Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa
File:                     349473bf-2e3b-3135-9474-6245da8b2e08.roa (raw, json)
Hash identifier:          lxVdDDTbFo2bnMbwRroAqjBzrSuFBgPcz9xaJI+Nk3o=
Subject key identifier:   69:A9:18:88:D1:57:57:45:F1:FA:22:89:A7:BE:BC:BF:F0:41:0A:62
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858496FAF0D22ECBD52020E0E8540
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     20454
IP address blocks:        64.38.192.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:0d:22:ec:bd:52:02:0e:0e:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=e33e4095-8238-4355-9c64-019bfcb09c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:e3:a4:eb:01:0f:54:c5:0e:6d:de:b1:ac:
                    b9:c4:db:13:4b:14:cc:c1:f3:31:d7:3d:7c:84:8f:
                    d8:f5:e7:2b:27:0d:9c:ec:f4:2a:5f:80:a5:4d:78:
                    0d:3c:db:57:7f:80:60:4f:6b:00:33:1a:02:16:97:
                    30:e8:1b:88:dc:ed:e5:87:65:24:03:57:93:15:04:
                    c9:e4:da:db:f9:00:24:40:a5:67:63:58:06:db:2f:
                    8b:f5:42:79:30:8b:58:8d:0f:0d:31:aa:43:e2:0b:
                    18:72:4b:03:ec:23:a1:54:f7:a3:8d:d7:94:d6:fa:
                    09:0f:dc:5e:60:70:bf:23:3a:56:70:ca:9c:c7:21:
                    f4:56:c7:a2:d7:27:38:45:14:c2:08:eb:40:a1:0c:
                    09:b3:81:8b:2a:ef:9c:7c:9b:1f:81:4d:fc:8d:f1:
                    d8:8f:46:66:33:f8:55:98:e6:e9:df:f1:d3:24:b3:
                    60:90:1b:1d:08:ec:eb:14:c0:0e:66:7b:23:bb:ca:
                    80:3d:54:aa:de:84:71:90:85:a4:b7:ba:4e:68:0f:
                    77:f3:62:f8:c7:10:e9:8a:05:c5:02:15:41:34:3a:
                    cd:11:42:31:21:c3:5a:94:fb:43:f1:f7:bb:4d:98:
                    9b:a5:9b:50:18:3a:c1:22:18:e8:0b:94:4f:f4:a5:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:18:88:D1:57:57:45:F1:FA:22:89:A7:BE:BC:BF:F0:41:0A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/349473bf-2e3b-3135-9474-6245da8b2e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a0:b7:68:5b:4f:2c:42:ff:b3:19:1c:10:3f:36:fd:02:fc:
         64:0d:1a:aa:92:a9:39:d7:00:38:78:83:e0:29:88:ab:9f:92:
         01:e9:d8:18:13:50:b6:19:ee:97:2d:00:27:47:4f:04:b0:a2:
         24:ca:c3:d5:70:15:23:87:21:f9:83:9b:3a:01:87:d2:ae:38:
         39:11:97:e2:ca:39:fa:ef:0b:c4:1d:7b:e2:f9:f6:0a:0e:7a:
         51:84:6e:a5:d0:d2:5b:8e:42:e8:b3:06:ba:27:1b:06:d8:b0:
         59:3d:c0:e0:da:29:6c:89:71:f8:a8:39:d2:4a:58:f9:f0:52:
         dd:70:22:83:6d:5e:94:dc:41:1f:9d:0e:fd:8b:d2:66:d3:78:
         de:76:bb:67:a7:56:8a:f4:9a:dd:3a:20:a5:f3:c1:93:68:4e:
         e9:dd:66:f5:6f:67:34:35:15:80:90:2b:b6:f6:c9:e0:19:2e:
         98:93:4a:1f:d8:28:e9:e1:aa:24:6a:0a:a9:f8:0a:c5:8c:ec:
         2f:83:5b:a5:cc:09:f4:f0:2c:fd:9d:ad:7d:e9:94:e9:a6:35:
         c3:37:9a:84:03:0c:e7:b8:38:32:d3:92:2d:5b:1f:ca:a2:17:
         50:a3:28:b0:1b:10:71:38:d1:b0:9c:f4:11:86:e6:64:2e:f7:
         31:64:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net