Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cf9c005e-871b-3353-8715-5605efb9a1db.roa
File:                     cf9c005e-871b-3353-8715-5605efb9a1db.roa (raw, json)
Hash identifier:          WKgrdZhRXaMXV6moRGL9HmcQtUrHjunpi3lV9NI9FP0=
Subject key identifier:   BA:21:AA:75:8E:49:0D:7E:BB:C5:A9:09:8A:0B:E4:31:A3:72:39:42
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB2617D540A21D1A12040
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cf9c005e-871b-3353-8715-5605efb9a1db.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        71.44.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b2:61:7d:54:0a:21:d1:a1:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=e84c0d1e-0048-4344-af8c-ae8c0ade2b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:bb:53:aa:77:66:c5:20:2a:cf:6e:a8:3b:
                    32:30:c8:99:9c:d9:ce:7c:b0:7f:35:38:df:02:bc:
                    ce:b4:04:3a:b8:47:56:a6:3e:5f:c0:32:ed:74:e1:
                    32:ee:c4:9c:47:1b:2f:b8:53:09:3b:0a:28:61:af:
                    f9:e0:19:0d:5c:4b:f6:49:de:41:43:06:99:38:66:
                    99:36:22:c5:d5:50:ae:67:0c:23:58:7a:25:3b:70:
                    9d:c1:19:40:67:86:c0:8e:fe:9b:77:5f:b1:a5:fd:
                    86:cd:8d:ad:35:0d:61:25:b3:75:83:93:3d:e2:04:
                    36:31:0f:73:06:11:67:33:96:d1:b0:b6:26:13:74:
                    c0:af:b6:41:4a:ea:b1:fe:31:95:2d:6d:b9:c1:4d:
                    cd:c3:0f:fd:63:70:78:82:f2:39:91:e7:a9:0a:7e:
                    1d:0d:7f:6a:27:56:e7:30:0e:90:44:63:08:3f:ca:
                    3d:1f:94:15:3d:e1:26:1f:11:5a:7d:92:12:fa:35:
                    b0:4c:4c:49:61:58:fb:e7:61:c4:0a:a3:8a:df:4b:
                    39:26:b8:41:cc:69:3c:12:c8:70:b5:2b:c1:2a:2b:
                    1c:fb:3a:2b:40:f7:2c:77:2c:04:93:7d:5e:a3:6a:
                    1e:4e:4e:df:76:ea:b8:06:8a:cb:64:35:47:32:90:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:AA:75:8E:49:0D:7E:BB:C5:A9:09:8A:0B:E4:31:A3:72:39:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/cf9c005e-871b-3353-8715-5605efb9a1db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:81:3b:71:ab:8a:66:d9:99:af:17:34:57:84:65:d2:68:07:
         1f:11:13:15:bd:51:97:6c:0c:65:e3:95:2e:7b:97:8a:78:c2:
         b9:b8:10:3f:c9:82:e6:24:47:44:51:30:95:e4:ca:6c:e1:6c:
         14:bd:04:f9:8c:12:67:9f:0d:f1:a1:65:a8:b5:16:4b:aa:c4:
         da:39:2b:f3:47:5e:7d:21:96:37:60:88:a6:77:0c:5b:00:56:
         63:d4:b8:94:17:25:30:a5:20:cb:e7:02:20:86:a3:0d:a2:9e:
         e9:56:79:e5:32:8c:d2:67:89:5f:12:38:58:c8:43:bf:ab:9d:
         42:27:fb:54:2a:e9:2e:b4:b4:50:2e:af:2e:c3:3d:26:9d:8a:
         48:e2:1a:c7:6c:a5:ef:6d:33:e0:61:ba:b0:a9:be:6a:5d:35:
         1f:75:2d:31:61:63:d7:c3:c9:4e:60:21:74:a4:10:6c:34:bf:
         db:d3:18:00:b5:c7:ec:7c:97:58:51:c2:05:e9:a8:b1:21:82:
         01:ff:a8:e3:f9:4b:4f:f7:78:de:a6:31:3b:a9:ef:12:1d:fd:
         79:84:2b:c2:06:58:86:52:3c:56:79:7f:6a:a6:4f:26:ba:dc:
         d2:4f:3b:96:38:66:02:d2:7a:fb:b1:36:aa:83:f1:cc:a7:c8:
         46:d0:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:10 2025 by rpki-client