Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa
File:                     1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa (raw, json)
Hash identifier:          d/PaCnrXmriV5OPZvVgUpJJNJmgOSe2XHPleMa+fqOU=
Subject key identifier:   75:1C:22:9E:74:F0:CD:EF:B8:C5:47:6D:06:24:E8:01:84:FA:CE:EA
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F432858495E2DF18BC0C032AD78052400
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa
Signing time:             Mon 31 Mar 2025 06:32:23 +0000
ROA not before:           Mon 31 Mar 2025 06:32:23 +0000
ROA not after:            Sun 29 Jun 2025 06:32:23 +0000
asID:                     26658
IP address blocks:        23.249.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:2d:f1:8b:c0:c0:32:ad:78:05:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Mar 31 06:32:23 2025 GMT
            Not After : Jun 29 06:32:23 2025 GMT
        Subject: CN=c8a89fde-3379-4665-b9dc-f1b73bbf3095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:ca:ab:e1:05:91:3b:63:6f:c2:75:1e:e5:
                    28:ae:46:b2:81:1e:9b:a3:46:2a:e2:6a:a5:25:55:
                    1e:7c:ab:83:87:29:51:96:2a:c1:23:92:e8:66:f0:
                    7e:8b:62:da:0e:a2:5c:d6:b4:78:30:dd:91:e5:7f:
                    a1:c8:5b:6d:a4:44:91:db:51:c2:85:5f:71:1c:ba:
                    f8:6d:f3:1e:7f:8b:16:29:47:ba:8b:77:8a:f6:4f:
                    49:c6:61:f4:1b:11:15:88:94:48:dc:a7:49:63:ea:
                    1a:81:08:57:a9:fd:1b:48:ad:0c:c8:28:87:0b:54:
                    ad:45:07:40:18:be:00:21:98:74:62:1c:eb:c0:a1:
                    5b:30:8e:26:4b:3f:94:89:6a:09:49:1a:02:27:a5:
                    f6:5e:01:67:a0:81:89:c8:a2:4b:29:8b:2b:2a:92:
                    22:a4:56:eb:9a:62:f4:24:a9:4c:4f:98:85:a9:69:
                    25:b5:7f:bd:73:0a:ee:34:aa:15:48:53:eb:53:41:
                    f5:e0:c5:6a:ed:72:d8:a0:ce:f5:72:db:f3:34:4f:
                    11:c9:13:49:1f:e1:69:d6:13:6e:a8:0e:91:18:bb:
                    8a:67:3d:74:5d:35:e4:66:e6:a8:65:e4:d4:b2:f9:
                    a8:8e:78:78:d7:f9:c2:3f:0c:ec:c1:ca:18:e2:9b:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1C:22:9E:74:F0:CD:EF:B8:C5:47:6D:06:24:E8:01:84:FA:CE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1e:a2:5b:e3:c7:11:bd:30:e3:40:49:52:5d:4b:01:e6:c4:
         d3:1a:ca:59:91:41:a3:47:69:89:6b:45:81:b1:c4:12:8b:f0:
         d3:06:4a:b7:a9:3d:2f:2c:5d:ef:03:16:01:a4:69:f9:51:ff:
         5c:b7:9b:1f:63:0d:39:41:2f:7f:69:be:5f:40:86:9d:b3:2c:
         7f:74:69:5c:66:61:6b:78:ae:b0:cd:c1:88:66:65:5e:46:02:
         29:4d:ea:35:ad:36:a1:94:20:d3:31:61:ff:3d:8b:45:9c:4f:
         5a:a1:57:e0:54:a2:fd:93:6c:b2:93:78:0c:48:5a:bc:ba:30:
         be:2a:b0:20:ed:71:89:dc:9e:44:53:75:d1:80:a1:c4:dc:33:
         14:e4:24:c8:0c:6b:85:60:a6:3c:cf:4e:2d:22:0e:b4:c2:41:
         69:2f:2a:4c:a7:40:ec:62:99:8c:e7:52:95:d5:0f:ff:80:91:
         59:ce:36:27:41:a2:bb:57:3e:a9:de:78:de:9b:3e:fe:42:86:
         8b:dd:2c:0b:b1:92:47:b2:f0:c9:f5:11:45:c8:e6:af:ce:77:
         ff:56:51:78:43:31:a3:76:c7:88:34:95:6d:7f:70:61:3e:1e:
         84:fd:5b:f0:a7:9b:76:9e:c3:f9:f7:02:39:6f:9e:38:3e:31:
         db:2e:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net