:25:cb:40:44:b7:b5:83:33:26:86:b0:ab:
                    12:7b:3c:41:5f:6c:80:a5:4d:c4:a1:0a:b8:df:dd:
                    7a:67:10:c1:07:18:f8:ad:57:6d:9f:a8:cd:00:26:
                    13:11:d3:ea:c3:f9:20:e4:e1:e3:6b:ab:cd:61:cd:
                    42:07:d9:95:79:3b:2f:74:fc:8a:fe:40:06:1d:fe:
                    a7:60:af:28:22:1e:c1:1c:26:81:d5:cc:e4:df:3a:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:FC:1C:51:16:5E:2D:9A:21:65:3D:4C:92:6A:56:FC:9C:B7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/7807598f-6349-3677-a427-4cd17fdde552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.46.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a6:e5:f8:fd:25:94:8d:40:73:31:05:0b:59:84:0e:bd:b8:
         6f:08:ec:14:73:64:2f:c0:2d:cf:86:66:e4:eb:2a:f7:86:31:
         c0:50:9a:16:93:8f:8c:cf:18:1d:48:3a:fb:26:16:7b:3d:42:
         6b:50:6f:90:44:4d:2f:a8:5a:fc:0e:00:36:c5:10:7c:9f:90:
         eb:63:97:88:e0:01:8f:2c:6c:48:4a:da:02:70:66:01:b9:52:
         5b:93:da:6f:48:3f:c9:04:d0:19:d6:8b:4e:a7:77:bb:51:75:
         cd:4c:a7:c3:50:a0:86:3e:f1:d7:85:36:ce:e8:21:34:93:36:
         b0:18:2e:d7:18:43:57:f0:c4:70:b3:bd:c5:a8:26:3b:3e:7e:
         5c:96:1a:82:c5:41:8d:cc:e2:c4:35:bb:99:02:45:4a:49:7a:
         57:c2:74:27:fa:14:e9:2d:cd:77:2f:52:45:3c:a6:0c:91:ff:
         29:7d:12:7f:61:e8:1b:03:14:fc:57:ac:a8:c2:fb:38:0c:a8:
         44:7c:0d:31:0b:81:49:48:21:8b:cc:0d:07:28:9f:a3:5c:4e:
         3f:c5:da:de:72:74:eb:ff:39:a6:eb:33:40:9f:89:b4:ac:7d:
         f1:28:61:02:54:6d:7d:78:f9:5b:a0:18:77:65:f9:0d:bf:90:
         ca:6d:bc:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr7dfOmIkd3H+bIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
ZmI2NWQwYTEtMGJiNi00Mzg0LTgxM2YtNGYxNTA1OTExNTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTLHY/7X5QqY7j4MD/GlXRVnH7c+5vyeNZqE
d2R8rMY7U3yY4F5Dg2EQj/+Fys1xuSPTUHNQMjRHSz4YE6pIaILh6kCjFrZxmmiB
x56hLGsnwxERQRY0M34/G+R2+dCRqfRbXidKmQyQI7+xV1PfW4kmeTc89XPC4OY8
at1cV/LcmKoDiWPliNGDCII6WznZCv1Ag6drQXVkIt0ME4dhSN8Jbg3HnfEly0BE
t7WDMyaGsKsSezxBX2yApU3EoQq43916ZxDBBxj4rVdtn6jNACYTEdPqw/kg5OHj
a6vNYc1CB9mVeTsvdPyK/kAGHf6nYK8oIh7BHCaB1czk3zqgywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwh/BxRFl4tmiFlPUySalb8nLfNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvNzgwNzU5OGYtNjM0OS0z
Njc3LWE0MjctNGNkMTdmZGRlNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARy7QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqm5fj9JZSNQHMxBQtZhA69uG8I7BRzZC/ALc+GZuTrKveGMcBQmhaT
j4zPGB1IOvsmFns9QmtQb5BETS+oWvwOADbFEHyfkOtjl4jgAY8sbEhK2gJwZgG5
UluT2m9IP8kE0BnWi06nd7tRdc1Mp8NQoIY+8deFNs7oITSTNrAYLtcYQ1fwxHCz
vcWoJjs+flyWGoLFQY3M4sQ1u5kCRUpJelfCdCf6FOktzXcvUkU8pgyR/yl9En9h
6BsDFPxXrKjC+zgMqER8DTELgUlIIYvMDQcon6NcTj/F2t5ydOv/OabrM0CfibSs
ffEoYQJUbX14+VugGHdl+Q2/kMptvM4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:27 2025 by rpki-client