Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa
File:                     bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa (raw, json)
Hash identifier:          M4uqc/kzj8T3k4sNInwX+s2iVJLEvPFJk75m+yyB9Po=
Subject key identifier:   A2:4D:BB:8A:C9:70:E1:1D:FD:02:DC:96:67:3C:C6:E7:E7:5B:2E:AA
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F432858493243E3DA36291B9A7662FA00
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        150.252.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e3:da:36:29:1b:9a:76:62:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=0aba239d-4486-49c3-b979-398c16e3e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:05:ef:9f:8e:57:c0:1e:3a:63:84:c4:20:67:
                    d4:03:c0:f8:35:bf:69:6d:05:d6:4c:56:1f:88:63:
                    d7:b7:18:63:61:8a:ee:d9:ac:61:58:77:ac:bf:4e:
                    24:be:58:27:1f:6e:a0:a5:fd:87:5b:c8:69:d9:cf:
                    db:b8:13:31:83:c5:9e:12:51:1b:0b:aa:24:bd:9b:
                    c8:b9:2e:7b:57:b5:ec:db:2a:12:45:6d:e1:e0:52:
                    7f:6c:33:59:96:e4:f3:09:c8:d6:f7:65:aa:49:d0:
                    ca:16:39:af:f1:7f:c2:bf:08:3c:d3:43:69:2f:1f:
                    c5:fc:f4:a8:04:bd:85:22:b0:68:96:7b:82:7a:32:
                    5a:62:1c:79:5d:36:d6:93:a7:5b:7e:24:d2:f5:4d:
                    ae:d4:c5:ab:86:43:bd:b9:7f:01:b4:7a:7e:a7:e4:
                    e4:40:28:6c:24:fa:14:13:70:d3:62:8a:02:f8:91:
                    c9:d8:c3:90:e1:79:01:08:e0:10:56:f6:65:06:02:
                    4a:6a:8c:09:a6:39:ab:ec:92:dd:02:cb:bd:bd:a0:
                    bd:10:de:7e:ab:ba:e8:27:0b:f9:dd:29:e0:b9:b3:
                    d6:83:b7:39:c8:ef:19:4f:b9:0d:16:5a:bb:49:3f:
                    a8:5e:30:49:30:fb:cd:54:95:19:1e:3f:a5:14:e0:
                    3a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4D:BB:8A:C9:70:E1:1D:FD:02:DC:96:67:3C:C6:E7:E7:5B:2E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/bf27c839-8fe0-34c3-b3c8-47bc5bf71167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:04:a7:43:76:18:b5:f6:dd:63:8e:e6:d8:c9:4f:46:d3:
         78:06:74:1e:4f:0c:97:4b:2f:f2:9e:39:d5:ac:4d:aa:3f:81:
         af:6e:f5:e8:ad:e1:b4:12:b8:f1:1e:8f:70:5d:1b:5c:5a:0b:
         30:e2:cc:88:b6:80:ad:88:15:71:b4:ad:68:af:4a:08:c7:26:
         18:a8:da:8d:6a:0f:b4:6f:eb:ad:65:91:c7:fe:41:fa:98:05:
         6d:a2:1f:f1:bf:10:2f:7a:38:fd:72:d9:c0:a2:b6:67:79:4f:
         75:b7:47:e5:21:87:41:42:65:05:a7:70:52:f3:a0:c7:49:da:
         f2:91:1f:47:b4:51:9d:39:37:69:be:6b:54:00:f1:85:0c:80:
         32:f4:09:71:ba:b3:44:08:7d:f5:87:0b:c8:fc:88:e9:bc:18:
         dd:9a:9d:13:e6:14:9a:40:0e:92:8a:48:e6:67:c2:e4:b2:ad:
         01:ee:09:ca:c0:8b:be:5c:b0:d9:8b:f6:0a:5c:f3:64:96:11:
         48:7f:fd:ba:90:6f:e4:28:92:3d:b9:b2:f7:b0:34:64:25:04:
         c6:31:4e:de:a5:7d:70:0d:24:d8:4a:8a:26:3f:40:18:3f:82:
         d6:3a:6d:89:c5:2b:6c:f1:10:a2:2d:95:8b:8d:d4:ec:a3:e2:
         f8:2f:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net