Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
File:                     f789410d-2589-3534-9ba9-d9a9d661914e.roa (raw, json)
Hash identifier:          dg6joSANeQm4YkooFXS5flimRIaX/duU3atKV+BfVQ4=
Subject key identifier:   E7:A9:CB:E3:4F:02:A7:AC:E7:E5:59:7C:88:45:3C:9B:36:D0:D4:84
Certificate issuer:       /CN=34a5694e-eed6-4612-aff2-ae9f369f1738
Certificate serial:       010D0C9F43285849631EC0D647E7C6B08E091880
Authority key identifier: D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     397861
IP address blocks:        67.158.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c0:d6:47:e7:c6:b0:8e:09:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a5694e-eed6-4612-aff2-ae9f369f1738
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=6d940e84-379f-43c1-98b7-c1c51ab59f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:32:e1:46:b4:0d:68:24:b1:a0:19:1a:15:4b:
                    de:98:4f:b1:5b:24:82:25:17:03:3d:e2:c8:ca:16:
                    4d:81:1d:c0:18:83:cf:59:ef:bc:a6:ee:d5:e1:eb:
                    95:4f:db:47:f4:11:24:cb:67:92:ff:a7:6b:70:a7:
                    7d:46:48:e3:b6:bf:69:74:00:89:10:9b:3e:51:dd:
                    60:84:13:db:79:ce:b6:63:0e:56:4c:f8:01:a7:31:
                    1e:fb:79:14:3f:29:b3:25:a7:4e:dd:ed:cd:f9:31:
                    80:d4:b6:e8:4d:8f:c2:c4:ab:91:a7:ba:e3:57:cc:
                    42:ac:49:5d:73:fc:4e:fb:20:19:85:f0:f3:a3:7a:
                    4f:07:6e:fb:4f:4c:55:5c:84:eb:69:9d:b3:c8:3a:
                    f1:cd:0b:f4:a1:f5:ab:25:ec:57:76:b7:b2:a0:15:
                    92:e1:92:41:55:1e:a8:c8:25:37:5d:b9:a4:fe:5e:
                    b2:79:33:0c:70:58:71:e8:93:87:6e:90:14:84:95:
                    09:f5:90:27:fe:45:5c:08:ae:4c:f8:cd:04:a7:5d:
                    fc:75:28:d9:73:74:75:80:7a:49:4a:db:08:c3:95:
                    0e:24:8c:58:1a:8d:9f:88:cb:08:d3:1f:be:78:4e:
                    ff:4a:ba:a3:3f:ad:13:9b:f1:ae:1f:bc:5b:1b:4e:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A9:CB:E3:4F:02:A7:AC:E7:E5:59:7C:88:45:3C:9B:36:D0:D4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/f789410d-2589-3534-9ba9-d9a9d661914e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738/34a5694e-eed6-4612-aff2-ae9f369f1738.crl

            X509v3 Authority Key Identifier:
                keyid:D4:1C:AC:64:CE:AE:9E:BB:F2:06:D7:33:0E:3E:0B:48:4D:BA:1D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/34a5694e-eed6-4612-aff2-ae9f369f1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:79:fb:25:08:c3:75:f5:99:1d:be:3e:44:ee:c1:60:5e:23:
         5d:64:d8:8b:c1:c2:6b:6d:98:cf:1a:b4:d1:d5:d1:82:cd:9e:
         ac:ca:2b:84:0e:ca:b5:44:15:f5:9d:03:12:ef:44:5e:21:4f:
         d3:3b:1f:d6:c4:45:f5:91:c8:eb:71:7b:90:5c:88:c9:16:d0:
         97:02:3b:6b:2d:5b:de:f6:03:6d:6a:7c:d6:cb:de:1a:3a:ca:
         e1:13:7f:00:3f:f1:49:f9:29:ee:a2:fa:71:c1:7f:85:76:c8:
         2e:b0:35:d5:8b:62:72:84:f6:e4:a0:22:f2:1f:50:91:5c:6c:
         91:b9:ab:e1:0a:18:1e:d2:00:40:ac:12:5b:aa:29:0c:ac:e2:
         45:13:52:b8:0b:32:30:1c:aa:d4:0b:3e:c2:2e:6a:84:79:ca:
         a0:5a:5c:93:ed:54:cb:ac:03:94:66:20:73:5f:8d:27:4b:65:
         2f:36:b4:8a:4d:a5:1f:4e:f5:d3:b9:41:8f:8e:bd:64:48:cc:
         e1:95:1b:fe:1c:99:4f:82:93:b9:ed:2e:d2:83:14:7d:58:ed:
         09:29:29:42:6b:8c:85:96:57:36:bc:90:32:83:65:b2:a9:14:
         4e:3c:cc:81:c1:5b:d2:3e:ea:af:a8:d9:01:f1:cb:9c:3b:7a:
         97:43:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net