Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa
File:                     90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa (raw, json)
Hash identifier:          /KmkwsayF+ZXcOV3Lvez7CkrOFKB5PZ9H4hhybxdXyE=
Subject key identifier:   10:52:66:8C:80:15:89:13:AB:9B:01:1D:0B:3A:5F:34:D7:74:9C:FC
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584961B9A39A72C71E2D44154E00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     1239
IP address blocks:        64.40.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:a3:9a:72:c7:1e:2d:44:15:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=8ba3cb9e-1fc9-4090-a12a-32bea5a1de7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:72:b9:21:c7:9f:65:55:b1:f7:35:57:57:
                    2f:f4:f6:63:19:ee:4e:bc:52:6e:f9:92:21:8c:80:
                    16:a7:ac:d5:fa:ed:ac:41:85:88:fa:a2:12:d3:b1:
                    08:a7:5b:42:66:05:e1:75:7f:59:18:6d:8d:9d:10:
                    29:95:a9:ab:57:0d:c9:a1:76:dd:e6:45:ee:9b:b9:
                    84:df:9d:e7:71:bb:77:45:41:13:72:b9:40:ec:0c:
                    d7:4f:e7:7f:50:48:18:db:38:5e:68:01:27:30:83:
                    7b:c9:35:5e:8a:fb:0e:0b:82:86:11:6b:42:4b:0d:
                    7b:63:f1:0a:ca:65:43:73:eb:43:cf:dc:4e:1e:45:
                    fe:6e:86:d7:e6:49:d8:82:07:6b:07:3b:2a:43:4d:
                    d0:b5:9f:25:af:d3:af:3b:47:ed:20:3f:2c:8b:90:
                    7a:28:a7:bc:2a:6d:df:d5:32:25:a5:65:0f:26:e0:
                    ad:e0:c9:0c:2a:64:1c:e3:99:b7:bf:98:51:d8:ae:
                    7d:94:f5:63:59:6a:56:34:a1:04:79:d3:98:d5:f9:
                    70:10:5b:86:93:59:ab:b3:cd:6a:c2:ad:9a:80:01:
                    99:aa:0c:de:62:6d:8f:26:ad:32:7b:d9:dc:9d:8a:
                    49:4d:2b:bb:23:23:e3:7d:2c:e8:28:15:3f:a7:b4:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:66:8C:80:15:89:13:AB:9B:01:1D:0B:3A:5F:34:D7:74:9C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90baf39c-08b6-3fcd-9def-6e8d976d4dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f6:de:b5:c5:2d:b4:83:56:9c:08:5d:00:cf:d2:f8:78:5f:
         cd:10:27:74:41:38:b0:7a:60:d9:96:28:dc:5f:4b:d4:cf:48:
         07:e2:60:4c:f8:12:54:51:9e:84:70:ac:bd:68:05:d4:39:1e:
         37:18:56:c8:53:46:c1:64:60:83:4c:55:bc:17:3a:fb:1f:47:
         ce:a8:63:9d:fc:b7:11:79:5d:42:21:25:3d:63:80:4e:68:9a:
         7c:17:52:fc:2c:0c:a0:82:e7:a0:2e:d6:9b:d6:6d:48:9d:f1:
         f2:cb:52:94:a0:4c:3f:eb:5c:8c:93:c9:77:d1:5f:b2:d2:de:
         3d:b4:32:b6:40:e1:0e:95:d2:bb:00:95:95:3f:cf:c9:e6:6b:
         c8:64:01:dd:3a:8b:eb:21:3e:1a:f9:87:01:e6:8f:90:f7:df:
         14:22:77:44:5e:46:05:3f:31:de:1f:da:ca:4c:73:23:dd:a2:
         59:05:28:1d:6c:c8:fa:f6:7d:c8:5f:40:08:26:f0:6f:d9:27:
         a9:c8:07:50:9a:ce:c5:18:30:21:95:d6:67:bd:b5:e2:27:ef:
         ca:38:ff:d7:d5:6b:ed:8f:22:99:57:73:d6:13:d8:22:77:c1:
         61:1f:13:ae:54:80:ab:b3:a9:ec:37:0a:12:e9:2c:fe:80:cf:
         ab:41:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:49 2025 by rpki-client on console.sobornost.net