Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa
File:                     2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa (raw, json)
Hash identifier:          H+iv6zWcp7ZMyqKWdd0W+COrnEsnxaRF8dImHlAtxLQ=
Subject key identifier:   A5:A1:31:A0:07:49:C0:DE:79:DD:4E:31:85:A2:4F:4C:17:44:A2:86
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584967F2DC9D68383987DED2ED00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa
Signing time:             Thu 03 Apr 2025 18:31:25 +0000
ROA not before:           Thu 03 Apr 2025 18:31:25 +0000
ROA not after:            Wed 02 Jul 2025 18:31:25 +0000
asID:                     62044
IP address blocks:        209.55.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:f2:dc:9d:68:38:39:87:de:d2:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Apr  3 18:31:25 2025 GMT
            Not After : Jul  2 18:31:25 2025 GMT
        Subject: CN=65cd646f-0417-474a-89ea-e036d2e0b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:77:6e:12:f3:77:92:f4:7e:da:21:97:1c:
                    69:cc:0d:83:cf:70:3e:a0:7b:47:f1:d8:bf:9b:dd:
                    c1:90:9a:f4:a8:27:f5:0f:07:ea:f6:d2:06:c5:00:
                    06:2a:f0:db:e4:6a:0f:1c:50:1a:bb:5a:10:d8:3c:
                    85:f6:1f:f8:1c:40:fa:72:f3:b9:03:8b:f4:1d:2a:
                    24:50:e1:88:51:93:28:a6:b2:86:09:0c:22:bc:de:
                    1b:34:21:51:d1:fc:53:f8:f2:ba:27:ea:ea:89:f6:
                    fc:3c:65:b2:34:7f:3c:5f:c9:fc:b2:16:d6:cf:4c:
                    f9:22:95:05:e4:e2:d2:b5:4a:4d:57:a4:8a:1a:2f:
                    d4:e7:4e:09:63:4a:3c:2d:6c:e1:ea:b7:06:43:18:
                    5f:74:57:35:fd:db:3d:fb:79:48:75:d0:21:70:27:
                    c4:50:e1:b7:b6:4e:32:b6:b5:0e:6a:ba:1e:c9:42:
                    48:fb:ac:01:ac:39:dd:b0:48:72:01:a9:d6:53:5a:
                    67:d2:d3:76:80:4b:33:fd:35:6d:f7:e9:3d:b7:96:
                    6f:9a:31:d0:f4:aa:a4:8d:4b:14:d7:af:45:c4:78:
                    29:fc:71:78:26:fb:00:36:9d:8a:66:0f:30:49:87:
                    8e:c9:12:c0:76:44:9d:d6:48:db:a7:f8:cc:e5:22:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A1:31:A0:07:49:C0:DE:79:DD:4E:31:85:A2:4F:4C:17:44:A2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2672bc6c-4b78-3083-b2c7-8b00cb19a4df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:b7:e6:e5:25:ec:4b:e8:ec:5e:84:3b:bc:54:58:46:d4:
         d1:74:1a:ee:a0:5b:b7:da:ad:2a:8d:d7:cf:7f:f2:a4:10:61:
         72:b1:ca:05:ef:e8:e3:52:67:0d:4e:98:8d:c7:2d:ef:35:d3:
         40:0b:92:5e:3e:86:32:51:fc:2d:76:68:7a:86:e7:c5:88:26:
         4d:e6:8d:1f:56:e8:8c:3b:d8:51:c8:04:74:f3:1e:99:fa:cb:
         8a:a4:76:70:ff:57:71:e6:a0:8f:6a:d2:24:4b:c4:1d:b0:cc:
         8f:6d:92:32:f7:3c:81:8a:6f:49:cc:93:93:3c:8e:24:43:c2:
         dd:54:fa:99:10:d2:bb:a0:e5:79:98:39:30:c5:49:63:ef:cd:
         12:bb:a5:91:6a:5d:42:e2:74:3e:70:f1:19:6b:84:89:6e:09:
         80:c8:f7:5a:ce:0e:0f:d3:d7:33:82:d3:71:d2:55:6c:1f:c6:
         69:76:6d:19:c3:c1:45:19:ac:f4:3c:11:f5:f1:21:e2:66:3f:
         e4:ee:e7:56:ad:39:b1:84:1c:50:10:9a:3c:b5:63:6b:ff:d2:
         fb:ae:cc:34:b9:11:b1:9f:61:37:82:24:7f:31:55:48:be:ed:
         71:36:e5:c2:aa:eb:27:5d:0b:bc:2c:07:1d:5e:d5:28:08:e8:
         44:f1:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net