Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa
File:                     f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa (raw, json)
Hash identifier:          a/is819MH6guVepjrOxReqRWewzMcpVdMHkDjZH2uOI=
Subject key identifier:   DA:3C:29:17:11:CB:87:86:D2:C2:DE:A1:54:51:D5:1F:96:42:1D:F6
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849419E8B45C1ED24C1AF181EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     16276
IP address blocks:        166.1.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:8b:45:c1:ed:24:c1:af:18:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=bec1f622-5b54-4265-bab0-af2ca29fb638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:47:41:75:53:38:11:0b:58:c9:d2:b2:7c:d6:
                    b1:c9:37:fa:aa:53:1f:73:e2:51:02:51:65:84:61:
                    8f:8c:88:66:ee:8f:14:e2:c9:81:7d:89:96:df:f7:
                    62:6e:26:f8:e5:f1:3f:73:c1:d4:69:84:66:0a:cb:
                    d3:67:06:fc:09:72:a4:28:21:94:05:08:03:66:10:
                    a5:fb:28:d9:7d:29:c5:3d:34:a0:29:ea:c3:73:19:
                    5c:fe:53:10:95:01:55:24:15:55:97:f4:91:49:0e:
                    e1:93:81:7d:3e:49:97:9d:c4:7d:e1:76:c5:e1:54:
                    94:9b:8e:96:d2:7e:7c:b7:41:ca:b1:2e:6f:ae:64:
                    be:a4:64:9c:82:b9:7f:cc:9f:21:69:cf:81:4a:91:
                    a4:04:a3:04:32:ec:6f:f3:0e:fe:64:28:88:db:a9:
                    69:00:54:9d:3e:55:a7:5a:bf:1c:9d:3e:42:db:5a:
                    12:05:fe:6a:b9:8a:24:3a:94:10:89:b9:ea:f7:11:
                    79:ea:df:82:6b:2a:f5:ca:62:25:d8:e9:38:8c:e6:
                    02:9d:df:4f:b8:33:64:6b:1a:8c:af:8d:5a:cd:7a:
                    60:d3:fe:e2:e7:c9:cc:75:6f:1e:46:fd:ff:92:17:
                    59:40:83:43:ae:cd:dc:2b:ba:c6:b0:0a:1a:e3:fa:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:29:17:11:CB:87:86:D2:C2:DE:A1:54:51:D5:1F:96:42:1D:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f1c19716-071f-3cc5-907f-2e0e3ecd252b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:22:3d:42:13:0f:38:f8:fd:c7:de:dd:44:e2:36:63:57:c2:
         86:59:c7:10:14:b9:75:b6:96:93:a5:f3:72:c6:dc:88:98:6d:
         15:03:3f:df:f1:90:45:e8:ed:ff:bb:b9:d6:a6:cc:1b:67:50:
         a0:5b:a6:2b:c4:25:d4:dd:59:2f:d1:a9:f4:90:84:f6:8f:c3:
         5f:d4:d2:41:fe:6a:02:e5:9e:ec:9a:f5:a5:e1:83:fd:12:4d:
         72:cf:67:a5:22:03:13:75:c1:ef:34:81:59:a7:9f:13:d8:61:
         62:23:3f:7b:c1:37:74:65:bf:f7:b4:e8:00:8b:dc:02:1a:10:
         36:1c:fe:99:af:36:53:90:6d:c9:04:8c:96:0e:3d:c9:42:a8:
         36:02:30:aa:e7:ce:6d:45:1c:cf:6f:75:28:63:5d:96:02:af:
         d8:e6:c8:b4:0e:d4:be:75:b2:0a:f4:88:50:f2:cc:65:b1:bb:
         3f:ba:a0:bd:ef:4b:af:57:5e:4b:56:e6:36:db:98:46:c6:d4:
         76:9d:e4:c1:27:c3:38:fe:ce:5a:06:35:dd:2c:fd:e2:99:36:
         fc:78:13:3f:3b:7f:8a:ba:3e:8c:d0:66:46:b3:c9:70:52:6f:
         21:0d:51:93:ea:2e:3c:c3:43:69:ea:a2:13:33:b6:9d:24:6e:
         95:30:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:46 2025 by rpki-client on console.sobornost.net