Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3b34fea8-f7fe-3639-a8e4-2c2c9a8546ea.roa
File:                     3b34fea8-f7fe-3639-a8e4-2c2c9a8546ea.roa (raw, json)
Hash identifier:          ryyJapo8wOk4vq93DOFscqVuUXBNjdb5BPtuY5LSXB0=
Subject key identifier:   C9:CD:E1:7A:BB:C2:FD:7F:81:42:F2:06:F8:B5:20:31:B8:9E:18:8F
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F4328584849563EC9578C28C441C93F00
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3b34fea8-f7fe-3639-a8e4-2c2c9a8546ea.roa
Signing time:             Sun 22 Dec 2024 02:34:40 +0000
ROA not before:           Sun 22 Dec 2024 02:34:40 +0000
ROA not after:            Sat 22 Mar 2025 01:34:40 +0000
asID:                     16611
IP address blocks:        23.131.184.0/24 maxlen: 24
                          23.131.185.0/24 maxlen: 24
                          104.153.172.0/22 maxlen: 24
                          149.112.101.0/24 maxlen: 24
                          2606:ae40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:56:3e:c9:57:8c:28:c4:41:c9:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Dec 22 02:34:40 2024 GMT
            Not After : Mar 22 01:34:40 2025 GMT
        Subject: CN=5dda72c7-cf85-4a85-8d38-d5c16e6c51f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3b:1c:a0:06:e9:d7:95:58:2c:d6:ff:c3:81:
                    84:a5:8f:2b:ee:82:8f:35:62:d5:05:d0:ec:5e:83:
                    61:88:87:37:ba:dc:3b:e8:c6:1f:f6:72:f7:c9:04:
                    b7:3c:6e:2f:72:94:68:50:40:bd:28:fe:5c:d4:66:
                    9a:4b:be:3f:73:5b:3f:a9:8e:f4:b2:03:c9:14:62:
                    e9:b4:21:60:6a:77:86:63:9c:8c:28:d2:db:1e:53:
                    fa:5d:d8:90:83:ce:f5:3e:a9:6f:c7:51:07:56:b0:
                    59:78:17:bf:ce:46:ee:78:c9:52:0c:92:d7:53:62:
                    4a:d0:23:50:ab:03:e6:ef:91:22:db:fa:80:58:7c:
                    f1:f7:08:ac:9e:70:22:8e:be:de:69:8f:99:c1:dd:
                    a5:68:24:1b:97:ab:32:fe:fb:0a:f8:dd:fa:90:bd:
                    c2:ed:0f:5d:8c:fd:f1:0c:f8:ac:46:89:66:2d:c1:
                    ed:87:99:97:89:32:18:b2:13:10:1a:bf:92:5d:6a:
                    1b:a2:22:48:55:70:90:13:75:82:73:fb:b0:c5:cd:
                    8c:1c:e5:4e:c3:62:26:b6:a2:e9:08:99:8b:26:08:
                    b3:b7:7d:c4:00:7b:c9:ef:7d:2c:73:08:91:36:9b:
                    c3:e6:bb:e2:93:ee:ca:ae:96:34:2d:cd:bf:1a:d8:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:E1:7A:BB:C2:FD:7F:81:42:F2:06:F8:B5:20:31:B8:9E:18:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/3b34fea8-f7fe-3639-a8e4-2c2c9a8546ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.184.0/23
                  104.153.172.0/22
                  149.112.101.0/24
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:91:8d:87:49:89:86:48:be:4c:ae:34:65:f6:ec:ee:2e:
         f6:9a:92:14:92:3c:3b:8c:f1:1b:40:d6:2c:56:d3:6d:29:ca:
         5d:a1:17:9b:ee:3e:b5:a3:18:fc:da:f9:8d:7c:c2:5c:7f:d1:
         d7:57:12:cc:13:5a:56:b7:ff:a8:90:a9:e7:8d:bc:c8:fd:da:
         a8:d7:d3:a1:ff:53:47:3b:b3:a7:cf:97:08:5d:26:36:5f:d4:
         50:57:de:7c:99:02:46:7f:50:12:f3:f6:99:e4:70:53:2c:cb:
         f4:92:38:71:6d:9e:f3:89:9b:4c:fc:61:b2:99:08:34:44:13:
         b3:86:10:db:8a:8a:8f:e2:af:40:d5:d8:18:87:8b:1c:7f:d0:
         53:97:c1:d2:ab:da:d9:ea:ed:d4:9a:54:6e:37:23:44:c5:63:
         08:a9:21:23:48:3f:a6:a5:ba:20:15:ed:d2:88:74:f9:0e:f7:
         aa:d5:b1:4b:8f:8b:1a:cc:9d:4f:f5:63:69:43:04:b5:06:69:
         4d:7a:a1:6c:65:fa:f6:93:97:f7:cf:48:a5:ba:37:8d:0c:13:
         65:0a:32:03:59:6a:4a:dd:95:fc:a0:67:5a:aa:0f:7f:2f:8c:
         fe:e4:af:92:0e:2a:59:89:56:1c:1d:20:40:af:77:f1:49:8e:
         04:8b:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:17:38 2025 by rpki-client on console.sobornost.net