Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa
File:                     79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa (raw, json)
Hash identifier:          tmzILFK1I8pLcjjGX4ND421oCXdl56PqjkFTM9mbit8=
Subject key identifier:   E4:57:AC:38:77:F2:BE:CD:60:4C:F2:32:B3:F1:E1:A9:FE:75:00:D8
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285849350E8183021BB51A455D9B80
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     10747
IP address blocks:        216.99.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:81:83:02:1b:b5:1a:45:5d:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=c44dd1c6-04e7-4eec-8c03-4f9b968dbc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:4f:05:95:cf:18:64:01:90:6a:95:c7:29:
                    2f:1d:df:39:e6:0f:02:ed:e4:5a:04:4f:97:3e:ee:
                    d1:28:36:de:7b:1d:d2:c3:59:58:35:de:ba:77:82:
                    39:ad:00:04:53:d3:3d:44:a1:53:d0:ce:09:f1:47:
                    9d:8e:75:cc:fa:bb:19:30:e0:ab:ab:92:39:f4:c9:
                    3c:30:2f:a6:e4:a2:1e:e9:25:7c:ef:39:54:2d:66:
                    9f:9c:44:77:2f:3a:05:f4:a9:f5:d5:bd:a5:a0:26:
                    f0:63:80:91:7f:e4:b1:17:b6:19:34:d4:48:53:b9:
                    66:d8:a8:ec:79:b1:20:75:98:e0:f1:81:d8:62:db:
                    e0:c8:1a:c1:da:aa:89:1f:92:7e:c4:30:91:7c:81:
                    54:1a:6b:d8:29:ca:4f:7e:f2:e2:8b:81:d4:34:5d:
                    49:4c:c4:05:77:66:04:04:99:15:4f:bd:8d:d1:92:
                    64:8c:fa:f0:bd:cd:45:4f:84:26:42:ad:0e:13:10:
                    43:d7:29:e5:7b:23:03:35:82:df:6d:1d:04:8a:4e:
                    98:ad:dc:69:fd:23:48:6e:f7:fe:0f:fc:fd:1d:e1:
                    55:32:50:72:38:7f:e1:3a:f5:3f:27:b4:44:09:b5:
                    03:23:e5:6a:27:81:bd:1e:ba:9d:06:96:4e:ff:17:
                    6e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:57:AC:38:77:F2:BE:CD:60:4C:F2:32:B3:F1:E1:A9:FE:75:00:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:63:16:ac:3a:ea:74:e4:7d:ab:1b:04:2c:56:2f:aa:b2:9e:
         7d:99:ed:62:ae:46:8f:ec:c1:0d:1a:14:9f:9b:5f:39:6f:16:
         e6:46:50:a6:39:74:5e:df:14:26:bd:14:64:b2:b3:a8:c5:00:
         19:49:61:41:24:7b:bc:21:32:e4:bd:07:dc:20:c0:8b:20:e6:
         92:9d:1b:b7:83:9a:b4:18:91:d2:72:a9:55:a3:f7:8b:3a:5e:
         2f:ce:f0:d7:93:2c:81:28:ef:63:45:db:09:56:07:c8:cf:7a:
         11:4c:74:f4:57:02:c9:73:d2:75:a3:36:67:92:67:1d:96:e9:
         f3:82:11:23:f6:bf:77:e7:66:6e:89:3e:9f:a5:e3:db:08:45:
         3f:46:9f:7c:cd:19:c5:89:29:6b:e0:e0:3b:96:cc:9f:e8:ec:
         19:a7:56:52:a4:e4:10:af:5b:cb:68:56:fb:fc:64:3c:55:96:
         17:16:12:d8:7f:2a:ec:88:85:47:2b:84:39:c4:62:31:d6:e6:
         b8:31:a5:99:ed:eb:a3:61:43:23:e0:82:3e:5b:4b:e4:6e:fc:
         5b:8e:59:2c:2c:6a:60:57:88:32:68:69:dd:7e:65:aa:fe:1e:
         53:f8:15:19:59:54:b7:ac:09:71:f8:85:99:47:20:24:e7:3a:
         43:e0:43:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net