Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
File:                     16b192af-4e6b-3d27-84c1-f5a3af373424.roa (raw, json)
Hash identifier:          t3w9jkFq2Ls+KqWBJ55amberKoELV9D18J4qeuZarbU=
Subject key identifier:   05:78:DA:B4:18:24:07:D6:CB:A3:D2:51:1B:2C:49:87:4A:76:72:2D
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0D13E2F446364309C360
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     205272
IP address blocks:        161.69.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0d:13:e2:f4:46:36:43:09:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=ada598b5-b61b-4e62-96a6-2e3ae7f90184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:29:67:4f:06:9d:d7:43:4d:99:9d:c6:24:
                    55:ec:2b:3e:7c:87:e7:69:48:dd:91:52:86:46:1d:
                    d2:c1:0f:95:bd:32:96:fb:84:50:63:ba:23:0b:b4:
                    38:59:85:b4:3b:59:71:53:3a:d9:a6:46:99:05:6f:
                    fe:3b:93:30:9a:a4:b2:a3:78:0d:4b:f6:f7:fe:bd:
                    e2:b7:f2:f1:c8:c8:6f:55:ac:56:e6:ef:1d:87:6b:
                    9b:f6:0a:c8:67:b5:5d:d2:c8:ea:f7:56:66:af:e2:
                    79:59:2c:81:a7:e6:90:a9:81:67:e3:f3:55:c8:52:
                    0a:66:c6:17:62:ca:8f:59:38:6b:93:a0:71:ec:29:
                    7c:bd:5b:73:34:8c:77:8c:84:3b:e6:18:d2:64:47:
                    5a:a8:17:6c:e1:7b:88:f0:04:49:07:74:1e:66:5a:
                    22:88:ae:82:1f:8a:f4:1d:4e:66:59:cf:3b:51:bb:
                    4f:14:38:5b:dd:92:27:c6:73:51:40:7f:c2:f5:9a:
                    e9:13:60:32:f2:fe:2b:dc:e2:f7:7f:7a:b9:c4:4d:
                    bf:98:6a:5e:8e:75:e1:a1:8e:d0:26:aa:d8:d9:fe:
                    ce:9b:b5:ea:17:a5:af:f7:6e:37:d1:dc:f2:aa:cb:
                    10:4e:18:52:af:3d:e7:31:9a:00:aa:44:1c:73:9f:
                    58:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:78:DA:B4:18:24:07:D6:CB:A3:D2:51:1B:2C:49:87:4A:76:72:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/16b192af-4e6b-3d27-84c1-f5a3af373424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:00:f3:1f:d9:54:d1:cb:79:7a:1a:08:6b:af:c3:d4:aa:f8:
         4e:9e:36:fa:b2:ab:1a:60:92:70:ea:1a:0a:5a:da:d6:47:be:
         b3:83:d6:9d:b5:7e:cd:9e:e0:a1:94:32:20:96:13:49:b2:59:
         a4:da:14:1e:af:26:ca:b2:f2:f6:f7:af:25:e2:42:b3:2a:46:
         7e:40:1c:07:59:aa:63:c3:95:9b:4c:8b:2c:b2:a5:fb:01:d1:
         53:57:0a:bc:50:ee:ad:09:71:a1:8b:88:8f:9a:a2:1c:4e:24:
         ac:b1:e1:56:17:60:a4:53:40:42:a8:79:41:35:7d:95:9a:0c:
         20:6c:f4:56:87:42:9d:da:1b:66:84:e3:44:d8:73:43:ed:ab:
         33:65:11:f9:2a:7a:9d:9f:79:b3:d1:22:a8:55:35:8e:0d:0b:
         89:15:cc:80:0f:ee:c3:c3:3c:6a:3e:be:e5:c2:58:af:19:3b:
         5e:54:44:9c:9e:55:f9:09:e5:c9:08:f3:1a:5d:83:91:14:8a:
         84:5e:0b:33:c0:12:40:e7:6e:b1:82:25:45:09:67:df:8f:88:
         61:10:65:ce:45:7e:fa:5c:e4:b8:a5:aa:ef:db:c0:dc:29:e6:
         c7:be:b3:b2:34:59:44:eb:5f:ab:60:40:91:b1:b5:75:c4:47:
         84:17:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net