Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/63d099fc-76d5-3842-8280-8fefc8185481.roa
File:                     63d099fc-76d5-3842-8280-8fefc8185481.roa (raw, json)
Hash identifier:          jdwZ78klXxzQL2vjAI2gaT0bxHlT8KHiNshQExcBijE=
Subject key identifier:   80:46:34:F4:43:84:9D:47:69:C5:14:D0:F5:57:EF:90:5F:5C:9C:29
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F432858495D896F6703DA632DFB65BFC0
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/63d099fc-76d5-3842-8280-8fefc8185481.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     22743
IP address blocks:        69.87.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6f:67:03:da:63:2d:fb:65:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=301776f2-5597-46b2-8c88-6c3719517ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:88:7f:f2:ee:5d:27:9a:f0:b5:a6:31:64:
                    0e:bb:73:c4:26:ff:92:9d:e5:ee:90:c2:18:b6:b2:
                    11:6f:03:a7:6a:9b:61:7c:4a:91:ee:e8:0e:98:e1:
                    4a:e2:0b:2d:bd:8b:4d:ea:c0:1e:ef:0b:67:46:be:
                    84:f0:e7:06:95:5b:3e:de:78:18:6e:84:c6:b3:8e:
                    d4:bd:9a:b8:1b:cf:60:bb:b4:9a:b6:a7:ce:28:a3:
                    2b:95:89:e7:88:50:ed:c9:05:16:03:c5:c5:6f:50:
                    61:53:5a:d3:4e:e6:ac:83:32:63:4f:18:f6:60:0c:
                    ac:9d:93:38:78:86:51:ec:3e:3c:36:5c:be:e1:b1:
                    7d:ec:e9:88:bd:9b:bf:db:ff:70:e4:47:c4:ff:ca:
                    3e:7c:ac:15:a1:76:90:01:fb:98:a9:20:ce:d6:e3:
                    b1:07:38:c5:56:a8:a2:22:11:a5:42:a7:4d:5a:ab:
                    8e:b8:43:3d:52:7c:d0:7f:35:4a:8d:15:70:e0:37:
                    c9:0b:cc:db:39:8a:ef:aa:e6:09:ab:8e:59:30:ff:
                    fa:84:0b:e6:8f:88:10:1b:d9:69:29:86:b9:3c:70:
                    8e:52:3e:ce:7c:7f:15:fb:d6:1d:24:c7:0c:c9:75:
                    7d:d7:1d:fd:38:c3:6a:99:16:0d:ac:85:71:ce:c0:
                    ed:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:46:34:F4:43:84:9D:47:69:C5:14:D0:F5:57:EF:90:5F:5C:9C:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/63d099fc-76d5-3842-8280-8fefc8185481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:97:14:2a:fc:89:d1:eb:6d:b8:c9:2a:24:72:d4:f5:93:a8:
         f3:7e:14:11:5b:bd:45:4a:ba:d2:3f:f2:e7:54:aa:ab:2e:20:
         c0:44:e0:23:de:36:d3:35:ef:f1:cb:7b:fe:c0:c0:ef:9a:c3:
         91:f2:bf:a8:ca:fa:64:16:ba:52:61:6b:fc:26:db:1a:af:48:
         e3:70:50:fc:3a:d6:1f:76:20:56:ba:ce:eb:7e:6e:63:52:07:
         4f:64:e1:ab:25:cc:26:3f:c3:ae:66:2a:ac:fa:36:91:df:2a:
         77:a5:c1:2f:66:0f:fe:0e:88:24:d1:4f:e1:70:53:cb:2f:0d:
         ef:23:fb:15:22:8b:b0:49:60:b5:ed:e0:12:22:19:69:f6:39:
         80:13:bc:e3:fe:6d:f6:79:c9:43:93:06:3a:ca:f9:9e:4d:d3:
         e1:90:fd:1f:b8:56:f6:f2:c4:8d:7b:68:2b:59:bd:fc:10:51:
         1c:8e:09:5e:55:f3:90:ae:61:cd:60:d6:73:6a:3d:a7:37:50:
         7e:d3:8f:a3:02:6b:f7:cd:ce:d9:84:74:bb:42:1a:74:9f:37:
         c2:0e:59:c5:49:5a:bf:e5:13:6c:63:c1:65:ce:90:43:b7:89:
         90:53:33:74:13:14:ac:84:5e:df:8a:b8:7d:b2:56:d5:08:02:
         66:e3:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:11 2025 by rpki-client on console.sobornost.net