Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa
File:                     625be0c0-475e-3286-a030-2b66e8ea5ada.roa (raw, json)
Hash identifier:          I9dnNvG6pJaUzSIqqVMQa5mutK5yYbrnMQ/N36LxwXA=
Subject key identifier:   59:20:F3:FE:59:1C:B2:1B:F3:D2:7E:E1:C4:7D:EA:B6:93:F7:11:2F
Certificate issuer:       /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
Certificate serial:       010D0C9F432858498339F03D21228F4AB36C1500
Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     40764
IP address blocks:        208.89.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f0:3d:21:22:8f:4a:b3:6c:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=9dca6fe5-0d73-47e9-9d71-1e33b3955f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3b:48:13:5e:d8:e9:4e:2c:2a:27:76:92:ab:
                    cb:07:6f:0b:42:39:98:1a:3b:69:8f:72:ce:95:ac:
                    46:59:22:ac:87:43:a5:0f:79:6a:f7:93:d0:a5:20:
                    a6:f4:9e:25:ec:c6:93:62:2d:9c:39:de:b8:38:57:
                    65:9d:26:0c:4f:24:74:65:cc:4d:2e:77:7e:e1:3b:
                    b8:35:de:a3:c9:5c:34:64:cb:cd:84:74:f9:81:1f:
                    1f:b4:b9:16:13:8f:27:78:ca:4e:9f:38:90:2b:2f:
                    72:c7:d3:eb:50:67:20:98:97:5d:3b:b9:a6:75:d3:
                    b6:10:6b:71:20:54:70:8e:29:9f:11:d4:d2:36:b1:
                    aa:ae:00:02:c4:af:e9:a4:8e:c6:1a:61:45:76:18:
                    02:fa:c1:de:85:50:dd:82:23:27:c8:ab:f6:07:bf:
                    b5:90:8a:bf:70:51:3a:25:42:3b:75:51:31:ea:8d:
                    3e:20:e2:40:94:ed:be:e3:c6:4c:87:a1:a1:1a:bb:
                    68:c0:c4:49:5b:18:75:4c:50:54:0f:16:15:95:22:
                    a2:b0:f8:21:ca:8f:22:c1:5b:61:b2:70:b3:65:c7:
                    37:d3:ec:4f:17:5e:97:14:99:ad:f1:e9:ec:dd:3a:
                    29:d5:3b:bc:96:3a:f7:a5:a4:81:51:e2:42:71:18:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:F3:FE:59:1C:B2:1B:F3:D2:7E:E1:C4:7D:EA:B6:93:F7:11:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/625be0c0-475e-3286-a030-2b66e8ea5ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl

            X509v3 Authority Key Identifier:
                keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9a:cc:71:3f:31:7f:e1:e0:c2:e6:95:29:f7:67:a3:b4:0c:
         1a:24:e7:71:29:f9:cc:43:b3:9d:26:35:18:5d:10:0b:f8:87:
         41:2a:35:c1:f5:8f:54:28:69:61:b0:49:94:dc:ef:94:40:96:
         9f:30:fc:31:c9:77:84:6a:db:d0:73:8b:70:ab:8f:88:74:c5:
         99:96:33:47:79:32:40:32:60:96:21:2b:2f:00:d9:7d:34:68:
         6f:b2:68:9f:b5:20:b6:d5:ef:4b:7e:cf:cf:3e:60:11:de:96:
         94:a7:f0:57:91:ba:cf:d8:59:12:0c:7e:b7:a3:6e:3a:66:f5:
         e1:26:c4:3a:09:db:ea:1a:da:10:41:05:d7:fa:66:07:3e:2d:
         ec:f2:a8:f8:2e:88:d6:5d:57:98:be:17:33:f1:b7:b4:11:9a:
         ab:4d:0a:ae:87:72:47:91:79:0f:49:45:1d:aa:3f:bc:ba:3c:
         fe:28:6b:0a:a5:9f:3b:05:81:0b:33:dc:41:60:75:04:ee:5b:
         d5:7a:cc:34:ee:7e:06:d2:e8:89:e2:00:bf:3b:98:9f:09:8c:
         8a:20:2d:c7:db:fc:8d:f7:d8:ce:3f:b8:7c:4b:ed:8a:b6:6d:
         b7:46:e8:0e:00:de:b5:61:f8:cf:99:1f:dc:ba:89:8f:de:ae:
         9d:40:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:50 2025 by rpki-client on console.sobornost.net