Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa
File:                     4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa (raw, json)
Hash identifier:          xu1N9aCgY2xlGLMulKYIDX8dEVWF+jfGn/3OhNXupjk=
Subject key identifier:   92:11:0E:B1:CE:28:67:2F:02:E0:FF:C1:3E:31:DF:89:A4:7D:D7:8B
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584981D455668E6BE0A682F20BC0
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     398391
IP address blocks:        131.226.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:55:66:8e:6b:e0:a6:82:f2:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=c78d3a3c-c88d-4da0-9853-624cd9ded2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:93:3a:15:60:c3:cc:33:ca:c4:33:06:4a:
                    25:d2:de:2d:3f:65:0b:d2:bb:64:5f:12:98:b6:d1:
                    19:a8:e6:c4:b7:7e:5e:6c:e7:16:9c:24:87:46:a9:
                    1a:03:7c:61:38:96:36:f5:5e:af:89:e1:22:da:22:
                    58:74:9a:04:50:6f:26:38:a9:48:2e:33:0a:b0:3c:
                    91:fa:5f:f7:29:e3:24:10:87:0e:e6:ba:49:cd:cf:
                    f5:7d:72:b7:06:45:bc:62:06:22:9f:da:32:64:dc:
                    e3:6d:47:60:88:99:a5:a7:15:10:da:44:80:2d:a8:
                    f6:fa:38:a9:fb:71:30:de:2a:27:68:d3:69:82:dc:
                    47:61:ec:28:b5:b7:e4:01:55:54:c2:d1:13:14:89:
                    13:a2:80:e7:66:02:f9:1f:cf:15:c1:1f:21:21:1b:
                    35:c2:99:b1:f6:85:3a:19:70:24:74:79:cd:2d:c7:
                    d1:b3:a6:6f:ec:d4:f4:26:b2:e0:b8:e8:07:8b:62:
                    11:60:dc:74:b2:ce:af:33:00:cd:70:03:13:7e:b0:
                    12:e1:79:29:ec:b9:91:df:21:cc:8f:bd:b2:52:a2:
                    bd:bd:3c:4b:9b:fa:16:98:c8:44:58:59:7d:14:3c:
                    23:fb:55:9d:58:59:e4:f7:5e:29:f3:c6:fb:a2:d6:
                    d6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:0E:B1:CE:28:67:2F:02:E0:FF:C1:3E:31:DF:89:A4:7D:D7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/4ccb9949-5a31-35f0-b5e1-438d98f96cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:80:37:09:e5:a6:a0:d1:71:9e:b9:07:0e:27:56:50:d0:53:
         64:1b:ae:1b:20:78:cf:0c:5c:3b:6e:15:f6:71:8d:9c:ee:bb:
         92:6a:54:bf:77:d2:82:8d:99:02:9f:27:fa:1b:c5:da:5f:0b:
         1d:aa:60:f1:7b:fe:11:86:eb:be:54:68:8f:a4:86:0b:f7:db:
         cf:5a:09:70:ac:a5:6e:c9:07:06:fb:fa:35:c7:ae:41:f9:53:
         22:be:f0:df:b9:a8:07:75:66:ff:1e:18:ee:aa:05:05:2f:fc:
         00:dc:2a:6c:73:f9:6c:e4:71:5a:9d:40:fc:a0:a7:1c:b4:8b:
         50:23:33:b7:10:6a:9c:c3:72:7b:d5:1a:27:fc:5e:50:2d:b0:
         79:70:71:94:d0:c4:dc:3c:e0:0a:d5:65:b1:ea:0f:8d:94:86:
         7d:8b:e4:aa:6d:b6:74:b1:cd:a7:4c:07:fa:5f:b3:1c:f1:17:
         cc:47:1e:37:f4:9f:ca:48:2d:f7:7b:50:d9:4b:d1:b7:3b:6a:
         c8:dc:74:01:4a:52:fa:31:fc:30:5e:56:b2:1a:5e:38:ad:fd:
         b5:fb:ba:ce:66:53:c6:18:27:3c:2c:0f:3c:c9:55:33:3e:55:
         71:94:0c:97:22:e8:32:72:53:fb:28:bb:cf:63:28:55:98:75:
         e9:20:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:48 2025 by rpki-client on console.sobornost.net