Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa
File:                     c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa (raw, json)
Hash identifier:          U+HK6QZCnhEyqPgKQh27C2+jr/YmhOhC+8To/Zj7U+0=
Subject key identifier:   8A:99:B4:1E:E9:A7:D1:95:06:20:02:1F:03:21:00:8D:B8:A0:52:B2
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584937D9310B1667A6E981F20520
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        208.70.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:31:0b:16:67:a6:e9:81:f2:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=731d4b11-b960-4854-920b-cf71fd9cfb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:a2:2d:cb:78:98:23:90:aa:97:34:16:ce:
                    80:bc:65:28:54:a2:ba:ff:a6:77:ba:8e:24:ee:47:
                    26:8a:5f:35:7a:3d:3e:e6:81:6d:d6:a2:f1:03:01:
                    56:8d:6f:b2:7e:3c:1e:33:2c:04:28:10:81:79:3a:
                    50:80:87:da:c0:8c:75:4d:ed:dd:21:34:d7:6e:36:
                    f6:84:37:28:15:fe:11:36:6b:ad:54:c3:71:8c:4d:
                    4f:ba:fd:97:b2:7c:00:73:cd:74:b4:2e:f6:01:ba:
                    bc:48:5a:ea:29:61:a9:24:09:2f:fd:ce:cf:78:17:
                    9b:98:63:dc:e8:61:05:66:17:4e:52:07:1e:6f:34:
                    05:8e:ed:fc:e3:54:fa:60:f6:7d:46:f3:3a:cf:42:
                    0a:9d:cd:8a:4f:16:2a:a0:5a:5f:6b:61:c3:d0:f9:
                    1c:18:ee:88:de:33:bf:c4:87:de:d3:e5:fa:66:9b:
                    94:a6:af:04:90:cc:ca:bf:83:91:cc:68:78:6c:52:
                    72:58:a0:85:02:38:93:dd:3f:e9:3e:d8:71:53:4c:
                    d3:98:af:91:dc:5f:89:e1:25:38:3b:e1:bc:c4:c3:
                    4c:86:ac:cc:38:af:71:b3:14:c4:86:1f:42:a7:31:
                    fc:55:14:2a:e5:69:92:3a:a8:59:af:b3:c1:3c:17:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:99:B4:1E:E9:A7:D1:95:06:20:02:1F:03:21:00:8D:B8:A0:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/c2507af6-2e3d-38a9-a1c7-1f407f50ac8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:93:7a:d3:0f:46:2a:10:f6:c2:96:8e:1d:32:c0:0f:eb:eb:
         b5:ec:09:46:67:d9:a1:ba:66:15:5d:05:6e:3b:2d:5c:2d:ce:
         96:90:89:07:99:0b:ce:d8:25:5f:27:fb:fe:f7:1d:9f:90:5c:
         77:65:56:64:68:ab:73:b8:09:0c:66:7d:1f:96:87:de:ca:b1:
         b1:d5:97:62:88:7a:77:f8:f0:ab:15:06:c7:e1:da:50:24:d9:
         eb:d0:ba:a2:dd:34:5a:a7:18:e6:29:7d:3f:c6:c7:b0:04:78:
         bd:35:de:55:ff:a3:2c:7c:5c:ca:d1:cb:c2:46:fc:b2:9c:ab:
         00:fd:61:12:29:ec:34:e3:e5:0a:c2:27:ff:4c:61:c7:79:3f:
         62:2c:ba:0d:7f:fc:99:26:48:3c:65:4c:cb:0c:5f:4c:77:82:
         2f:a0:4c:54:f4:3c:82:c1:50:88:4a:0f:ae:e8:5c:9b:df:d9:
         f9:4e:43:02:67:9f:d1:2f:60:28:9f:02:8a:4c:aa:2e:67:7a:
         fe:b3:53:e7:cc:b8:23:79:16:88:47:47:e6:3a:66:b4:c1:45:
         b9:3a:a3:03:6a:bc:c6:f7:47:2b:4d:21:4d:65:30:94:24:8f:
         f4:a0:91:4d:20:fe:03:a8:e9:94:f6:27:17:14:7f:1e:00:9f:
         22:84:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net