Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa
File:                     d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa (raw, json)
Hash identifier:          IRAUse0WbcVsoEbZ3vl+mBptxqCw4PgY+i9gxaqF2dA=
Subject key identifier:   8C:36:22:F6:0F:C5:37:A7:3D:3A:6A:44:C3:31:95:7B:B9:24:A0:B6
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285849446934F40C2B36185C76C200
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     2495
IP address blocks:        198.248.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:34:f4:0c:2b:36:18:5c:76:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=70814a4f-bbbc-4057-8d2f-dbb19baa8fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:97:d3:7f:00:bc:a1:d4:64:7f:2e:41:b7:
                    2b:fb:99:39:a0:f0:4b:af:bb:84:10:da:74:6d:2f:
                    8f:93:55:41:45:7e:27:87:ad:65:43:ba:80:b1:a0:
                    57:62:5e:2c:04:4f:dc:a1:1c:2f:7a:df:16:62:d7:
                    2d:af:bf:22:83:5a:12:f4:cb:f0:61:ce:71:47:fe:
                    1a:12:f6:49:dd:a6:12:24:86:eb:db:f5:dd:09:0a:
                    f3:ca:40:c5:0a:f2:59:9e:a2:dd:cd:82:f7:5f:39:
                    24:08:aa:a3:ff:82:e8:07:9f:f4:84:3c:56:c0:8d:
                    ec:7e:db:33:59:16:cd:0a:fd:02:9c:3f:03:51:01:
                    db:57:ae:7d:c9:44:ee:78:28:7d:ab:00:5d:49:d5:
                    c1:c9:a8:3e:fe:74:d3:0a:fc:76:36:6c:09:61:29:
                    63:db:7f:52:5c:8e:12:86:9f:33:2d:61:26:d6:7a:
                    df:4c:4b:fe:50:49:da:b7:b6:b0:1f:6e:c3:a0:ee:
                    fc:3e:54:01:cc:e5:82:11:2a:42:e3:dd:d7:b8:9f:
                    e1:3c:27:43:b5:8c:93:61:99:58:01:bd:85:3a:5e:
                    37:73:0c:f7:75:c6:9b:14:ee:a9:3f:cd:86:3f:eb:
                    b6:96:83:02:d0:b9:d8:1d:b8:29:61:f5:27:0c:99:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:22:F6:0F:C5:37:A7:3D:3A:6A:44:C3:31:95:7B:B9:24:A0:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/d5e6fb4e-ff80-3867-a502-ebaa6e05079d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:f7:86:67:fc:4e:e8:54:c4:92:e3:89:3d:c8:ee:47:06:
         e9:f7:1b:ed:c6:68:48:d9:b8:b9:77:c5:9b:22:c2:b3:2c:da:
         e4:ec:17:aa:0a:46:6c:c9:5a:aa:db:f3:96:84:e8:dc:94:9b:
         e4:e7:3f:c2:8d:c9:c7:d2:cc:fb:e6:1e:0d:13:c2:8b:8d:7c:
         70:7f:cc:d2:2c:aa:e5:b2:e6:c0:18:cc:a4:5c:8d:82:ff:83:
         ee:6c:b0:24:7c:a6:70:27:4a:0a:7c:a4:88:84:b7:8d:84:d1:
         ff:95:1a:fb:bb:f3:62:af:b3:1f:fd:e5:19:01:a9:5b:5f:97:
         df:08:2d:1c:1a:f0:f5:be:69:df:c9:f5:11:46:e8:d7:bc:b7:
         03:32:e8:b2:6e:58:9b:e4:95:20:72:1b:86:6b:d1:b8:6b:9c:
         d1:22:a9:68:b3:27:45:86:0d:4c:02:9a:10:dd:31:c0:31:56:
         da:2d:2e:00:94:8c:b8:2c:63:f1:d9:b1:1c:87:b9:c2:11:1c:
         f0:80:6c:2b:dc:ac:bb:13:ca:f6:29:41:45:02:85:e3:44:2c:
         ee:58:3f:f6:a2:d1:7d:fc:3a:40:54:1a:52:3c:d1:72:b5:cc:
         20:7f:cb:d8:fc:ce:0e:5a:96:55:6a:5d:b3:a4:1e:81:f2:5f:
         18:1b:fe:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:55 2025 by rpki-client on console.sobornost.net