Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
File:                     757db988-b3f6-35bd-bf19-c861e85bf57a.roa (raw, json)
Hash identifier:          Mg9v8/HChr0NPArJiHw37hap9l3lPRJ7HrPIG6KCra8=
Subject key identifier:   00:03:7C:F6:E5:4D:A3:D5:96:B5:FB:3A:10:2F:AB:85:FE:DB:9A:97
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F432858495ABEC533F285C768F9800600
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     5788
IP address blocks:        139.173.72.0/21 maxlen: 24
                          139.173.80.0/21 maxlen: 24
                          139.173.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c5:33:f2:85:c7:68:f9:80:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=4caf806d-3efd-498f-8eb3-7ea55a5873bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:66:2e:32:c2:5f:f5:4c:c5:69:df:12:34:
                    88:aa:bc:a5:a8:a9:fe:b6:1e:dc:e6:0d:da:92:6e:
                    14:97:07:88:79:b2:69:a8:4c:51:ae:6d:1b:af:c5:
                    20:8e:10:84:f0:f5:18:af:36:8e:f7:86:39:ce:5c:
                    61:20:c6:78:79:34:b5:14:9a:c5:62:06:7f:44:fc:
                    9d:37:79:18:0e:9b:b3:35:bb:ad:ba:4b:1c:3e:da:
                    63:a7:a8:0a:b2:32:73:e6:9b:4b:5f:13:a7:0d:a6:
                    f0:01:20:3b:43:a2:5b:68:50:f2:a6:79:70:c1:cd:
                    02:fe:71:56:48:25:2b:3d:a5:c9:fc:a3:45:f5:49:
                    c7:94:dd:f6:37:57:c5:ea:3c:66:d9:28:19:3c:b6:
                    f0:c3:60:e8:ad:de:f5:b8:d4:35:c5:38:2f:0a:0d:
                    24:5a:92:d6:c9:10:b6:5f:c0:69:3d:2f:0b:a4:3c:
                    ce:c6:85:d3:b0:8e:00:0b:3a:a4:b1:1d:76:df:72:
                    25:b9:67:2b:ff:71:8d:cb:8d:ff:ce:8a:35:4c:2b:
                    16:4c:90:60:d4:df:e3:cc:25:d4:e2:4e:db:90:62:
                    cd:7e:4e:42:93:ee:db:61:48:d5:6c:35:44:29:75:
                    ee:af:73:4f:d8:84:06:08:87:31:b6:bf:76:4f:78:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:03:7C:F6:E5:4D:A3:D5:96:B5:FB:3A:10:2F:AB:85:FE:DB:9A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/757db988-b3f6-35bd-bf19-c861e85bf57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.72.0-139.173.87.255
                  139.173.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:5f:15:78:35:20:1b:a2:a0:8a:0f:72:7f:2b:fc:6e:df:
         59:01:86:52:3a:c0:ff:03:b0:8e:17:39:34:0f:d0:6e:e3:56:
         20:87:47:32:29:44:b0:36:6b:09:11:f5:78:85:88:3a:9f:15:
         e9:b9:bb:84:00:10:76:0a:0f:e2:e1:b5:41:70:82:a8:e7:72:
         e4:74:39:81:8d:4f:7b:31:e6:15:9a:0d:ed:58:37:b6:6a:4e:
         e0:13:0b:e8:b3:a2:40:2b:aa:52:ed:60:eb:44:3f:9a:20:b8:
         a4:18:bc:1c:26:4a:19:fe:cc:82:09:71:f9:45:d8:1b:ef:de:
         65:5f:e7:c6:9a:09:d4:d0:a5:db:4d:90:65:55:20:f9:d0:ab:
         b1:eb:ea:09:92:45:7f:bf:6d:ca:80:f3:cb:04:ea:a4:82:fc:
         13:80:64:c6:5c:0a:d9:8d:53:b1:7e:9d:65:cf:90:55:fb:d5:
         f6:84:55:c6:15:f1:f1:e1:b8:39:aa:c7:13:cf:bc:72:66:26:
         bb:3a:4c:24:6b:12:73:fb:e1:01:aa:cd:55:ee:0f:f1:9b:98:
         00:eb:f4:31:5e:74:70:56:d9:97:99:93:ce:05:20:c3:ac:7a:
         89:b0:34:24:d3:81:47:f2:5b:c4:ed:6d:d2:2f:f7:d6:69:a2:
         5b:27:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:50 2025 by rpki-client on console.sobornost.net