Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
File:                     13ee133f-dc62-3b68-8b17-8b97746c86e8.roa (raw, json)
Hash identifier:          casN3JCDGxBrXWsb5yXb225itApLZ7y/0EZHVWcPNxw=
Subject key identifier:   89:42:E0:DE:DD:20:E6:66:DA:1C:07:E8:D6:27:0B:9F:D9:6C:6B:A6
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858496CE457DB8CB80D667ADA1210
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     400754
IP address blocks:        198.71.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:57:db:8c:b8:0d:66:7a:da:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=73e09025-17a8-4371-8a8d-0483fdecc22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:4f:09:66:bd:ea:70:e0:d5:dd:6f:dd:3f:
                    d4:2c:d9:00:c5:db:30:30:4f:3d:32:8b:9d:3a:1a:
                    30:4d:9c:3d:91:31:7d:2e:05:ca:bf:58:b9:36:ec:
                    fb:59:e4:23:d0:19:eb:ad:c3:1b:dc:b3:1d:7a:be:
                    22:d2:2d:19:f3:92:f7:78:7c:f6:2e:a7:fb:c1:22:
                    4f:66:84:2c:35:c6:7c:4e:4f:d9:92:fe:61:6a:f9:
                    e6:c0:bf:bb:04:7f:56:45:3a:24:7c:fc:2c:10:bd:
                    2d:a0:43:92:59:ae:58:1e:69:b7:f6:3c:55:f5:cf:
                    0b:5a:48:c1:82:89:b9:61:51:f0:bd:21:fa:4c:05:
                    37:0a:85:bf:fc:3e:75:0c:b3:7b:15:0d:7b:eb:c3:
                    a1:e5:80:37:2f:45:07:4e:d1:d4:7c:5e:22:f6:3e:
                    a8:1b:d7:ae:e5:1a:4b:37:cd:61:87:38:ac:59:35:
                    f7:26:b5:4a:2f:ec:e7:16:f1:55:b6:d0:c0:e9:89:
                    69:24:5b:09:14:1d:ea:11:80:dd:dd:05:cb:a4:a0:
                    3c:2c:00:32:26:c4:1c:f8:bd:7c:d4:03:d9:41:77:
                    59:98:fb:d0:87:cc:3c:c9:4e:03:91:05:f9:36:b3:
                    35:60:97:a3:e1:0c:a3:d9:b4:81:8b:15:bc:67:dc:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:42:E0:DE:DD:20:E6:66:DA:1C:07:E8:D6:27:0B:9F:D9:6C:6B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/13ee133f-dc62-3b68-8b17-8b97746c86e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.71.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:14:d5:42:78:da:2b:b1:7c:5b:87:6e:5a:d2:2e:40:9e:cd:
         cc:90:66:47:de:54:83:5c:b0:30:39:e6:84:8d:d8:6f:96:19:
         9d:e7:fd:f8:06:3e:1c:f1:c7:d1:2e:2a:85:b9:e6:8b:fe:95:
         fa:5b:af:77:8f:32:3a:ec:75:f8:05:0c:13:91:c9:13:23:d4:
         53:15:a6:29:0a:66:cc:c5:6e:38:ad:16:25:92:1f:d5:56:ed:
         32:ec:e4:68:05:a0:53:71:b0:de:53:3a:84:51:96:d9:14:0e:
         bf:17:01:a4:f2:a3:d6:5f:c5:48:85:ad:1e:51:db:0d:a4:1a:
         e3:08:fc:60:9a:f9:8b:b1:85:9d:18:43:75:94:cc:7b:7a:83:
         57:ae:12:2d:4f:e6:6a:95:11:2e:4e:83:37:67:f9:0b:c6:5f:
         0a:50:33:81:18:85:72:bf:78:39:83:79:49:38:34:bd:9e:00:
         06:91:20:1a:e6:c3:ac:f8:e9:17:a2:79:3a:09:7c:cc:3f:65:
         45:f4:66:f4:18:5f:14:ce:de:cc:98:fb:d9:8c:db:a7:5a:f2:
         eb:8d:84:70:d9:21:a0:38:c3:36:e8:4a:f5:72:14:89:5c:f8:
         0b:44:f9:0e:7a:07:61:51:66:1f:d2:3e:d5:c4:41:9c:c9:bd:
         f8:01:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net