Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa
File:                     fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa (raw, json)
Hash identifier:          UwTHpvMzpPj0MbQPYhne2m3w7Z9MQFS3MkVwtR4+ix0=
Subject key identifier:   AE:11:55:F1:35:47:52:EC:B4:21:70:8E:D3:C4:6C:5E:A3:7F:CA:C3
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584910E17E455CDB788535972480
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     14490
IP address blocks:        23.165.168.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7e:45:5c:db:78:85:35:97:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=07566e67-88fc-4dcd-a75b-e177a3696866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:dc:97:a2:8a:ed:6d:f0:55:62:e1:9b:fc:
                    0d:f2:c3:24:74:d0:dc:ee:67:6c:ca:80:ba:34:7f:
                    aa:26:92:fc:f1:58:23:3d:12:cb:d6:49:ac:b2:2d:
                    c3:1a:38:21:d9:34:80:9b:7d:87:77:a6:af:1d:2a:
                    db:9e:2f:f8:ec:0a:7e:a3:09:a3:63:93:42:86:89:
                    f8:c0:40:31:12:b4:e3:11:e9:01:c8:e8:bf:92:c1:
                    e1:90:fd:1e:ef:10:dd:7f:9e:50:75:ed:43:9f:96:
                    9e:94:77:c5:99:2d:47:37:2d:1f:f0:17:fa:2f:b4:
                    68:b3:7e:00:ec:dd:ee:e6:d8:c2:f9:9d:e7:e8:44:
                    4f:6e:7a:16:57:b4:23:e4:66:b7:61:f0:3e:e6:38:
                    d1:26:b3:d9:8c:d3:d8:f1:c2:01:87:81:f2:88:ed:
                    8d:d8:0d:b5:75:a1:e0:73:be:e7:c3:d4:9a:bc:2a:
                    12:69:71:a5:3e:2f:f6:b0:37:8c:42:4b:eb:cc:08:
                    1d:38:db:52:f3:91:47:9b:99:5a:5d:60:55:77:7e:
                    a4:56:da:2d:a3:a9:61:bb:18:ce:f3:70:bb:d7:09:
                    96:c7:62:1d:ed:75:12:a9:1f:77:36:71:6a:a3:44:
                    1d:c7:0f:d7:2a:9c:d8:98:ff:8b:ca:6d:ce:73:34:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:11:55:F1:35:47:52:EC:B4:21:70:8E:D3:C4:6C:5E:A3:7F:CA:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/fe41638a-4f33-349f-8340-5b6a4e8e22a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:97:aa:6d:26:69:75:ca:f9:cb:34:04:c5:c2:f5:4a:16:c2:
         93:d3:75:0c:8e:af:e1:50:07:15:3f:be:77:cf:68:b1:51:12:
         f2:35:8f:81:34:5c:87:d9:5d:dd:ec:76:ce:c0:ec:a7:9e:7e:
         cb:44:84:c9:57:ad:05:70:19:ba:96:c8:8d:d3:c4:ae:ce:01:
         a4:9c:a3:04:42:c7:b8:54:c2:78:b5:bb:09:9e:a6:89:53:31:
         5e:f1:c2:59:92:50:aa:03:50:a4:fa:49:35:1a:4a:f0:8e:93:
         b8:37:89:a0:1a:cf:f0:36:68:bf:1e:95:f3:e3:d1:46:39:39:
         39:de:e0:00:0e:81:bd:d0:96:dc:17:40:55:81:1f:54:f3:07:
         68:2f:bd:72:98:ec:ab:2f:68:c5:e8:d3:47:7a:b3:3a:e1:06:
         5c:33:90:81:c1:55:ca:ce:22:3d:6c:ef:ef:44:ff:58:ed:55:
         21:cd:c7:77:1e:de:c8:2e:a3:a8:e3:04:8d:3b:73:2f:bb:20:
         1d:79:28:09:43:b9:32:1f:7f:6c:45:44:4d:3c:a2:ad:b8:24:
         06:8f:2b:73:00:bf:57:de:1c:29:1f:fb:5e:36:fa:9a:bc:95:
         1d:e5:1e:c4:67:b3:f7:a3:89:11:9b:ad:9c:1a:3e:10:0d:87:
         25:86:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net