Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa
File:                     7e39b765-e3e8-3881-9da8-a808c316afd5.roa (raw, json)
Hash identifier:          Uayo9mFIrM1kA1hO2oo1kD38aSQ+S/0u5b81eGSWX88=
Subject key identifier:   F4:46:2D:AC:2C:62:FA:C7:54:80:36:0A:4F:EA:00:63:44:D6:62:08
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584858A05760DB9C5ADAD3454880
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     18659
IP address blocks:        208.74.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:57:60:db:9c:5a:da:d3:45:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=306a1b89-228c-45f9-877d-823a9ca72a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:5e:fe:fb:ce:00:e7:f6:58:97:f7:6f:69:
                    dc:05:b7:3d:30:ca:49:d0:e5:ad:65:db:a6:e7:f1:
                    d5:c4:f2:99:da:ce:8f:30:1b:ba:d9:b4:2f:19:fb:
                    47:91:df:77:18:d3:e3:9a:d4:0a:83:1e:63:52:a3:
                    29:8b:ce:dc:97:79:2c:62:30:f9:a3:a1:cb:e9:a8:
                    1c:d6:be:db:e6:32:c6:da:86:bd:4f:77:d5:3c:f2:
                    3d:72:a6:fb:ff:90:97:59:2a:62:1e:13:be:ea:b6:
                    7b:e7:b1:be:66:57:be:54:d5:4e:c3:76:69:3b:ac:
                    5a:5d:8e:c2:80:32:a6:8e:bf:7e:7f:c6:1a:60:ba:
                    54:31:19:43:2b:6e:0f:15:6a:81:a6:e1:0e:e4:c1:
                    8f:f2:5d:b5:f8:66:bb:f0:c0:3c:c5:1b:9a:48:18:
                    21:b1:f6:be:75:d4:23:f1:ab:2b:f3:66:0e:a7:19:
                    4f:03:af:df:4a:8d:8d:ca:39:61:b5:65:96:2b:00:
                    c5:22:7a:58:a7:5a:af:90:17:6e:b6:99:22:c4:d8:
                    3b:8b:94:c4:1f:38:da:ec:5c:15:77:f3:8a:40:a5:
                    ce:41:6e:56:5d:9d:e4:41:19:ac:da:64:0d:fe:fd:
                    79:4e:9b:96:4c:b0:cb:21:0a:d5:ad:bd:57:48:ca:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:2D:AC:2C:62:FA:C7:54:80:36:0A:4F:EA:00:63:44:D6:62:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/7e39b765-e3e8-3881-9da8-a808c316afd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:00:37:0e:29:d5:5a:cd:3c:ce:cc:b4:b3:05:6e:33:7f:56:
         d4:2a:91:56:10:23:80:0e:1f:cd:35:1f:88:99:d5:39:06:fc:
         26:a9:38:f1:45:bd:40:86:ed:c1:87:ff:8c:1e:35:50:57:ea:
         28:b8:51:38:a1:39:a5:3c:18:f1:b4:6a:1e:94:c6:85:da:71:
         ee:cc:00:52:45:49:bf:87:ea:79:24:b3:da:95:e7:91:fc:fd:
         d3:0c:36:45:97:60:03:7f:b9:a4:1e:27:70:f1:a0:76:a4:59:
         03:51:e8:6f:fe:f5:46:df:52:97:15:a2:19:61:de:3b:97:57:
         47:f7:1b:20:e6:51:5c:33:a0:fd:d3:4a:91:73:ee:1a:f3:5b:
         b8:06:77:ae:e5:22:49:f6:3c:50:e6:e2:df:d9:9d:a1:67:8f:
         74:ab:74:a1:46:10:f0:7c:68:db:32:77:9d:a2:fb:fe:4a:15:
         70:f5:e7:93:b9:c6:54:b4:a5:24:f3:7f:c5:5a:25:56:b9:2a:
         f7:25:0d:27:32:9d:09:da:b6:9f:d8:ec:be:bd:8d:94:64:c6:
         0a:cb:96:07:16:be:ea:f6:2e:41:d1:03:8d:7f:97:d0:65:4a:
         e5:e8:80:5f:47:88:2f:45:28:f4:4d:db:d5:2d:f2:88:c4:83:
         da:72:3a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:14:41 2025 by rpki-client on console.sobornost.net