Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
File:                     bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa (raw, json)
Hash identifier:          WWqXf58RxOh/ZDT9yD2GONhSRSTPDwkF+1EytotrgWs=
Subject key identifier:   5F:6F:44:43:62:AE:3D:68:38:6D:24:43:06:2B:72:AA:4E:C7:D7:6C
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F43285849631EC06694FD14C8319E1080
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     16509
IP address blocks:        204.15.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c0:66:94:fd:14:c8:31:9e:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=ef41bf74-60b8-4ba2-a8a0-95863667421e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:2e:ad:8a:e9:f3:95:3a:e6:00:50:fc:31:
                    92:59:7e:69:e2:34:ec:46:12:3a:8d:1f:5a:46:f4:
                    55:fa:22:9a:8d:94:44:e3:3b:6c:24:8e:49:ac:54:
                    be:2f:02:bb:d3:31:d6:de:91:a8:4d:11:d7:2c:a6:
                    8b:1f:46:32:15:fa:15:bc:f0:8f:ac:13:b9:a0:9e:
                    1f:f7:e6:1a:14:60:b6:70:fc:6c:9f:73:f0:68:34:
                    5c:11:1e:26:fa:b4:45:cf:46:a7:ae:f3:c8:d9:16:
                    97:76:08:e9:76:0f:f9:75:9a:ae:dd:ce:9e:92:ac:
                    6d:5f:db:f1:49:63:1e:ff:9a:e7:77:be:ad:cb:30:
                    ea:e5:4c:1f:6d:68:c3:d7:53:94:e7:ee:95:c3:6e:
                    c1:e8:d5:f0:86:af:a2:c1:c3:fd:b8:70:56:8f:1b:
                    e1:c7:f4:08:34:36:36:0c:8b:b0:c6:27:d8:fa:80:
                    98:24:66:89:30:37:3d:76:82:d9:3d:8b:d1:68:4e:
                    0c:43:01:16:3e:a9:be:cf:3c:cf:02:fd:ea:6f:03:
                    1b:f6:b8:ba:28:75:7d:c0:cb:e6:4e:00:bf:85:12:
                    c4:aa:02:77:9e:d3:01:47:bb:9b:65:a2:00:39:3b:
                    b3:73:16:75:e2:ec:7e:da:c0:d4:3a:05:ea:44:b4:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6F:44:43:62:AE:3D:68:38:6D:24:43:06:2B:72:AA:4E:C7:D7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/bdb429c3-5b63-3cd4-a41d-c5f05b1e59aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0e:96:82:18:71:3b:e3:47:9e:42:01:1e:55:3d:85:d3:43:
         88:0c:5f:3f:c9:4c:f3:7b:a9:85:c5:02:35:40:dd:4b:26:4b:
         95:2a:7f:b9:e2:21:e8:36:d9:9c:47:b5:b2:50:17:c7:35:18:
         24:05:8a:d1:9c:8e:03:c6:5a:54:53:ec:a0:21:ef:70:c2:2e:
         e9:c3:fb:a3:49:65:15:21:a2:19:98:34:31:86:d2:cd:4f:85:
         16:ea:f6:06:2a:00:ad:11:e2:40:63:ce:cd:df:f2:67:2e:aa:
         0a:48:6c:5a:05:42:be:3d:bc:97:88:75:d2:2c:b3:e3:89:6a:
         c9:be:cc:ef:4a:26:e8:c9:13:0a:47:92:d3:f1:16:c7:5c:12:
         39:f3:f1:f6:7d:b9:3f:11:de:23:52:9b:8d:95:db:ed:f6:ca:
         36:7d:f1:55:53:a5:1b:39:3c:22:56:9e:ed:e9:20:f9:c4:4d:
         92:d2:8e:68:a5:5a:54:b0:32:67:0c:f7:6f:87:20:48:33:fd:
         cc:d8:c1:ad:ec:6a:18:bc:33:97:cc:57:e8:e0:e7:af:e5:18:
         64:c1:30:1d:e7:0b:92:98:28:b8:19:72:f5:cb:39:92:6b:92:
         c9:df:bf:08:7f:6b:16:2a:e3:57:e2:00:b2:d7:d3:e6:83:bc:
         c6:f7:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:58 2025 by rpki-client on console.sobornost.net