Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa
File:                     432232b8-2424-32a0-af2c-2bea4e98ad81.roa (raw, json)
Hash identifier:          DmNXEktTioYlmDKKz2Gosb0fBMXJwpG3/Ob8OMtZG8g=
Subject key identifier:   59:3C:EB:FA:D3:C3:23:8E:AE:3C:72:7A:AD:29:44:4B:19:2C:0C:B2
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285848CDE115C5A561874930529900
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     393262
IP address blocks:        150.252.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:15:c5:a5:61:87:49:30:52:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=b513990e-47ae-42fa-9844-8426b51acefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:4d:a4:50:06:e0:21:83:fc:db:eb:97:71:
                    cb:a3:6f:bd:52:b6:aa:f1:7e:ca:89:f3:a9:34:1e:
                    dd:f6:f8:2f:50:16:bd:6c:ad:16:1d:fd:12:40:18:
                    46:b2:d7:5a:b0:fb:9f:14:c3:df:5c:09:67:b5:d3:
                    7a:80:bb:c9:bb:e0:73:5a:77:e2:a9:6d:2e:b8:57:
                    f0:08:f6:aa:74:4c:c5:9c:3b:b2:a3:59:15:23:79:
                    5e:eb:21:60:49:96:75:83:f3:4b:ca:90:d8:ab:48:
                    bf:31:f2:c7:a8:83:5d:72:31:30:4a:55:3c:2f:af:
                    14:2b:78:01:c9:38:67:d4:f3:85:8d:b0:59:11:ee:
                    ba:9f:a7:71:d1:1f:18:c3:fe:57:c5:0f:3d:b9:d8:
                    ef:b4:33:29:da:0f:b9:48:b9:95:ce:25:95:9a:7c:
                    ee:75:ad:72:5a:59:7f:21:83:78:67:7c:0b:a1:a1:
                    1f:a5:ae:55:d7:0d:50:bd:b4:cf:89:44:49:d2:e7:
                    a3:78:4a:ce:08:1e:32:89:0c:b9:f0:98:97:ff:aa:
                    31:a5:bc:ea:af:80:e4:41:23:4a:8f:05:6c:c4:6e:
                    4f:57:d0:89:50:88:bb:80:24:14:ef:c6:93:14:4b:
                    fb:20:60:7f:c4:5e:d3:63:9c:69:f4:70:3c:63:eb:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3C:EB:FA:D3:C3:23:8E:AE:3C:72:7A:AD:29:44:4B:19:2C:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/432232b8-2424-32a0-af2c-2bea4e98ad81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:5c:89:50:60:7a:e8:f5:1a:26:22:98:bd:a9:66:9e:7f:
         c0:8e:59:25:a3:71:33:ce:85:76:2f:f4:3d:4a:07:88:5a:c2:
         f2:ea:c4:91:1d:2c:9a:63:b6:74:b0:b9:d8:41:ce:db:26:88:
         15:9f:3a:0f:73:71:16:30:07:55:9d:79:60:39:62:d2:22:f5:
         12:50:57:23:e3:53:32:7c:3a:1a:63:39:cd:5c:fd:44:9e:6e:
         5f:7d:16:9e:30:39:3e:05:44:6c:78:8c:b8:cd:a3:9c:92:92:
         b7:e2:b2:30:92:c4:4b:ba:db:67:3f:c2:23:30:19:01:f3:8b:
         e3:68:1d:0c:0c:ee:2e:7b:f6:47:62:a1:3e:14:49:31:65:45:
         eb:5b:0f:97:2d:41:07:c7:f0:08:b8:a5:db:d7:a8:eb:85:e2:
         7c:c3:5a:4e:17:5a:52:56:58:da:21:bc:aa:37:99:2e:22:3c:
         97:11:be:24:73:03:ce:24:e7:07:12:91:20:9b:e3:46:e5:03:
         b9:79:a9:ee:85:6e:01:12:99:27:14:7a:8f:10:db:ea:13:64:
         78:8a:db:c2:04:67:1c:ff:03:7e:55:d3:58:80:35:ca:5f:26:
         5e:53:aa:35:4a:2e:de:bb:e5:96:c3:b7:cf:11:9a:a3:d9:54:
         5f:52:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:51 2025 by rpki-client on console.sobornost.net