Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
File:                     949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json)
Hash identifier:          8KZbdhQNI5AhoVaK6pnR/M2xc6VpoTCM25+UWVCueLo=
Subject key identifier:   E3:CD:12:53:58:E9:C9:93:EF:37:44:DE:DA:EB:2B:BA:BB:07:4D:22
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F432858493C0926F41617FE7DD96B9380
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     26967
IP address blocks:        52.144.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:26:f4:16:17:fe:7d:d9:6b:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=11b7101c-fea2-42fe-80e4-4ea891900174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:85:3a:9c:de:59:d6:ee:3a:71:8e:19:f4:
                    3d:15:ad:f0:20:6d:1c:03:b6:4b:85:c7:ad:1a:5f:
                    33:9f:0e:29:8d:18:b3:4f:f1:8d:63:b9:c5:b6:77:
                    45:4a:e5:62:89:dc:82:81:59:d2:0d:0f:5a:26:18:
                    5a:a5:3d:dd:37:92:3f:7a:cf:11:86:ad:bc:a9:63:
                    aa:bd:6f:82:d7:6d:a6:82:c6:c4:d9:bc:c3:51:a0:
                    b4:8b:6c:38:7e:51:0f:f0:2d:18:33:cc:c8:23:cd:
                    f3:93:4f:bb:0a:bb:e4:36:6f:60:36:ed:c7:36:0a:
                    73:8d:cc:f2:40:74:20:da:93:83:07:7b:82:f7:68:
                    ea:2b:87:e2:d5:14:ff:8a:df:cb:ba:a4:f5:54:02:
                    34:6a:4a:a5:47:81:ce:1a:25:fb:06:28:9d:4c:d1:
                    34:f3:10:04:df:49:96:7f:9a:f4:15:8a:c0:d2:90:
                    7f:13:cb:a2:fe:08:6b:56:08:e6:36:61:de:65:da:
                    d8:5b:c6:e7:d3:ff:cd:95:3e:60:15:45:b3:94:8a:
                    4b:e6:d3:d4:d2:1a:e5:81:51:16:4c:80:b9:d4:0e:
                    27:3f:7d:41:e0:c2:9b:38:75:00:12:ce:af:20:f9:
                    e8:70:34:f6:e5:c7:9a:53:ff:df:06:df:1d:9b:de:
                    f1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:12:53:58:E9:C9:93:EF:37:44:DE:DA:EB:2B:BA:BB:07:4D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:03:fe:52:29:c1:be:79:b5:f4:00:35:33:2e:93:a2:9d:f1:
         b6:ff:2f:49:83:8e:5e:f8:2f:e0:f9:59:35:0c:fa:cc:31:96:
         24:23:83:9d:3f:0f:64:a6:8f:5a:1e:1a:22:44:86:67:36:4e:
         49:ed:51:ed:0c:27:21:7f:6b:bf:9e:0b:1b:fb:d6:38:e5:7a:
         f0:f4:e0:51:1d:87:eb:34:32:08:ec:51:2c:d2:c4:b3:ed:8a:
         a5:74:69:f8:b2:da:ef:14:b1:e2:c0:63:5a:07:f7:5d:41:ca:
         2c:61:c6:4e:fb:c2:c6:22:a3:49:28:6f:25:77:88:29:5e:b6:
         7f:8f:e5:a6:b8:1d:a2:71:7e:40:d5:80:ab:40:cb:25:05:3c:
         42:57:d1:c0:de:fc:0c:99:58:96:f6:7f:3b:24:b8:1c:3d:6f:
         be:4a:f8:62:2b:64:14:7a:2d:d7:37:bb:86:1f:25:59:ef:3d:
         db:62:27:ca:ef:9d:25:ca:31:f8:90:e7:fa:36:29:1c:70:0f:
         7b:3b:a2:69:a5:0e:9f:b7:fa:88:15:c0:ef:74:03:0e:25:8a:
         f4:8a:b1:d5:67:49:22:76:63:2f:2c:88:45:cf:bf:7e:66:6d:
         1c:cc:4a:20:09:4c:70:53:df:63:44:a0:0a:d8:8b:33:7f:d7:
         71:38:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net