Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
File:                     75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa (raw, json)
Hash identifier:          u7h1PWjlowaodCcARdb0GesylE26TPHeX3A2F7jIJic=
Subject key identifier:   98:DB:57:74:A3:D4:D7:E7:7B:E5:1B:37:0C:8F:DF:58:57:DF:AB:E5
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584953C44CB7A5DDC6E9A5CA9AD0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        170.249.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4c:b7:a5:dd:c6:e9:a5:ca:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=6a00f5ea-5b3e-41c8-9e61-d68a9d55695b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:8a:13:db:12:cc:c6:b3:03:fc:56:bd:41:
                    b8:fa:e8:96:10:96:cb:c8:12:24:70:e1:7e:a0:a6:
                    06:06:5a:be:06:48:98:2b:f1:41:eb:e2:83:c0:bc:
                    92:a1:49:db:75:89:df:c8:0e:b5:1a:a6:a1:e1:47:
                    b2:bd:a3:a5:e0:50:65:b7:f7:c9:c7:f3:08:a8:92:
                    06:25:74:94:3f:f5:34:7c:ce:40:48:81:03:e0:d9:
                    0b:2c:4d:be:c0:ff:e1:63:c1:6c:06:d4:49:8b:be:
                    b1:7d:0b:30:c2:c4:65:39:af:2d:93:64:a4:36:77:
                    5e:c5:4d:b1:fa:0f:35:8f:43:aa:0c:71:67:cb:0b:
                    48:4a:13:77:08:e8:7d:3c:ff:66:52:ff:8a:36:85:
                    77:aa:d5:22:22:8d:cc:eb:7e:3f:ac:21:49:5f:af:
                    26:f6:a6:13:16:4e:18:0b:6e:e0:f9:2a:a0:c5:5b:
                    f6:b0:a8:95:a5:b5:d8:c1:a9:c5:37:60:ad:02:81:
                    7b:87:65:ed:9d:23:6f:b8:33:22:4d:c8:eb:fd:f8:
                    59:39:54:6d:c8:ee:1b:af:2e:08:56:e9:0d:c4:a8:
                    ed:8e:b0:51:e9:cf:f8:92:5d:4b:58:5c:63:b0:db:
                    3b:ed:76:e5:97:33:a5:d8:f0:85:f4:1e:d1:bd:a3:
                    68:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DB:57:74:A3:D4:D7:E7:7B:E5:1B:37:0C:8F:DF:58:57:DF:AB:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:cf:4c:f7:08:cb:ff:fe:e4:83:cf:df:22:25:1f:47:4b:
         63:62:46:4a:84:c5:ba:13:72:55:fb:44:80:4e:1b:2b:80:a4:
         c6:bc:d6:12:99:47:97:1f:92:90:3e:99:97:51:6d:bc:bb:67:
         6e:12:6e:6c:b2:48:4b:14:9c:5d:25:51:e0:30:20:f0:99:97:
         f6:8b:63:8b:53:d6:f0:54:49:b6:45:45:c8:36:65:c9:1d:b8:
         73:12:36:66:cf:26:2e:18:fe:6a:ed:cf:60:d0:2b:47:1f:00:
         f9:4a:eb:f1:f5:6a:d2:b6:32:c6:ed:4c:0a:b1:3d:5b:f7:3d:
         d2:d0:dc:59:f5:60:ca:ca:65:b5:d1:ab:64:26:8c:b7:4c:4e:
         d5:09:ea:a2:7b:3d:42:36:f5:f8:95:ad:d0:49:44:52:05:ea:
         3c:6b:e4:91:21:2e:52:4f:ad:7b:e2:ea:eb:4a:53:ca:68:0c:
         cb:f4:fd:0a:1e:ea:16:48:f4:58:5d:94:e4:84:c9:a1:ba:cc:
         d7:d0:85:96:0f:42:7a:49:ff:e9:8e:cd:a7:db:82:e3:19:1d:
         ee:46:e7:1c:2f:83:b6:73:81:fc:c3:77:44:27:f3:48:6c:fb:
         e9:31:0c:09:02:60:ee:f3:bb:d9:66:7e:95:0c:b3:67:8a:7d:
         46:6f:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net