Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa
File:                     a1341201-a29e-3a8f-afbb-58f6c4c40212.roa (raw, json)
Hash identifier:          J6GQXBoFWRKOqyp+lAhxJSwH4PZY0yVRvazbYdbeRhA=
Subject key identifier:   B7:B8:59:23:FF:9B:4E:25:95:51:25:67:81:8A:FB:C7:7F:76:3F:7F
Certificate issuer:       /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
Certificate serial:       010D0C9F43285848F22C67516BA69A27881D5300
Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     42615
IP address blocks:        23.132.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:67:51:6b:a6:9a:27:88:1d:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=fa6aa5e2-3b5d-448e-a11f-96ad19348c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:15:25:67:b3:6d:3d:4b:04:1c:cb:46:c1:
                    18:5f:c3:09:c5:d6:5a:45:5d:94:21:43:49:da:e8:
                    5b:35:0b:81:e0:1c:d9:fc:a3:38:ee:8d:47:e3:9c:
                    ce:60:d7:37:e8:fe:15:c6:df:71:39:c8:88:e6:5d:
                    a4:fe:d3:8b:63:75:0d:99:8c:24:2e:fb:95:0d:a4:
                    fd:41:fe:b1:9f:32:55:52:41:f0:b6:90:44:16:0d:
                    91:41:ba:4b:83:d8:21:a3:d3:90:5e:34:0d:92:75:
                    ee:9f:b7:eb:75:fd:50:14:9e:19:f2:ca:f0:0d:97:
                    b7:e6:9c:96:3a:1b:bd:5e:32:64:4a:69:36:36:d7:
                    12:a3:e1:49:da:6b:3c:4b:f5:f3:ce:12:13:9f:89:
                    68:11:a0:f5:aa:1e:d5:2e:1b:f8:d4:fb:58:f6:bc:
                    26:8e:c0:07:16:b9:c6:e4:d3:96:91:9d:1b:b4:b2:
                    72:be:fd:87:80:7e:0e:f1:21:c9:a1:b7:b3:38:04:
                    b2:55:65:e8:4f:be:42:47:5a:ae:9a:1c:2f:72:89:
                    9a:16:45:fa:b8:56:47:9c:31:31:02:bb:c1:d4:a0:
                    5e:78:6e:6e:7d:a6:49:f2:cd:5c:e8:08:96:88:47:
                    e3:cb:98:33:ab:06:f4:7b:93:e7:ef:f6:cf:56:7c:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:59:23:FF:9B:4E:25:95:51:25:67:81:8A:FB:C7:7F:76:3F:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/a1341201-a29e-3a8f-afbb-58f6c4c40212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl

            X509v3 Authority Key Identifier:
                keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:da:63:85:56:aa:f7:bf:05:ef:1f:7c:de:c4:61:83:00:
         84:35:9f:e3:3f:5d:9e:b4:71:2d:19:7b:2e:82:7e:02:cf:20:
         35:39:d7:81:9f:d4:82:45:d2:2d:05:7a:67:eb:cc:29:ad:56:
         d7:90:a7:23:32:bb:f3:8f:9a:48:55:da:d3:80:67:83:2e:8b:
         48:0e:2d:c0:ce:6d:f7:a2:ac:0e:0e:eb:f5:0b:51:37:1e:a9:
         32:66:82:7e:a5:86:a8:7f:83:cf:b6:89:fa:ca:8b:41:d2:ba:
         7f:84:4c:70:81:23:e5:0f:a6:dd:21:6a:e1:9d:c7:64:4b:ae:
         25:15:8b:71:87:3c:83:00:e6:e3:03:b7:4b:7c:2c:3b:99:3b:
         0c:ff:54:1e:e6:9f:9b:6d:24:40:de:02:9f:1b:e0:76:24:b3:
         6f:8a:b6:9d:ad:a4:61:27:d2:db:6b:17:22:5d:1d:41:29:ff:
         9c:2c:3c:2b:0e:44:75:f4:06:d7:20:9e:db:9e:28:54:51:17:
         73:62:8a:12:87:e9:fc:35:73:6a:ae:ae:76:c9:0a:ee:0e:45:
         96:1f:50:b4:a9:dd:71:63:26:ab:36:b8:b2:30:a3:11:82:25:
         c2:2e:d5:2f:d8:cf:c8:4c:14:3a:ff:dd:6f:25:18:d8:04:0b:
         f9:36:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:57 2025 by rpki-client on console.sobornost.net