Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa
File:                     93497be9-d4a7-37b2-a828-c5e8d039363b.roa (raw, json)
Hash identifier:          5gnzWd6jWXQm/WjfFTeH8/Cyy4wpzMI6ks/5rvVPNOY=
Subject key identifier:   82:E4:F2:9D:EF:E8:DD:CC:3B:F0:C7:F9:C7:C3:C0:07:85:43:44:C2
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F4328584925B3AB591A3754A20E1E2950
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     398156
IP address blocks:        168.220.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ab:59:1a:37:54:a2:0e:1e:29:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=dd2cd4c2-ff8c-47cc-b162-ede905e90c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:ce:f7:75:cc:43:f3:a9:a7:93:02:b4:71:
                    ad:9d:ec:df:5f:e8:53:12:89:32:85:54:fb:41:76:
                    54:95:f6:af:bd:b4:a1:10:2d:b4:7e:32:46:54:9f:
                    b5:ca:75:10:98:23:d3:d4:c0:4d:f9:fb:0a:67:83:
                    a3:51:ef:c3:54:30:83:c8:ec:48:10:9b:b9:f8:5e:
                    24:43:1f:5b:a1:ed:df:be:36:fb:3e:e4:a9:58:7c:
                    ee:d4:5e:ca:25:f4:67:59:37:2e:c2:4d:bc:15:84:
                    ab:2d:28:d4:80:c5:22:bd:48:78:bf:1a:21:a6:ea:
                    d0:b3:0c:3f:29:ad:3b:32:4b:0f:a5:2f:48:f6:6a:
                    5f:8b:e8:15:62:45:1f:e0:30:13:40:31:81:08:e4:
                    36:72:44:0e:72:9f:6e:27:32:be:01:d6:5e:ee:2b:
                    11:20:c4:9e:76:91:fb:55:cc:0e:11:9a:1b:44:48:
                    6c:ca:52:cc:4a:33:b5:26:71:15:e9:25:fa:60:26:
                    cb:a0:6b:3c:15:15:bd:be:fd:fb:09:78:e1:10:62:
                    a3:cb:49:b8:ff:24:e7:9a:ac:ba:34:35:09:2d:04:
                    9a:0d:b6:2b:cc:4c:fa:36:13:6d:78:90:59:13:fa:
                    49:02:2a:41:03:de:7c:e5:24:53:97:4d:d3:2b:27:
                    1f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:F2:9D:EF:E8:DD:CC:3B:F0:C7:F9:C7:C3:C0:07:85:43:44:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/93497be9-d4a7-37b2-a828-c5e8d039363b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:07:aa:68:6c:15:34:88:77:96:b8:e3:6e:72:26:0c:71:22:
         a4:e4:77:55:e3:5f:44:80:cb:0e:b2:af:f0:46:63:d6:1b:47:
         30:c1:8f:be:ca:73:7b:da:dc:12:3e:e5:75:1c:47:31:aa:78:
         82:92:57:aa:62:73:ba:0d:a5:59:41:d3:e7:cf:21:c4:e0:94:
         86:c0:3b:83:49:a8:25:17:4d:62:02:85:79:25:68:42:10:b8:
         11:23:26:74:47:d3:48:4d:29:cf:34:46:b2:f4:d3:7a:69:45:
         6d:d2:2d:54:87:6d:56:b7:38:43:95:30:4b:50:ad:a0:24:7a:
         12:33:fa:e2:32:28:3f:47:06:0a:c7:cc:76:45:c5:b3:35:08:
         54:bc:f1:df:9a:12:9b:fe:88:f6:ae:0b:0c:44:b1:2f:1f:33:
         09:7b:10:48:23:d2:a7:98:54:f1:af:ad:94:24:27:a1:a8:73:
         3a:0a:f9:8c:c6:3d:0b:f2:54:99:42:1d:0e:0a:96:46:0a:21:
         f2:56:ed:69:4f:f9:c0:12:32:8a:0f:6c:71:04:9c:47:45:de:
         06:a5:69:d2:fe:5b:b5:64:c0:95:14:ec:5e:f9:c3:4c:e3:5e:
         2a:03:aa:56:54:28:ba:09:41:27:7d:6a:26:c2:95:e3:a3:fb:
         c6:e6:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net