Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
File:                     3ac777d8-9723-3223-9b37-799691f764af.roa (raw, json)
Hash identifier:          t+SnFmlY0n1qTMQiSNDPFLDKPgc24uBeWYbNxCvXhZ8=
Subject key identifier:   2C:12:64:A4:01:33:DC:EC:11:22:9D:10:40:49:D0:47:99:A8:EE:BF
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285848222FDD20672FE75E885DF000
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     22393
IP address blocks:        71.7.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:dd:20:67:2f:e7:5e:88:5d:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=462af699-ae4b-4a7c-86bf-755e7e3ee5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:57:35:0a:dd:1b:1a:f1:81:ec:1d:ed:8b:
                    82:0a:50:e6:ec:9e:d7:1f:15:c0:3e:9c:2d:6a:0a:
                    e2:52:3f:09:c4:8d:7c:fc:24:12:62:d7:bb:20:2d:
                    de:5d:fd:38:f9:0c:f7:27:9b:43:43:77:82:7e:13:
                    bb:ba:9b:86:0b:e7:97:18:ec:7e:a3:50:83:45:6d:
                    ed:79:4e:d8:cd:ae:49:f4:0e:7a:cf:12:c8:14:34:
                    29:7d:28:cf:b6:74:9d:cf:ff:81:e5:69:89:87:5b:
                    f9:27:12:a8:f4:52:ed:c8:22:9a:f0:97:24:9b:f5:
                    1d:31:cf:65:d8:73:6a:c5:85:e0:e8:95:ae:fa:b8:
                    b6:56:74:f8:d7:02:23:66:2a:3a:2f:26:eb:73:49:
                    a3:7e:2f:6e:20:96:37:79:6d:2d:22:87:c5:3f:34:
                    32:47:57:64:d0:4b:51:29:18:41:0f:df:7b:d9:4d:
                    06:90:44:ad:fe:5f:63:fc:e1:4c:ae:62:dc:69:9d:
                    fe:35:14:c5:b4:84:eb:02:d5:58:3f:f4:08:e1:58:
                    74:31:1d:22:14:82:d2:11:23:ca:5d:24:c9:ad:0d:
                    67:7b:d4:af:b1:bc:86:1a:ce:ff:de:4c:0d:05:9a:
                    8d:19:35:b4:c5:68:8d:14:cc:1b:a4:47:33:bd:5d:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:12:64:A4:01:33:DC:EC:11:22:9D:10:40:49:D0:47:99:A8:EE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/3ac777d8-9723-3223-9b37-799691f764af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:dd:39:cd:b1:52:fc:87:bf:ac:e0:e6:4e:0b:84:62:3b:
         27:1b:d0:ea:9f:8c:af:8b:e3:ad:e5:c8:5a:dd:8a:ef:55:80:
         fa:3f:37:0b:98:c3:c5:8b:14:72:a6:3b:a4:d6:44:d0:3b:63:
         f4:9d:ec:65:af:7f:c8:ea:04:e4:43:39:55:6a:7a:6a:be:18:
         09:94:ac:ad:ae:16:60:3a:49:bd:cf:4b:d0:22:c3:41:f4:03:
         e0:7f:4e:af:3c:98:fc:02:8e:e3:71:d3:b1:38:cd:be:f4:24:
         45:41:4d:3f:56:94:35:85:20:c0:eb:b5:88:2c:44:33:20:50:
         fc:91:ab:8d:c3:88:96:17:6c:4b:a4:29:22:09:1f:42:26:5b:
         ec:76:83:55:37:da:42:1f:3d:f7:c8:2d:2d:91:d9:7b:00:d9:
         a8:34:c5:97:4d:12:e1:e4:a2:43:59:69:1e:51:ae:9a:6a:6c:
         4b:4e:00:20:69:14:6f:4b:f8:2e:c0:b4:37:75:cb:df:f4:e6:
         d7:26:2c:ed:7e:04:3a:06:b5:de:22:8b:33:f9:c6:66:4a:4e:
         7e:a0:54:a4:29:7a:d2:10:f4:1b:00:c2:bc:1c:61:7b:8e:66:
         c4:44:f1:64:8d:0b:83:83:95:42:0c:eb:e6:d4:eb:94:58:b6:
         c5:20:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:34:59 2025 by rpki-client