Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
File:                     dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa (raw, json)
Hash identifier:          eOZR18wGH4j3BeHDDl9qVv3L/12Jkld1jcu5Xpf9vdQ=
Subject key identifier:   8D:E9:0C:13:88:D2:F5:5A:60:EC:75:D4:02:0A:21:0F:E1:BF:15:C7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584832F051E879B3C0BDA0DDDFC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     701
IP address blocks:        71.191.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:51:e8:79:b3:c0:bd:a0:dd:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=d928b390-8839-413d-8c8c-368bd9083aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:10:98:b0:e4:61:41:7f:31:79:16:9b:42:
                    cf:9d:f1:f9:71:6a:03:7d:23:90:16:e6:9d:14:75:
                    69:6c:b7:38:f1:f8:a4:94:a2:43:43:8f:92:1b:5f:
                    01:d5:c8:75:07:78:d9:e0:0b:66:84:e4:b1:f6:40:
                    d7:3b:49:68:4b:fe:77:40:08:51:6a:d1:ea:b9:88:
                    b1:98:6c:ce:c5:bf:06:29:25:88:18:35:e9:be:84:
                    79:40:0d:a2:9b:37:db:fb:23:11:39:7d:42:d3:1f:
                    2b:e9:c4:c5:98:20:38:66:11:c2:25:b3:63:db:95:
                    b4:1b:74:7d:b5:d7:80:c1:e7:28:6c:83:07:a2:6f:
                    75:02:46:de:06:4b:f9:49:49:5f:ba:75:2e:68:5e:
                    b0:03:bf:93:b3:1a:0f:56:d0:22:15:89:f8:50:d5:
                    14:c7:2a:1b:42:9f:ff:f0:18:14:c2:cf:b3:b2:d3:
                    a9:ec:33:35:24:1e:2c:b7:52:e6:70:f9:06:11:00:
                    8f:a9:5e:ca:d9:26:09:c2:71:19:cb:5c:67:e5:0c:
                    9e:64:4a:20:7d:d5:30:3f:56:fc:7f:46:a2:22:1c:
                    eb:17:6c:3c:40:fd:cb:07:52:c5:9a:55:cc:5d:a0:
                    c8:c3:a8:a7:26:c2:ab:ac:5f:08:0e:2b:53:80:84:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E9:0C:13:88:D2:F5:5A:60:EC:75:D4:02:0A:21:0F:E1:BF:15:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.191.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b5:91:d8:1d:49:8e:26:b3:3b:64:31:af:c3:65:87:ba:fa:
         33:86:ce:23:8f:d5:58:09:10:ad:bd:e8:74:85:4c:8b:ab:6c:
         9f:45:ba:1f:9d:35:d9:15:f6:95:68:91:2b:86:29:58:68:f4:
         97:88:cb:03:44:92:f6:18:f3:46:c2:e6:e1:7e:79:73:6a:cf:
         32:bc:3c:64:0c:db:d5:d8:2d:d2:0e:11:04:9e:d1:0a:32:fc:
         7a:27:e0:7a:01:54:fd:49:89:33:4b:f9:ec:a5:e6:b0:1d:7f:
         26:b4:bc:a0:fe:cf:38:b7:7a:a1:e5:1b:c3:93:75:7f:96:ce:
         e1:17:db:20:16:25:0b:65:d5:47:29:4b:85:8f:9d:39:9e:75:
         c2:a8:fd:b4:f3:43:52:4a:71:f0:f3:a6:a4:15:72:ec:03:29:
         50:bd:05:13:2d:d2:7b:36:57:56:f9:6a:04:9b:1e:57:e9:e8:
         55:71:e5:d5:ec:79:60:7b:27:c0:7f:7c:1d:aa:5c:e5:aa:4d:
         aa:e7:4a:c2:99:ee:79:d1:97:07:c9:3a:d7:fe:b8:d3:fb:20:
         ec:82:1b:e9:e8:db:7e:56:0f:d6:15:5f:a9:43:50:ca:cc:f9:
         53:3b:8a:35:78:95:a0:d9:63:6c:61:26:2b:1b:15:63:14:22:
         d2:c7:8b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:47 2025 by rpki-client