Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
File:                     665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa (raw, json)
Hash identifier:          xc3mjJGRlkcIhFTsoESevcNPIV0z0suWjN0UV6xbMww=
Subject key identifier:   52:70:3B:52:32:7F:3C:C5:A8:98:91:62:98:E2:4A:A3:E3:CF:17:62
Certificate issuer:       /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial:       010D0C9F4328584967BE0928EF987AA17641F940
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
Signing time:             Thu 03 Apr 2025 16:44:59 +0000
ROA not before:           Thu 03 Apr 2025 16:44:59 +0000
ROA not after:            Wed 02 Jul 2025 16:44:59 +0000
asID:                     398041
IP address blocks:        67.226.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:be:09:28:ef:98:7a:a1:76:41:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
        Validity
            Not Before: Apr  3 16:44:59 2025 GMT
            Not After : Jul  2 16:44:59 2025 GMT
        Subject: CN=1b8efff0-d640-4f77-99f7-2e0bc2ed214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:21:68:9b:4b:b1:9b:70:de:50:f5:c0:76:
                    ac:89:b5:31:64:10:11:16:a1:bd:14:0b:58:f4:2c:
                    76:8c:d0:62:6a:a1:68:a8:e1:08:97:42:cb:d4:d3:
                    9e:c8:6f:d5:91:be:9f:1e:d7:97:08:e6:0b:87:cc:
                    3b:34:db:21:58:68:73:d0:c2:1d:db:34:87:dd:cb:
                    99:c7:64:8f:5b:85:89:18:fb:e7:22:12:57:c5:7e:
                    d9:1a:48:60:4d:84:ce:8d:3c:d9:f1:a5:bc:2a:7a:
                    d0:63:cf:08:69:46:2b:cf:a1:1d:4a:14:9f:a2:17:
                    a0:22:92:24:d3:3b:68:4c:87:e8:a9:c0:e7:a6:5b:
                    f5:98:f2:51:f7:2a:4f:31:2c:f0:8f:63:91:c7:f5:
                    41:b1:bf:cc:96:41:89:a1:fb:35:ee:66:c2:c3:0b:
                    25:34:c0:23:c5:fe:7c:af:5f:b0:5b:75:89:81:00:
                    b8:be:41:e4:9c:70:b5:06:32:88:19:d6:b3:54:e2:
                    f2:50:83:36:b5:3e:88:c1:f1:fa:68:9b:1d:77:87:
                    86:20:ee:07:1c:43:69:c6:d8:26:45:40:dc:70:08:
                    de:5f:8a:52:c4:e3:83:bd:ec:ff:2e:61:72:60:81:
                    e2:1f:83:a7:83:13:bd:4a:3c:a9:94:2b:05:97:c1:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:70:3B:52:32:7F:3C:C5:A8:98:91:62:98:E2:4A:A3:E3:CF:17:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl

            X509v3 Authority Key Identifier:
                keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:11:1b:bf:25:f9:62:ba:8a:f6:c7:22:22:92:26:5b:ee:c3:
         70:49:e0:4f:35:00:fb:72:11:6c:cd:86:57:15:d8:27:31:4d:
         2f:c4:b8:f8:aa:fa:57:c1:c1:1b:39:78:14:47:c3:e8:0d:ee:
         b3:00:69:4a:d7:b6:f5:c8:df:d0:fb:c7:f3:e1:26:90:19:95:
         56:a3:c2:dd:e4:b2:05:e9:51:37:10:14:69:ea:0f:e3:37:a2:
         a6:98:3a:22:47:52:ff:8d:d5:31:10:0e:1e:44:d7:cb:4e:d5:
         cb:9f:d8:54:a0:3e:20:bd:36:c2:1a:0a:95:47:b1:f8:55:08:
         a4:9c:0b:c1:a8:3d:15:1e:8f:4c:4a:54:8c:dc:f1:06:ae:3f:
         92:56:44:ec:97:e7:d1:e4:df:6f:c9:7d:21:b0:0e:78:a0:08:
         40:09:b1:42:bb:6c:d5:37:c6:3e:98:ba:60:54:86:0b:1f:9c:
         39:b4:00:48:cc:e9:2f:b2:1e:36:dd:ae:df:e7:56:5a:c7:a5:
         c7:c8:ed:30:5b:65:aa:d7:a5:96:94:f2:8d:0f:07:83:01:e5:
         36:38:37:7e:21:c0:6d:44:77:45:8f:c4:95:f0:bc:14:60:14:
         61:1e:38:c1:eb:50:1a:63:59:6d:ba:f7:80:9e:55:ad:7f:d0:
         30:f2:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net