Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa
File:                     25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa (raw, json)
Hash identifier:          vSsyB3ek0xRc+xyO+jG+qwC6vIWM9Tsq2+ZjXpy6asM=
Subject key identifier:   2A:5F:F0:AA:C4:DF:E5:DE:4A:BA:E5:3E:1C:3D:19:9C:82:58:7F:16
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F432858495ABEDF3D0E64C31E13DE4740
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        64.140.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:df:3d:0e:64:c3:1e:13:de:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=1923b499-b9ff-49ad-89d0-21b103659ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a9:4d:29:e4:08:9f:4c:42:b3:4c:83:95:fb:
                    e3:16:e8:41:3e:e6:b2:42:17:ef:0c:1c:64:95:d7:
                    0f:94:62:7a:80:36:10:9b:27:9e:cc:2c:2f:22:ad:
                    73:75:0e:bc:3c:34:73:f3:93:69:06:08:67:e5:00:
                    69:18:7c:33:7b:96:b7:44:91:41:3a:0e:4b:05:05:
                    b8:70:0e:f7:e8:8f:37:c3:36:ba:44:fa:e9:1e:1e:
                    66:f4:fc:90:a5:1e:b1:b6:c3:88:c8:dd:31:12:3c:
                    92:e6:7f:d7:d3:3a:15:76:9b:c2:d2:ab:9d:b7:41:
                    30:b2:0b:c6:35:e0:15:55:77:2f:15:a4:b4:b7:1c:
                    af:27:96:51:9d:1d:1e:f7:fb:d2:5c:e0:51:f8:e3:
                    e9:fa:2b:c2:c6:e1:b7:f7:52:9a:ff:4f:04:b8:63:
                    3a:64:4e:bb:1b:ea:31:f3:58:48:9b:83:bc:51:f4:
                    8b:99:74:17:25:c7:19:03:97:b8:01:8c:62:c1:df:
                    22:6b:c7:9e:58:c2:28:b9:db:e0:0e:cb:b9:b8:83:
                    ce:ee:b3:88:43:bb:cc:73:a7:ad:5a:af:b8:04:71:
                    94:3c:28:da:45:c2:e6:62:e9:5a:94:d6:a4:fe:e0:
                    a8:c8:ec:24:8c:90:c4:ee:81:6d:76:c9:bf:19:73:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:F0:AA:C4:DF:E5:DE:4A:BA:E5:3E:1C:3D:19:9C:82:58:7F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.140.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:00:cb:9d:89:47:a1:a2:d0:16:ff:b0:47:c6:00:32:f0:f4:
         a9:f9:a4:92:bc:a8:88:fb:e5:db:a7:73:f6:6f:58:ea:51:c5:
         3f:4f:a3:68:ba:c4:30:64:79:2e:73:13:c0:b0:4c:9b:1f:04:
         46:ba:a9:59:49:27:1a:c1:82:b3:2e:10:d3:1e:56:e8:3b:75:
         c7:4c:f9:b7:2a:cd:6e:55:54:d3:d1:2c:14:36:fa:fc:fd:47:
         40:24:bc:4a:10:4b:c9:ec:f3:b3:35:31:64:b5:d5:7d:bd:2c:
         b7:6e:af:68:e6:f0:a9:aa:1d:48:83:66:ef:68:d9:46:9b:af:
         d6:59:1b:c9:f6:45:52:4a:27:22:04:a0:18:fd:82:cf:94:a8:
         80:99:9e:03:46:6e:78:4e:9b:cc:35:d8:8c:78:ff:8b:aa:69:
         df:73:a4:af:d7:40:e3:17:15:c4:da:28:99:1e:09:0c:8a:f0:
         ca:a3:39:c3:5c:d7:95:23:6f:25:89:65:4c:b9:d1:0b:7d:11:
         c4:0e:50:a0:00:cd:ae:3d:3c:df:87:06:97:04:eb:12:a5:91:
         26:03:bd:58:e8:f2:1b:03:b9:9d:a9:67:7a:69:f2:86:6a:53:
         51:2a:6b:14:03:50:b9:17:a3:bf:cd:74:34:7b:04:01:32:00:
         65:d7:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:27 2025 by rpki-client on console.sobornost.net