Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
File:                     bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa (raw, json)
Hash identifier:          BkSed7ZOg7TW+3hgD32iQ2KlhR9Lb88RvPjGz6Y5y3c=
Subject key identifier:   97:A2:1C:34:B7:CA:C2:BE:E8:3C:93:EF:E0:35:78:CB:57:47:37:5F
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F432858494E2EA646DE15EE4821B4BC00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     394437
IP address blocks:        206.198.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:a6:46:de:15:ee:48:21:b4:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=a0f3acaf-205a-4fec-8fdb-d81c838a43e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:2e:f2:8d:6e:22:82:e7:1d:23:79:78:3b:
                    90:09:7a:ee:3f:a3:05:66:cb:23:ec:61:20:8b:82:
                    de:d6:29:a8:9d:96:59:d6:61:d4:5a:bb:a0:e9:64:
                    7c:08:b1:54:6f:c5:9f:31:35:ac:ed:83:cb:32:cb:
                    3e:07:fc:aa:25:ad:67:43:e4:e8:bf:59:8f:81:2c:
                    a7:e1:9d:4f:d6:44:7a:d0:3f:54:08:10:9f:4a:b0:
                    6c:1f:fb:7c:6e:2f:d4:a5:76:30:7b:e3:8d:57:d6:
                    8f:d4:fd:b5:3a:cb:bf:ef:c5:c1:a2:21:4e:11:79:
                    30:67:77:b6:df:df:93:07:4f:0e:8a:0b:20:b3:a9:
                    70:2c:3d:40:11:55:be:d2:36:1a:d2:4b:2d:5e:58:
                    8b:86:3a:22:34:40:2d:ad:04:15:c1:de:fc:46:99:
                    0a:18:d7:43:de:55:ce:2c:87:5f:b6:8c:85:e2:0d:
                    b0:cf:bb:8f:2b:74:cb:7b:5a:b7:75:d4:34:a0:05:
                    8b:4a:c7:32:55:f9:4e:ec:fc:e6:20:74:69:58:4c:
                    55:88:4c:df:f5:72:5f:76:cb:3b:9f:bc:f7:79:dc:
                    22:8d:c2:e1:0d:06:29:11:c8:fb:21:04:f3:c8:f5:
                    0a:43:e4:2d:72:8c:2e:9c:ac:a8:d5:3c:b3:af:d4:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A2:1C:34:B7:CA:C2:BE:E8:3C:93:EF:E0:35:78:CB:57:47:37:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:a4:e0:19:bd:43:a2:e1:29:f1:20:6a:55:c5:53:59:ce:
         71:bb:64:6f:37:e0:f4:3f:b7:14:60:bd:9b:4d:4f:a3:76:fc:
         71:fb:d4:89:3c:79:f1:4e:26:3a:80:23:0d:25:46:fc:c3:e5:
         6b:6d:c3:8f:ca:a2:3c:f9:6d:d5:45:73:24:a4:1a:23:64:da:
         b5:cf:aa:7a:93:50:81:d6:94:97:cc:cc:87:0f:99:79:54:a9:
         c9:67:d4:a6:c1:21:a7:34:3e:c9:07:ff:6b:68:15:e1:8b:cc:
         7b:1a:6a:4d:1b:dc:da:0b:80:62:1b:29:8f:44:d5:f5:65:c5:
         36:8b:cf:37:b3:cc:47:3b:de:18:60:02:39:4f:56:6a:ad:e6:
         77:3b:48:7e:9f:d0:bf:aa:e0:f2:d4:7a:fe:7d:2b:bf:65:77:
         e4:fe:07:11:95:ba:91:ba:49:72:f6:f1:e0:9a:0c:0e:24:17:
         f6:71:b9:d1:2d:3e:ac:3a:80:98:75:13:5e:29:ab:4f:1c:9b:
         e6:9e:7e:35:e8:72:7f:d5:1f:68:d9:a3:e6:bd:30:a1:f2:63:
         7a:ae:79:db:c7:3e:2c:0d:34:9b:65:41:d8:40:16:f7:2a:b2:
         f0:d3:95:be:71:db:b2:75:8e:08:6e:b9:ce:e7:14:bd:a8:e0:
         d3:06:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:29 2025 by rpki-client on console.sobornost.net