Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa
File:                     9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa (raw, json)
Hash identifier:          UvfUFwDgIzdLbQYWPDSYGO8xpgwzWF8w0hFrLHKcm8E=
Subject key identifier:   F3:8E:A1:F6:BB:22:14:22:84:D5:41:D7:26:CA:69:8D:71:66:D3:19
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584929E3C650DB97EC48144A8C40
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     53355
IP address blocks:        198.150.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:c6:50:db:97:ec:48:14:4a:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=62dca3fc-9ab5-43a1-a015-460f2c5481b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:89:1d:19:4f:07:71:f3:41:47:bb:df:c7:
                    b0:b7:9a:66:df:b0:ff:a3:2e:c8:eb:3a:9a:53:f9:
                    0d:99:11:0a:ec:18:99:ef:af:10:d9:7e:f7:a1:41:
                    1c:23:fa:7c:8b:62:47:cf:92:b1:1b:b5:6c:83:e3:
                    46:3c:02:e8:ab:44:d9:99:5f:6e:27:95:d9:a8:d5:
                    eb:57:03:72:23:2b:64:ab:5a:d4:63:61:66:88:c0:
                    93:28:20:7a:03:f7:dc:0e:b7:76:af:8c:0e:0c:db:
                    e0:ad:78:61:35:53:d9:e4:d8:29:ce:d2:a3:01:37:
                    e3:6f:31:e8:c0:67:9c:84:ff:a8:07:0d:d7:8d:59:
                    2c:10:97:1b:d1:c3:d3:17:d0:5b:78:85:e4:25:96:
                    21:ef:14:03:9c:75:63:fa:72:cb:cc:ac:61:96:8e:
                    d8:80:b1:2c:82:25:bc:fd:a5:c2:1f:66:81:dd:59:
                    1d:1f:2f:a6:9b:e6:1e:e8:8e:6c:97:2d:ab:83:71:
                    0a:6f:bf:0f:86:ce:c4:5f:54:41:6a:ef:19:a9:43:
                    7c:9e:7d:f9:c9:96:4e:3a:27:0d:d0:f8:16:7a:fa:
                    0f:de:64:b7:db:40:11:73:ab:14:de:17:16:db:6b:
                    1d:3c:c7:1c:5b:d5:7b:ef:91:a9:2e:cc:45:e9:44:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8E:A1:F6:BB:22:14:22:84:D5:41:D7:26:CA:69:8D:71:66:D3:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/9a694b3f-d924-3c7e-a673-dcb7c5cdf586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:5e:7c:66:8e:ce:cc:2c:ad:1d:c9:d9:18:3e:57:4f:cb:
         2a:01:af:85:29:00:65:a1:6a:f7:00:e5:5e:fe:f6:d1:9a:9b:
         f9:0e:f5:89:7e:73:fa:17:b0:c8:ca:90:bf:0c:50:97:3d:06:
         db:85:68:ca:37:35:47:ca:0e:b4:92:53:1f:b3:0b:fb:53:e5:
         23:0e:c0:e9:ff:07:47:36:fd:32:e4:0b:b3:12:6f:fb:5b:fb:
         ed:5c:03:c0:1f:f6:e6:59:d1:22:91:72:4b:c6:3d:fd:af:d9:
         5f:d0:d1:00:16:29:2f:35:06:36:89:68:5e:47:06:6f:c4:ce:
         25:d3:8e:17:ab:d7:ce:66:bc:6a:a5:f1:5e:6a:41:33:09:63:
         26:3d:47:54:64:34:7c:c7:4d:b0:f3:f6:f4:e8:fb:da:09:91:
         ab:4a:a3:43:4d:63:9e:03:44:59:25:36:b3:53:0d:bb:61:d2:
         7e:a1:af:fe:4d:35:f4:99:ab:c2:20:fe:ac:62:39:23:c3:36:
         fd:f6:53:c2:71:c9:28:26:90:26:c7:5a:22:e6:a6:b0:66:dc:
         b5:ab:c7:c1:fc:75:b8:b4:8f:7d:80:83:29:38:fc:2e:de:c9:
         f8:70:95:6b:01:12:42:14:35:26:53:b7:76:c8:37:7e:22:a6:
         e1:01:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net