Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa
File:                     51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa (raw, json)
Hash identifier:          bgaeOzs0QeyLaSZq3/EIwk/f9DXLm3HJx0k1C04DFkU=
Subject key identifier:   28:B0:C3:F7:DF:05:2E:46:6A:EB:45:6C:CE:80:0E:63:B9:43:33:49
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F432858495ABEDD5D541120A85825AE00
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        172.87.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:dd:5d:54:11:20:a8:58:25:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=9a04d186-ad7d-4ab2-8eb6-2a67d1bfd46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:ec:28:21:f6:29:93:b6:1f:85:97:0d:3a:
                    a2:4d:36:82:52:26:ca:f1:6b:33:c7:c5:19:1a:f4:
                    19:b5:5a:52:e1:77:bc:ba:c1:9b:1b:11:cf:81:6c:
                    66:4b:98:84:0c:f3:46:bc:31:9f:d8:17:45:9b:25:
                    6a:d3:bd:a0:01:25:2e:14:bf:19:2e:51:c3:e0:3e:
                    25:e9:53:34:83:c9:31:d7:0f:d0:01:d1:c1:d2:1c:
                    1b:9f:15:b5:91:c6:63:19:13:ed:92:b9:98:3d:75:
                    31:e8:74:38:4d:20:94:3a:90:54:36:04:a1:02:b4:
                    14:8d:ab:4d:4d:d6:ae:7f:37:ce:8d:ce:4e:80:fd:
                    e5:cb:ea:71:1d:b4:69:0d:97:c5:1f:29:06:a9:57:
                    10:2f:51:10:8c:79:18:91:95:80:6b:84:ce:a5:ff:
                    32:db:60:99:e4:97:dc:86:9c:45:20:7c:30:10:7d:
                    7f:dc:75:3f:c1:d4:51:d6:28:bc:3a:d0:d7:e6:e9:
                    8a:fd:e0:8c:e5:dc:47:b3:ab:b5:14:73:c5:a6:f5:
                    1d:b0:9b:97:b0:63:8a:3f:60:5c:ae:c6:11:74:38:
                    b3:51:ab:48:3d:d0:77:88:a1:24:64:ff:b1:0f:b7:
                    f1:e0:97:e2:07:a9:38:a1:36:2e:60:02:f4:02:89:
                    12:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B0:C3:F7:DF:05:2E:46:6A:EB:45:6C:CE:80:0E:63:B9:43:33:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/51d9fd79-adf5-359e-b8be-9988b0cffa4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:86:17:ff:e4:76:a7:6e:71:a5:40:cc:f9:15:e1:1e:3a:d0:
         f4:22:e7:69:8e:49:98:50:65:d9:51:ba:7c:1b:4e:d3:06:f9:
         0f:97:97:1f:22:15:9f:fe:02:31:30:41:fe:8d:49:38:a7:92:
         04:ea:6e:ae:97:8c:99:dc:f7:42:73:d5:4f:cb:f4:05:16:49:
         9e:34:cd:41:16:30:ae:86:33:e6:a3:19:0e:43:98:ac:b6:1c:
         0f:d0:26:25:80:76:e2:91:bf:d1:f8:d4:c0:8b:60:dd:31:ba:
         be:36:a4:98:9c:b2:a5:67:d0:22:7f:b8:ea:3e:0b:41:95:bb:
         e2:c3:bc:5a:b4:66:5c:1a:f3:71:42:6d:d8:24:02:2f:31:2c:
         a9:43:f4:a1:1c:36:49:01:89:2d:82:26:97:04:96:03:bd:e9:
         2f:d2:fe:f1:c5:ec:93:b0:3b:65:5b:28:b1:e3:d5:da:a1:a3:
         49:9c:b3:78:0b:c8:06:8e:c9:6f:9c:9e:a0:9a:2c:e4:74:7b:
         34:b0:a4:f5:7a:48:df:77:0f:a5:50:68:6a:0d:c5:5d:54:58:
         ea:6f:59:c8:f9:e3:63:e9:c1:68:35:58:09:e6:f8:fe:7a:b3:
         ca:8a:f6:86:c6:76:3d:91:44:9c:ff:3e:f7:63:04:da:e3:16:
         68:6a:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:27 2025 by rpki-client on console.sobornost.net