Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa
File:                     13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa (raw, json)
Hash identifier:          4Wdr7WH7SUWDJWh4WYC7RqoOnKFJu3KxvTy77GfbaqE=
Subject key identifier:   3C:52:0C:2E:4E:F4:B3:55:64:E7:18:4E:59:3F:1D:39:26:27:44:91
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848FEF2D3EF67368A11AF554D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa
Signing time:             Tue 25 Feb 2025 03:51:29 +0000
ROA not before:           Tue 25 Feb 2025 03:51:29 +0000
ROA not after:            Mon 26 May 2025 02:51:29 +0000
asID:                     11427
IP address blocks:        68.182.212.0/22 maxlen: 22
                          68.182.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fe:f2:d3:ef:67:36:8a:11:af:55:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 25 03:51:29 2025 GMT
            Not After : May 26 02:51:29 2025 GMT
        Subject: CN=83c5799d-5683-408c-a552-b2619f236069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:7c:1e:6e:d6:a1:3c:22:74:a5:09:a6:ef:
                    88:2f:2c:84:47:8e:32:4b:d8:71:93:35:bc:a0:fa:
                    dd:c4:1b:aa:f5:e8:cc:f6:60:39:06:c6:55:5b:f8:
                    88:b9:26:88:7f:85:ea:d3:69:46:14:e0:87:ba:5c:
                    0b:cc:b6:7a:2d:b4:df:7d:b8:a5:20:dd:84:78:81:
                    d5:8e:8f:b9:c3:e8:80:ba:05:c3:b0:17:31:98:f3:
                    f4:67:f5:13:cf:40:1d:b3:7d:9e:8d:1a:72:fe:3f:
                    ba:a7:0b:5b:61:95:e7:da:0a:fd:1f:8d:0f:48:d0:
                    ac:22:76:51:fa:04:51:ff:85:7e:d7:31:50:04:88:
                    e7:75:75:e9:7c:c3:8a:3a:8b:fb:ff:b0:62:4b:35:
                    61:9b:62:6e:ed:cc:9b:de:74:15:93:47:dd:4e:6b:
                    10:c5:08:77:4c:03:f0:e6:d0:78:52:42:cd:8a:d1:
                    3b:fe:a4:84:eb:b8:fe:f9:a1:94:fa:f5:c2:f3:20:
                    ae:83:cc:40:3e:4a:21:cf:21:1f:9a:81:01:8e:13:
                    f8:78:e4:3d:ae:13:03:23:a0:06:45:ef:7b:b9:4b:
                    9d:0f:39:5a:0f:e7:c5:e2:19:76:48:ca:e6:35:49:
                    78:4f:1b:84:4f:66:c7:92:c4:ae:32:f7:a7:58:a1:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:0C:2E:4E:F4:B3:55:64:E7:18:4E:59:3F:1D:39:26:27:44:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/13a6c437-e459-3c05-b3ed-0fe52cee8e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.212.0-68.182.219.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:9b:d7:e8:f3:c7:2a:a2:2d:64:4c:2d:c4:c9:e9:78:ae:a7:
         a6:18:8c:f5:26:13:31:55:34:93:3c:1a:bd:f4:51:9f:e0:af:
         42:c8:64:b5:ab:79:22:f4:31:6d:db:41:2d:e3:e3:6c:73:ae:
         c5:31:a2:94:a5:e2:1b:11:47:2d:fd:12:6c:1e:1e:cb:1d:80:
         e7:b0:c1:ad:38:5c:fb:43:6a:83:15:f2:0e:73:a7:bb:b5:8a:
         fc:d1:59:b0:1d:c4:a4:ae:67:74:31:e3:06:d0:90:5c:08:b1:
         ec:b1:39:db:70:cd:33:2a:2a:1b:54:68:ee:2f:45:15:bb:fc:
         18:cb:10:78:ce:54:6c:41:a3:1b:c3:30:04:5a:c2:33:17:69:
         2d:28:71:a2:3a:f2:88:4d:d1:4e:10:34:c0:6c:a8:12:08:15:
         f7:83:bc:f3:8f:19:8b:44:f8:6f:73:b7:4c:a9:e0:0d:00:1f:
         45:74:61:dd:a1:37:be:22:6b:e1:f2:77:89:c5:dc:dc:78:a2:
         80:37:fa:0f:44:e4:9a:71:cc:a8:88:f7:27:b0:2b:dd:9c:83:
         b4:24:5a:5e:8b:d0:27:d5:4b:d2:1a:1d:7f:e1:1d:0c:b8:55:
         b5:e9:6c:bf:77:21:45:28:21:09:80:32:2e:b5:b2:c2:be:ce:
         66:39:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:41 2025 by rpki-client on console.sobornost.net