Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa
File:                     4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa (raw, json)
Hash identifier:          vfozmcCfewOxOwkaKLNvjTJdf/LtkD5ZjmVAb0bC1vg=
Subject key identifier:   F0:97:FC:C0:3A:6D:38:D3:F3:D1:F9:EC:F3:BF:C2:9F:96:C4:2B:96
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849631EC57E5D9E7793A4346B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     3356
IP address blocks:        170.30.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c5:7e:5d:9e:77:93:a4:34:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=20fa4899-6e80-44d9-86b5-0586bb50ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:74:21:ef:fe:09:9a:89:5a:12:ff:d8:8d:
                    7e:c8:94:f0:9a:dc:8d:00:f0:ab:11:47:34:8d:4b:
                    84:31:54:6c:0b:fe:69:ee:e0:ce:9e:c5:cf:67:9d:
                    2b:b7:17:0f:0c:45:65:22:f2:70:46:bb:54:06:8f:
                    04:f1:65:fd:bc:9c:cb:56:06:a2:e4:56:b8:f4:9f:
                    ef:ac:a8:a4:08:07:b8:20:69:56:8d:34:16:5e:db:
                    b5:3e:07:24:b5:3c:b4:a2:76:73:1a:c9:b6:9a:e5:
                    42:08:5f:79:5d:55:72:0f:d4:9d:5b:76:f2:30:a5:
                    64:9f:02:4d:a6:4b:3c:a4:66:f2:26:8b:b5:18:97:
                    66:73:ca:de:9d:72:50:fe:62:e1:dc:48:71:2f:47:
                    c0:0c:6e:83:f8:5f:31:3d:5e:65:77:d1:43:24:76:
                    7c:be:67:e0:c1:fb:b9:96:9a:19:36:14:aa:17:02:
                    f2:2d:10:27:e1:03:67:92:51:d2:5f:1b:b6:a5:b2:
                    d1:4b:54:b5:59:c0:d9:b0:57:17:3e:e1:7e:08:dc:
                    96:2e:4d:ae:6b:8a:85:13:c4:26:c0:34:6f:25:99:
                    96:69:c0:87:c3:2d:52:5d:3f:eb:23:64:3a:d3:75:
                    ad:1b:f1:9b:cc:df:48:34:db:d9:4c:e2:fa:9f:54:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:FC:C0:3A:6D:38:D3:F3:D1:F9:EC:F3:BF:C2:9F:96:C4:2B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4dc30221-0ad1-3bd7-9fd2-3843cef193d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.30.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:bd:75:97:47:11:25:ee:6e:7f:2d:9e:bc:28:39:80:84:
         12:8c:08:ab:a1:db:2c:af:ed:ec:7a:6a:b0:87:ad:6e:06:6f:
         fb:18:a7:f3:56:ee:9e:c2:f4:ac:37:2b:78:00:ab:9c:c4:92:
         cb:c9:a7:fd:86:da:0e:10:92:21:e4:13:7a:7e:ab:b1:de:85:
         33:bf:cd:11:f1:73:62:c5:5d:55:11:cf:89:d0:4f:af:1c:36:
         cd:e6:13:b4:c0:6a:82:9f:e5:6d:7b:a0:ff:70:82:6e:dd:ef:
         38:97:1f:2f:7d:f7:4e:da:bc:42:0a:0d:bd:7a:6f:c6:7b:98:
         e6:b7:61:ab:8b:6b:be:9e:2f:d8:b9:96:ef:0d:99:80:fb:93:
         be:0e:de:2d:96:91:00:d7:5c:8c:6a:62:5e:74:cc:68:f7:e1:
         d2:90:18:d5:d0:12:6c:8c:11:a9:15:5a:a8:e6:4c:12:37:72:
         07:69:6f:5f:dc:18:6a:2d:71:5c:12:d0:b9:45:7a:f4:e5:74:
         a4:cf:ae:88:13:3c:fc:88:8e:76:e1:2b:3b:42:04:81:e3:ce:
         4f:d8:1c:f1:80:c5:46:03:b4:77:a0:7e:8c:59:58:d8:d0:23:
         bf:4d:0d:3b:f9:fc:f3:ad:ff:65:62:35:4e:8f:85:61:95:b3:
         ac:86:27:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:01 2025 by rpki-client on console.sobornost.net