Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa
File:                     9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa (raw, json)
Hash identifier:          hIfw5PydfPJmWOPOruOGSRTZX57j8a7fGqkTxe3qGYc=
Subject key identifier:   3B:73:E7:B2:AD:5A:AF:B3:9B:3F:49:AF:7E:41:DC:34:D0:E1:25:5B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584957F3FB822E9A67C57F197600
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     21859
IP address blocks:        128.14.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:fb:82:2e:9a:67:c5:7f:19:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=0933a03a-21ad-4979-aba5-9dd1fd220780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:50:28:a1:e5:87:cd:69:55:cd:b9:1e:32:
                    ba:cc:88:88:9f:3e:33:36:6a:0e:70:89:5b:a7:97:
                    39:1a:73:3f:a4:7f:4e:c6:6f:15:07:4a:bb:ea:51:
                    dc:68:68:b5:5e:cf:dd:50:2a:30:7e:26:d9:d1:28:
                    e5:91:f3:18:ba:ec:39:39:30:ca:ce:68:33:a9:22:
                    20:d0:5b:98:69:fa:c6:c8:a5:32:85:02:99:ac:89:
                    a2:85:c5:09:f8:e5:80:f9:f6:ff:4f:e7:19:45:5c:
                    5a:b6:48:32:4f:a2:2f:e3:2f:36:ab:8f:05:d8:f3:
                    0d:de:d9:d1:13:4b:80:28:4a:ef:a5:b3:34:2e:a4:
                    76:50:c6:37:81:b7:05:02:33:22:4a:81:f5:90:5b:
                    70:e2:3a:7f:60:a5:8f:e5:66:bc:8b:36:21:4a:30:
                    7b:2b:3d:16:65:f2:4e:9b:3c:e4:3b:44:34:1b:f8:
                    28:c0:04:4e:f4:7f:04:52:1e:94:a0:b1:ff:41:b7:
                    ce:e9:36:b9:9b:6b:da:ed:f3:e7:72:23:25:55:46:
                    f7:f9:1d:f8:c6:2c:e3:66:14:93:e5:78:89:f1:c8:
                    2b:0b:a8:03:96:da:7b:87:a6:bc:85:76:b3:cc:0f:
                    81:65:8a:bb:12:3d:8e:87:b4:6c:09:be:43:83:fc:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:73:E7:B2:AD:5A:AF:B3:9B:3F:49:AF:7E:41:DC:34:D0:E1:25:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:6d:8b:40:cd:2b:ad:e3:77:3b:57:db:ac:63:54:2d:9b:
         94:49:11:65:17:b9:ec:a4:4b:b6:10:13:e6:64:06:0b:b6:98:
         d8:da:f1:a6:6d:87:81:fc:4b:85:56:f3:25:fa:9c:1b:16:8d:
         40:01:04:98:03:85:69:9f:9d:b1:61:a3:da:01:d1:e0:76:b4:
         7d:3a:47:aa:c0:52:7f:6a:0d:2f:00:6a:e6:f4:47:ad:a2:5f:
         cc:b4:c8:44:4b:70:e8:7d:91:0a:ee:a9:83:57:ee:2a:2d:1e:
         2b:6c:1e:ed:a7:90:8d:3b:ea:cf:2b:e6:da:d1:25:57:ab:40:
         7c:62:e1:ac:e6:0f:ad:f4:03:c1:09:36:eb:6a:32:5e:8c:a6:
         d7:05:12:e6:f0:5e:bc:7c:78:ac:ff:9d:ba:43:5c:1d:9f:4f:
         8f:bd:76:13:c6:ab:ee:18:fe:63:9f:31:68:c6:3b:8b:3f:4a:
         b1:8e:18:64:6d:0f:cf:8f:c5:6f:23:cb:44:77:d8:5e:87:60:
         a3:08:2b:db:74:3b:76:f9:08:c8:d6:99:35:96:5b:a5:5d:6a:
         26:e8:6e:f0:28:d4:25:9d:63:26:76:2f:49:1c:5b:d7:33:52:
         82:18:16:d0:75:1b:26:03:6c:c5:4e:ac:69:c5:58:67:c0:67:
         bc:87:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:51 2025 by rpki-client on console.sobornost.net