Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa
File:                     9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa (raw, json)
Hash identifier:          wrcUu6BNjMQRYZaSFDZTp5ksAPIADNpXG596dQ1MuoE=
Subject key identifier:   13:48:98:A6:52:CC:EB:FF:81:ED:6D:35:38:91:C6:85:88:2E:41:2C
Certificate issuer:       /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
Certificate serial:       010D0C9F43285849806F1D70596032C5CFE87680
Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     395403
IP address blocks:        192.135.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:1d:70:59:60:32:c5:cf:e8:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=585935c9-260b-444d-8244-f9feb39b45ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:ff:97:2f:d2:c8:2e:f5:ab:11:03:b2:4f:
                    c7:a6:40:f7:d1:7d:e0:09:21:fc:dd:2b:cd:5b:ad:
                    32:66:cd:d5:41:ab:09:ad:96:99:d4:2d:6c:43:62:
                    61:23:ac:c1:d9:0a:ca:bb:f2:1d:52:d0:4f:ef:58:
                    60:0f:99:eb:4e:9b:cd:66:75:97:f1:a0:ee:13:0e:
                    c8:71:3d:08:d5:33:ab:1b:c3:75:57:d3:4d:39:e6:
                    f3:05:3b:9c:cd:e1:31:29:bc:c7:b8:eb:9f:9d:1f:
                    78:6c:7d:28:3b:7c:a5:3d:31:3c:95:c4:37:24:6d:
                    82:24:87:c6:29:09:b7:e3:99:11:2e:6a:c4:db:f1:
                    42:e8:ce:71:a5:25:ff:5b:32:99:7b:31:ed:1c:6e:
                    7d:39:ba:d6:9d:1d:ef:51:cc:3a:17:37:1a:2b:88:
                    02:9e:8e:db:59:e1:60:cc:8f:ab:fa:da:a2:38:46:
                    15:4b:91:08:dc:ed:3b:d5:43:78:70:0a:ce:7c:46:
                    b8:74:9f:ef:b6:4d:e7:99:96:49:bf:d6:65:c3:08:
                    e3:79:77:48:0e:80:06:a9:a3:e0:d0:76:d0:9e:94:
                    63:d4:74:1e:d7:f6:3f:87:bf:00:f5:af:45:3b:a6:
                    22:29:1e:9c:3f:e7:51:07:3f:80:60:fa:3c:cc:0e:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:98:A6:52:CC:EB:FF:81:ED:6D:35:38:91:C6:85:88:2E:41:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/9eb2dec2-9700-3a6a-8d91-6d90eb62b827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl

            X509v3 Authority Key Identifier:
                keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a2:1a:ad:e3:fb:43:e5:6a:79:58:10:6f:8c:fa:cc:bc:18:
         32:92:d1:ff:f1:0b:ab:e3:61:3c:f0:a2:4f:e3:7b:c5:89:5d:
         11:bb:f6:31:c2:84:15:7c:f4:77:13:33:81:03:1a:66:86:f4:
         45:8b:47:6f:12:45:6a:29:31:d3:8e:68:40:09:93:1d:ab:0f:
         27:a8:d5:82:17:17:b1:6e:4f:46:c9:8c:d9:30:c1:3e:d1:c0:
         7c:84:be:b3:11:b4:c7:98:0c:75:ee:53:49:06:3e:b6:1a:c1:
         2f:43:74:09:32:4c:14:63:b6:9e:b6:1c:7d:bf:48:73:91:c6:
         59:af:2a:64:ce:f6:4a:85:60:67:2d:c0:67:fe:4c:65:cd:63:
         99:da:a7:b5:99:ec:da:85:86:6c:dc:95:60:30:e2:68:27:b0:
         01:91:ec:82:c3:5d:a8:5a:4b:07:17:29:63:46:24:77:e1:46:
         42:13:3d:66:49:89:b1:83:29:9c:5e:c0:a1:d5:5d:ba:71:02:
         3d:65:00:c8:7b:7c:02:0e:6f:32:57:e8:2f:2d:42:4b:c9:2c:
         68:f8:c0:24:13:db:ca:8c:a0:5e:f5:a1:0f:fa:28:0a:cc:4b:
         49:17:17:16:b3:3e:19:0b:c1:a1:eb:d7:6a:b3:cb:84:68:2d:
         8a:f3:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:37 2025 by rpki-client on console.sobornost.net