Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa
File:                     03021107-373c-3ac5-abd4-2004e219e7c7.roa (raw, json)
Hash identifier:          Wj80OQCohRUj57+46+J07gLE9HXQ/RBVECxJSdSD8aY=
Subject key identifier:   FD:22:63:54:64:2C:DD:EC:4C:78:2A:96:5F:DB:2B:B6:26:4E:30:87
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F432858496FB6FB8B59B49EF18931B480
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa
Signing time:             Sun 06 Apr 2025 13:17:14 +0000
ROA not before:           Sun 06 Apr 2025 13:17:14 +0000
ROA not after:            Sat 05 Jul 2025 13:17:14 +0000
asID:                     14618
IP address blocks:        192.25.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:b6:fb:8b:59:b4:9e:f1:89:31:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Apr  6 13:17:14 2025 GMT
            Not After : Jul  5 13:17:14 2025 GMT
        Subject: CN=f1d49a0f-1593-4449-a268-8e06c2f7317a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:1d:94:65:92:26:03:9e:62:4d:c0:e9:ea:
                    11:7b:b5:c1:57:ef:74:69:1b:ea:07:69:66:a5:8a:
                    81:78:e0:73:9c:1b:66:c7:c2:59:2a:15:a1:aa:50:
                    62:0b:d3:ed:ed:0f:e4:7c:68:07:3f:05:0f:4e:e5:
                    05:a1:fc:e1:cf:ad:f5:f9:2d:8d:83:ae:3e:cf:73:
                    c1:ff:93:ad:2b:ec:bb:b4:77:d4:cf:c2:b5:be:5e:
                    53:9b:ff:af:e4:51:0c:fe:88:30:b3:77:36:4c:ad:
                    6b:27:3b:29:14:5f:43:c9:52:8a:13:65:96:1f:2e:
                    80:12:d8:4e:c4:6f:32:aa:c2:f6:fb:db:8c:80:7d:
                    7e:00:3e:d2:a8:81:a0:fc:1d:14:b0:0a:8e:6e:f5:
                    36:77:8b:5e:85:3c:6e:dd:66:a3:8a:a3:40:9a:4d:
                    41:5e:cc:3f:4d:40:5d:bc:b2:35:4e:0b:65:69:c1:
                    87:10:65:13:ef:49:de:b0:4b:9d:31:d4:d8:c5:5c:
                    9f:b9:c5:4e:22:91:83:ab:d0:15:d4:e2:38:00:23:
                    f5:41:bf:3c:ed:2a:9e:19:7d:b3:fb:7d:89:da:0b:
                    92:d1:01:4e:e5:37:48:44:5f:ac:8b:03:13:c5:f6:
                    75:c9:fd:e9:9f:61:0d:df:11:91:68:ee:a7:1d:07:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:63:54:64:2C:DD:EC:4C:78:2A:96:5F:DB:2B:B6:26:4E:30:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/03021107-373c-3ac5-abd4-2004e219e7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:76:a9:d3:fd:bf:01:15:f3:33:60:69:8c:c6:81:17:ea:b4:
         e8:8c:09:22:c9:a5:e8:79:73:15:fa:9d:6d:c1:50:bc:68:0d:
         03:d4:59:e7:ef:ef:70:70:eb:cf:b3:25:b3:95:c7:04:cc:2e:
         83:63:39:bb:e8:01:88:14:ba:a8:37:e1:20:17:8f:c2:29:a7:
         c9:1d:f8:64:9c:1b:3c:99:25:b2:d3:2b:30:61:38:7e:31:06:
         58:1b:fe:7d:6a:cf:32:74:e5:bc:64:17:4a:5d:68:54:77:72:
         fc:d1:09:13:b7:ef:4a:e3:45:ae:bf:d7:8b:47:93:f2:cb:5d:
         cc:96:33:6e:9c:3c:2f:98:b5:f4:d1:b3:80:e8:5b:aa:c3:d1:
         77:05:64:bf:e1:91:7e:23:96:26:29:87:11:61:a0:a1:fd:35:
         e8:e7:f1:6a:ec:c7:45:93:00:92:83:97:a9:29:a8:c5:87:8f:
         e5:b5:40:e5:0b:fd:50:ac:0e:b6:c4:a0:4d:41:cf:f1:a3:36:
         a4:23:37:0e:99:0e:ab:83:e4:82:06:f4:2c:66:79:70:bc:85:
         c0:f0:8c:79:af:f6:6c:23:16:0f:da:29:2d:f5:f8:06:1b:62:
         41:c0:c3:e0:91:4f:cd:fa:c3:fc:02:63:8e:19:a1:47:c4:1d:
         ec:90:bd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:22 2025 by rpki-client on console.sobornost.net