Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78ad4908-da0b-3be3-815c-677e0c207811.roa
File:                     78ad4908-da0b-3be3-815c-677e0c207811.roa (raw, json)
Hash identifier:          Mpjb3Wa7WNGPZUIuj4uWziy/hTQUB1KXNPfUY3r2xbs=
Subject key identifier:   B9:5A:1C:8C:E4:A7:FF:39:5F:5F:F8:87:F3:C9:00:C3:84:A2:C2:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4891585EB4C51DEFCA668
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78ad4908-da0b-3be3-815c-677e0c207811.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        69.245.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:89:15:85:eb:4c:51:de:fc:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=39b23b54-97df-4cdd-9452-d7fc194198e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:59:8e:29:75:2d:34:c9:01:fd:0c:85:58:
                    cb:37:cc:1b:be:98:06:a3:cb:9e:15:00:70:a1:0c:
                    e1:ef:6d:a7:99:a5:5c:4b:eb:6d:24:fc:e7:1f:8f:
                    21:fb:1e:bd:68:62:55:ee:c5:87:4a:d2:4b:09:4d:
                    a5:da:19:d8:cc:d1:50:e0:e8:cd:48:85:ef:eb:29:
                    dc:41:3e:76:d0:b2:65:23:3d:9f:da:17:92:19:ec:
                    45:d0:8a:63:ba:5e:e6:4f:6c:c1:5e:f2:57:71:00:
                    cc:df:08:d8:2a:37:d3:4a:fd:21:06:82:df:77:56:
                    49:00:6b:0b:4b:28:ce:4f:94:1f:cc:26:3b:a9:01:
                    f5:eb:7e:a2:95:2f:70:4b:ea:92:a2:1b:63:2a:ec:
                    76:22:34:54:61:4f:bd:63:b3:17:cd:b4:aa:0a:6d:
                    d1:ab:bb:7f:6a:c5:9b:be:7a:67:29:f5:27:39:65:
                    a6:d6:80:82:f9:66:80:23:83:c3:8f:cb:27:f1:ac:
                    6f:a5:d0:1e:4d:00:d1:1e:73:a1:81:95:6d:c1:26:
                    e6:e2:60:7f:11:2b:1f:eb:c5:55:92:d1:6a:a2:3a:
                    6f:7c:35:72:0d:27:ab:f2:10:51:9d:04:72:b9:58:
                    9c:67:82:a7:82:5b:7a:1f:37:64:00:b1:94:6d:fd:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:1C:8C:E4:A7:FF:39:5F:5F:F8:87:F3:C9:00:C3:84:A2:C2:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78ad4908-da0b-3be3-815c-677e0c207811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.245.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:88:cc:29:e0:e6:1b:dc:e5:68:a4:8b:a9:23:e3:c4:fd:21:
         60:29:a5:8e:fc:38:87:67:25:c0:e8:a9:cf:7a:05:d7:1f:d4:
         fc:b9:ce:71:f3:dd:f7:87:66:db:f1:6e:fe:3f:91:69:22:6a:
         0c:d0:9a:9f:3b:fd:3d:3e:06:ff:21:40:01:75:d3:6d:09:76:
         9e:90:3d:53:18:bf:02:d0:80:1d:36:14:2f:85:ee:d9:e5:b1:
         60:41:ea:b3:c3:4f:45:32:94:50:cf:31:61:6f:82:2f:b7:1e:
         3d:b7:c4:4f:8c:3a:e6:e6:96:d0:ad:03:e9:9a:96:d3:80:cb:
         48:11:27:64:97:23:04:4b:7f:3d:89:30:9f:2f:c3:47:c2:4f:
         22:cb:57:6b:54:ef:36:2a:1a:6a:ac:7f:c9:bd:6a:1b:6f:a5:
         b8:41:17:cc:ca:ad:24:33:f3:db:97:15:f6:d6:e6:49:61:b0:
         71:96:4a:51:71:c9:4f:08:02:9d:61:a4:ae:4a:40:04:7e:d1:
         c7:9e:ea:17:fc:b3:35:3b:25:01:77:42:f8:1b:1a:43:c4:bd:
         63:36:19:c9:41:be:9f:4c:e8:42:ac:f9:33:be:e8:b5:ba:0c:
         de:b8:7a:88:35:fc:06:0a:9b:9b:46:29:0f:a0:f7:f9:9d:39:
         27:08:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:52:20 2025 by rpki-client on console.sobornost.net