Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa
File:                     4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa (raw, json)
Hash identifier:          xaBJX8fgD0Y1tIFt/64bK8W0mTb5isXE4Ge9J+z+HPU=
Subject key identifier:   2B:09:D1:B2:53:BA:F0:F7:5F:1C:3E:3E:C1:90:41:FB:84:13:3D:16
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584973DEE43801DE3DB026D67280
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     46878
IP address blocks:        208.81.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e4:38:01:de:3d:b0:26:d6:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=6b5dcb4f-eb8d-4454-b8fa-79e86e9645a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:27:22:fa:75:11:57:71:80:d9:ec:66:87:5d:
                    b6:e3:0f:6e:a0:31:5d:ce:98:88:cc:45:78:c3:ff:
                    11:d1:b1:c5:13:57:5d:70:b9:0e:db:66:7f:12:80:
                    8b:49:e1:c0:93:a3:9e:f5:4e:84:8f:e5:99:93:4a:
                    6e:38:9f:47:86:4c:ce:2e:9d:96:54:6e:44:c1:7b:
                    c2:6b:43:b8:a0:07:87:4d:00:16:59:69:3f:74:e4:
                    43:ac:10:22:bf:f2:c6:e8:09:70:31:7c:d6:e1:be:
                    7e:57:47:cd:2d:bc:5f:3c:81:84:62:a8:02:14:83:
                    66:68:c9:c9:fc:c8:80:da:c7:91:ae:53:ee:3d:f8:
                    11:ff:44:05:d4:4b:cf:c0:10:ee:df:52:c7:ed:e1:
                    61:1f:df:5e:3b:1e:b9:4c:7a:b7:45:95:de:d7:42:
                    21:d3:e5:42:c8:35:40:eb:35:72:5d:cc:49:eb:57:
                    9a:7a:72:d0:fc:c9:59:cd:39:8c:6f:ad:85:d6:65:
                    2c:73:77:7b:8e:e0:f8:9f:32:88:84:50:0e:12:7d:
                    a1:af:83:f5:77:05:d0:4c:86:7d:b8:12:3d:43:f5:
                    2a:dc:72:fd:82:eb:76:61:48:50:5d:f5:a9:58:09:
                    4d:a2:c8:d9:0f:9f:9b:5b:5b:2c:c4:42:9a:8d:cc:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:D1:B2:53:BA:F0:F7:5F:1C:3E:3E:C1:90:41:FB:84:13:3D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:4c:e0:f8:a3:53:f4:88:b4:a6:f1:fe:b3:74:0b:dc:e1:b2:
         9c:81:3d:6d:4f:51:05:1a:ec:3c:ea:7e:6e:92:cb:0e:27:c5:
         58:11:9c:36:03:5e:f2:3a:fc:7e:8a:a2:ac:be:b1:70:d2:bb:
         97:b5:e8:66:f0:15:0e:2b:f6:98:92:c3:08:5f:e9:37:51:f0:
         6d:f5:7a:21:79:f7:09:88:cb:a3:9d:a8:39:42:95:78:56:b7:
         b9:7b:f6:c3:50:3a:e1:14:d8:d5:c1:1e:23:8e:86:ca:9a:89:
         9e:2f:f8:ca:03:a6:2f:9e:01:0b:ec:8c:c0:8f:72:85:29:bb:
         07:bd:c6:8f:b9:13:4d:93:e2:30:65:d1:86:44:4e:33:f9:fd:
         52:a4:49:ff:0e:c6:de:e0:73:18:50:d8:74:5f:37:57:0c:65:
         61:52:61:35:69:c8:0a:a5:b7:d0:a6:40:a2:35:5c:22:c3:4b:
         63:d0:bf:b7:48:69:b7:09:68:1d:dc:44:6c:f5:db:e2:c8:4b:
         62:ea:eb:c7:6c:99:d1:89:f0:60:1c:ac:6b:9c:64:ef:a7:28:
         60:0f:dc:f0:31:d2:87:7d:83:0e:b6:f1:0e:05:76:3b:3f:b2:
         06:b2:8c:e6:4d:fe:7d:b3:c0:39:06:b4:4a:2c:a5:fa:ba:5e:
         a3:ef:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net