Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa
File:                     6e84cc83-1388-3da8-9678-51c2343424c3.roa (raw, json)
Hash identifier:          3EPjwUERY9xoRi94JHHThhLjyfe/bMgcbW6L8HeBx/0=
Subject key identifier:   AF:B4:D4:4D:7A:0C:B6:84:ED:DA:6E:FA:1F:EE:84:36:76:19:B4:81
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848DB4292783BD630ABA7465F00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa
Signing time:             Wed 12 Feb 2025 09:03:03 +0000
ROA not before:           Wed 12 Feb 2025 09:03:03 +0000
ROA not after:            Tue 13 May 2025 08:03:03 +0000
asID:                     64267
IP address blocks:        209.59.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:42:92:78:3b:d6:30:ab:a7:46:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 09:03:03 2025 GMT
            Not After : May 13 08:03:03 2025 GMT
        Subject: CN=ddde39e6-a557-4273-869d-86a259e20568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:06:3e:48:30:ff:37:1e:0f:92:21:2d:3f:
                    35:c8:5b:b4:5c:a7:43:28:2d:21:0d:d4:c9:d0:da:
                    8c:6d:5f:a7:92:ac:ce:8c:4d:75:6c:cc:1a:fb:27:
                    37:bd:99:41:3c:83:b4:d9:43:2b:ea:a7:2e:20:86:
                    96:b5:3e:c7:e9:99:36:d2:1b:27:18:29:91:f1:f4:
                    d4:cd:53:b1:e4:bf:a0:78:cf:4d:ff:45:c9:a8:a1:
                    28:5e:51:3d:bd:32:88:a4:03:a0:0a:15:a5:88:3b:
                    5f:35:9b:39:e1:78:cc:7e:b5:42:17:c8:96:78:84:
                    31:73:93:34:2d:82:83:17:c1:65:b1:30:cb:22:65:
                    fa:72:db:4e:10:a1:47:c4:4b:5e:36:42:33:85:f1:
                    36:ce:64:66:95:7b:34:85:f3:2c:04:0b:5f:99:63:
                    57:3c:b0:c9:41:b7:23:e8:3d:e4:d1:37:fd:cc:99:
                    cd:c4:49:6d:91:79:bf:c9:03:73:fd:45:fd:89:0b:
                    8e:6d:bb:55:5c:06:10:ed:22:d7:53:5c:fb:cf:19:
                    3f:df:65:2e:16:6c:7c:6d:68:a3:43:97:8d:58:b4:
                    44:50:56:e0:c3:9d:28:b3:e3:a8:f8:79:18:82:99:
                    c0:77:fb:e1:dc:35:20:2e:a3:c4:89:d8:06:ca:8c:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:D4:4D:7A:0C:B6:84:ED:DA:6E:FA:1F:EE:84:36:76:19:B4:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e84cc83-1388-3da8-9678-51c2343424c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         de:74:3d:0b:f7:0c:3c:f6:8f:6d:0f:98:4c:5b:58:37:b9:9b:
         7f:b2:00:e6:88:52:ad:e4:66:d7:35:d4:b9:42:a8:42:ba:94:
         ad:a8:82:68:bb:6d:aa:bb:12:31:10:9d:cb:8f:87:2d:d2:07:
         e9:2e:4b:a8:c4:cf:b5:25:6e:2b:c1:1f:b1:36:fd:42:7a:69:
         0f:09:8f:d2:c3:c2:53:24:cc:d4:a1:4b:c9:0b:32:fe:e9:e0:
         c4:17:bc:13:b2:22:01:bb:26:7a:06:a3:88:02:7e:a2:3d:a0:
         35:f9:02:4f:ed:76:a3:8c:a1:0a:25:7c:06:77:82:a0:46:13:
         67:1a:82:a6:25:17:be:c7:89:2d:54:cb:40:e1:7e:95:80:34:
         f6:a8:34:ed:46:f5:7a:19:5e:d6:38:7c:09:2b:aa:32:70:36:
         0d:3c:eb:e2:28:44:7c:58:9a:fc:86:2f:84:e2:c2:e5:bb:1c:
         72:ca:1a:71:5d:b3:93:f1:67:78:94:06:09:8b:05:87:62:92:
         44:63:c7:32:ac:ed:a9:15:16:5c:af:32:69:66:02:b7:46:0f:
         98:b5:00:a6:13:55:92:51:55:e0:3d:7d:0d:0a:12:64:91:f7:
         60:c9:1e:6e:f9:b1:9b:34:89:71:bc:8e:c7:fa:49:95:5f:62:
         85:a8:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:30 2025 by rpki-client on console.sobornost.net