Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa
File:                     80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa (raw, json)
Hash identifier:          qwKjk0zdSum5i83faT5PG+7bQMe9EuFJ+mjKuq2ozzk=
Subject key identifier:   56:16:8A:0C:02:E6:F5:CC:0F:B2:4A:A3:83:7E:46:C2:1A:E8:35:51
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858497C3EF13CFED53653C6292700
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     398787
IP address blocks:        50.62.88.0/22 maxlen: 24
                          50.62.172.0/22 maxlen: 24
                          50.62.194.0/24 maxlen: 24
                          50.62.195.0/24 maxlen: 24
                          50.62.198.0/24 maxlen: 24
                          72.167.25.0/24 maxlen: 24
                          72.167.230.0/24 maxlen: 24
                          72.167.241.0/24 maxlen: 24
                          72.167.242.0/23 maxlen: 24
                          160.153.0.0/24 maxlen: 24
                          160.153.136.0/24 maxlen: 24
                          160.153.137.0/24 maxlen: 24
                          160.153.138.0/24 maxlen: 24
                          192.169.220.0/22 maxlen: 24
                          198.12.144.0/23 maxlen: 24
                          198.71.188.0/23 maxlen: 24
                          198.71.190.0/23 maxlen: 24
                          198.71.232.0/24 maxlen: 24
                          198.71.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:f1:3c:fe:d5:36:53:c6:29:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=a07d7bdf-1a16-4b28-a0df-399578d51d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:e0:c9:dd:73:66:83:a3:32:43:e6:b9:95:
                    52:fe:3a:ba:98:3b:c9:55:0d:bf:d6:1b:b7:38:91:
                    83:8e:5c:35:ed:82:93:72:52:0b:40:e6:a8:4c:36:
                    0f:b8:2a:ad:f4:c3:10:f8:43:dc:81:07:b6:db:2c:
                    22:50:79:fc:96:3b:9e:f2:d5:89:c2:d2:37:05:98:
                    23:28:78:23:a3:9d:c3:ac:73:9e:26:4a:b6:d6:7e:
                    8b:6f:0e:fc:78:3a:a1:2c:72:a9:54:2e:42:24:2a:
                    35:1b:de:df:f0:1e:6c:83:38:51:2d:52:d8:c1:54:
                    97:d1:cb:07:84:f3:d8:90:c8:37:64:74:57:a7:89:
                    81:76:36:b9:c7:2a:85:13:9b:5a:57:56:8b:3a:59:
                    53:62:1d:0a:8f:9b:7e:92:dd:3f:ba:ea:b5:28:69:
                    76:cb:76:4a:99:b5:07:95:b9:2e:d3:bd:9d:cf:81:
                    a6:e3:0d:11:6f:93:d0:78:91:10:c2:6b:bc:e7:38:
                    e3:29:8d:ec:ed:fa:c5:3f:85:8e:8f:2a:ea:eb:1c:
                    c8:6c:3d:69:03:1b:2c:e8:18:d9:2a:c9:2f:ed:87:
                    51:38:cd:cb:56:f9:a3:d8:bc:cf:0d:e8:c7:36:1d:
                    b2:c1:1e:f6:60:5d:16:a0:ef:53:21:a8:31:79:39:
                    34:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:8A:0C:02:E6:F5:CC:0F:B2:4A:A3:83:7E:46:C2:1A:E8:35:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/80c5a19d-26dc-3ed5-9c9a-715f7bb0ba40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.62.88.0/22
                  50.62.172.0/22
                  50.62.194.0/23
                  50.62.198.0/24
                  72.167.25.0/24
                  72.167.230.0/24
                  72.167.241.0-72.167.243.255
                  160.153.0.0/24
                  160.153.136.0-160.153.138.255
                  192.169.220.0/22
                  198.12.144.0/23
                  198.71.188.0/22
                  198.71.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:f9:43:e9:63:27:06:b0:f5:94:3c:93:a6:f9:c1:9f:2b:
         f7:8e:fa:bf:97:82:59:2a:bf:b2:23:ca:46:11:fd:cd:6e:fb:
         cb:aa:01:22:38:fa:ff:ff:fc:10:91:7f:fc:e1:1e:ef:58:a6:
         4f:3a:90:c3:1a:57:36:33:4f:65:79:23:8a:73:c9:5f:5d:5b:
         3d:7f:40:36:f7:39:7e:74:4c:83:bc:96:88:63:90:19:94:2a:
         17:bb:20:22:38:bd:52:d2:c6:cf:15:18:ac:6d:a1:3a:e0:47:
         c9:e5:f4:c2:a0:53:6c:f7:18:7c:4b:4f:e6:61:be:61:fd:cb:
         4c:ea:e4:df:14:5f:50:37:e6:53:15:49:93:22:91:ea:95:1f:
         b6:de:b2:bd:2c:17:c7:ae:65:c9:e7:16:1c:a3:cf:4a:c3:b9:
         14:5e:ac:3e:b9:52:88:ee:74:c2:32:6c:bf:96:3d:56:30:b7:
         b6:cf:b5:36:90:26:5a:24:78:f8:be:11:fd:0e:1f:aa:10:ed:
         8f:e5:0a:59:2b:bd:57:96:8b:07:46:a6:b9:c0:46:4c:e6:64:
         76:3c:95:b1:3b:95:df:8a:ac:7d:77:4d:19:32:c7:6a:1d:1d:
         11:41:da:33:31:13:e7:4e:75:b0:b9:32:b3:41:d6:d7:92:f7:
         a4:63:91:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net