Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
File:                     74f562d4-913b-3843-9e3d-f9f26ec3da09.roa (raw, json)
Hash identifier:          iSI5K1IiZ8PIsVfOp1rnIj+vBKU7ou6Jmsmbm9PQ/uY=
Subject key identifier:   86:C6:3E:1E:52:FE:AC:B8:25:3E:8E:37:F9:78:D5:64:36:DC:41:48
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F43285849648444AFCC7CF214C74B3680
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     26057
IP address blocks:        168.238.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:44:af:cc:7c:f2:14:c7:4b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=61f70c9d-4d17-4ed4-9b0d-d2220881dc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:34:96:ba:b6:f7:1e:15:c6:63:a8:ee:e7:56:
                    0c:c5:b5:ef:fb:d8:86:90:28:27:ce:39:85:c2:ab:
                    09:de:27:26:87:d2:99:e7:1d:3f:15:47:9e:f3:a2:
                    1e:1f:9b:fd:fc:18:45:b9:08:e4:2e:17:d1:ce:0f:
                    d0:33:99:96:d9:16:45:a6:ef:19:60:09:1d:36:d1:
                    02:8b:c2:f5:63:c3:ba:2d:bb:f4:0a:55:bd:4a:e7:
                    6a:07:82:3e:b6:c6:a4:63:a8:97:4e:f4:73:bd:a3:
                    11:30:28:0a:60:a4:3b:9d:a3:88:fd:de:4f:ae:04:
                    73:8e:1f:d8:4e:5e:d1:4a:8e:8f:e1:27:58:19:c4:
                    e7:8e:22:fb:8c:b9:2c:22:4e:ae:b3:ce:86:c7:02:
                    4b:25:57:c0:22:cc:0b:21:5d:71:87:87:2b:7e:da:
                    d4:74:c1:83:2c:dc:ac:35:cc:27:86:79:ae:64:a5:
                    bd:3c:18:e7:9b:9d:92:28:61:13:7e:e8:52:6b:22:
                    e0:e9:4f:87:1c:df:16:c0:73:f2:1a:ec:59:d9:55:
                    2e:4e:74:3f:64:7e:ed:2f:1c:a4:d7:f3:1d:62:96:
                    ce:c6:55:3d:31:9f:c6:da:e8:82:4e:00:21:0f:82:
                    2e:15:ac:9c:c0:69:d3:63:09:fb:0e:0b:fa:8e:c8:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C6:3E:1E:52:FE:AC:B8:25:3E:8E:37:F9:78:D5:64:36:DC:41:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/74f562d4-913b-3843-9e3d-f9f26ec3da09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:ed:b8:d8:78:5b:de:a0:a1:af:41:88:c8:40:08:14:b3:
         6c:89:aa:66:b2:e5:bc:2e:00:27:cb:79:b7:28:39:44:6a:9f:
         cc:7e:de:04:ac:17:5e:44:f8:dd:2a:96:a4:2a:56:cc:8c:d4:
         c1:73:87:97:db:e0:5d:3a:75:6b:08:50:07:06:14:d5:cc:56:
         2e:30:5b:b3:c3:05:99:30:3f:92:d7:3a:73:21:0f:bf:ea:90:
         0b:23:c0:cc:66:17:68:3a:75:50:76:ec:f0:67:f8:0e:65:e8:
         63:ca:06:a4:ee:8b:05:ea:78:69:4a:df:07:2c:02:65:41:eb:
         df:32:0c:b6:40:d1:3d:cc:27:10:2b:f0:63:72:67:c5:fc:84:
         ed:fb:d2:df:79:f6:a0:75:3d:44:2a:16:f9:78:53:bd:8b:5b:
         7b:cf:e0:89:6d:ad:dd:fe:db:b6:9c:c3:1b:8c:44:af:d7:e0:
         ce:b2:ff:f6:69:a0:a8:39:ae:50:67:e0:55:0a:92:4b:59:e5:
         aa:86:8a:f0:4e:60:5f:ad:3a:e6:9b:8e:20:ff:64:12:02:f6:
         d1:51:34:e4:c3:29:b1:f5:d0:f7:df:00:a3:41:3e:45:36:fb:
         92:17:35:19:5d:c1:da:4d:de:a5:e5:13:fa:14:1a:ce:18:25:
         88:08:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:54 2025 by rpki-client on console.sobornost.net