Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa
File:                     a1ef0062-29e1-3f93-b05d-77b703336eeb.roa (raw, json)
Hash identifier:          y2f3BWSKkL77OpXTXAay/G2gayk028kQUr3IUnIdIEw=
Subject key identifier:   8B:DA:0B:CC:45:0A:0C:65:0F:16:F0:67:DB:7A:B3:83:72:BE:EF:CC
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285849797446966A95BB9218C28F40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     7018
IP address blocks:        45.58.216.0/22 maxlen: 22
                          45.58.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:46:96:6a:95:bb:92:18:c2:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=845b9876-dcea-42ac-a1da-c6a5628a386f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:6e:e5:a7:b1:67:50:b9:73:02:7d:05:ee:
                    f6:f3:1d:45:91:1e:88:fd:bb:dc:d8:cd:80:7b:3f:
                    9c:a1:a6:d4:50:f2:f7:7f:1c:09:32:cb:48:63:31:
                    f2:f2:5c:05:b8:59:9c:33:c3:0c:ab:00:fc:a4:fb:
                    63:1c:91:51:8f:61:cd:59:6d:53:bb:d0:0b:12:ae:
                    fe:dc:96:1d:be:31:fe:f9:ad:60:be:e0:42:45:55:
                    fd:99:07:75:e7:a2:1f:9b:e9:8a:40:39:5b:50:03:
                    87:9d:b2:df:5b:79:f5:25:76:e0:42:8f:d6:a7:1e:
                    2a:83:40:e7:65:0d:00:1f:dd:64:ea:cc:82:ac:0c:
                    c5:13:c7:cc:3d:e7:fc:f4:d4:65:46:c6:9a:20:5e:
                    8a:a3:34:26:28:83:d8:5c:ea:5c:3e:ce:9e:40:3b:
                    3c:fe:d6:9f:6a:64:be:2e:55:94:3f:b0:06:dd:91:
                    ce:b4:36:bf:d3:8b:03:da:32:cd:12:45:8a:55:8d:
                    46:ae:05:69:14:5a:cf:21:3f:30:dd:17:c8:fb:a8:
                    c1:03:28:f1:e6:24:03:c8:15:38:8b:e8:a4:3d:ae:
                    47:70:92:56:08:6e:99:84:91:83:3a:49:da:54:d4:
                    5e:7b:c9:24:d7:5c:11:e7:aa:2c:ad:6b:61:eb:1d:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DA:0B:CC:45:0A:0C:65:0F:16:F0:67:DB:7A:B3:83:72:BE:EF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/a1ef0062-29e1-3f93-b05d-77b703336eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.58.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:75:ef:2e:4b:be:2b:6e:3a:03:a5:02:98:e0:c9:5c:4c:23:
         c5:9a:19:fe:7f:eb:3b:02:69:33:3a:b0:2b:6a:3a:cb:a6:a2:
         38:a8:c7:b3:d6:85:20:de:fe:10:f5:89:c3:cd:ab:5d:7f:7a:
         89:7b:4e:e3:eb:94:28:3f:88:b8:5e:38:e3:0d:a0:d7:a4:e1:
         cd:b1:b3:b8:10:af:6f:4e:76:0f:ed:48:b6:d4:3d:90:02:cd:
         04:54:ec:b0:6e:71:3b:26:32:30:df:b6:a4:8e:7e:c7:5a:5e:
         b3:e6:4d:38:b8:4f:d4:f1:46:03:05:be:c3:62:bf:78:d9:17:
         64:1c:93:e1:22:03:21:e6:50:f7:42:f0:96:d7:e4:7e:e5:52:
         dd:85:d6:07:0e:1c:86:66:fa:dd:54:3d:6b:4c:c2:22:cb:29:
         24:e1:2f:50:9a:c7:ff:c3:8e:c0:1e:6a:fc:18:6e:3a:3c:0b:
         a3:cc:22:2b:49:20:f8:f3:03:97:79:59:54:55:4a:c0:46:b5:
         18:20:7f:de:fd:c4:48:c3:df:c8:43:7c:13:25:15:c4:07:9c:
         e8:99:12:08:8c:26:15:57:9e:e9:44:0f:96:f5:6e:4a:cd:e7:
         8a:6c:7f:c6:00:4d:93:9a:67:8a:cd:6b:be:ef:c0:86:ff:4f:
         ff:ff:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net