Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa
File:                     6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa (raw, json)
Hash identifier:          QlJPCQC2g+qGkKZ8Ff9m3pNRTaH50NxZ4SkJJg4OV8k=
Subject key identifier:   6E:44:FF:A5:BB:58:B9:DD:6E:55:81:D1:5B:87:C9:36:75:DF:47:DC
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0D3835F1F4C0829E6320
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     203724
IP address blocks:        161.69.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0d:38:35:f1:f4:c0:82:9e:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=2bc569df-de07-41ba-8810-143c45441f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:07:dc:13:35:69:58:2d:5d:a0:2d:1e:b8:
                    78:d1:34:0a:dc:a0:d3:23:b3:d9:7a:7f:60:d7:cf:
                    8d:90:6e:3f:5d:59:2f:2a:4d:01:36:25:d1:cd:79:
                    7d:49:ca:5c:3e:fa:f9:e6:a6:18:75:60:a7:20:aa:
                    bb:89:a9:55:52:2a:ae:6c:51:13:6a:84:3b:39:9b:
                    df:e0:a7:2d:f3:f3:b9:36:e2:89:00:ea:dd:8e:5c:
                    6a:5e:6c:d0:ae:7b:9d:e3:40:03:b7:8c:3d:ee:d2:
                    d9:91:00:1d:b5:3a:2f:eb:f3:cb:fd:93:36:54:e0:
                    06:2b:bc:4c:4f:5a:6e:35:3c:d3:d7:4c:07:48:cd:
                    27:23:77:4f:48:a3:36:29:e5:e6:a7:47:b0:30:6a:
                    3f:24:f5:7e:e7:09:95:1e:9e:dd:9e:06:56:11:7c:
                    d1:82:2f:56:5d:65:54:63:3c:85:63:0f:99:57:46:
                    27:dd:a8:b6:d4:0a:eb:cf:25:fa:f2:9f:6f:11:c8:
                    b7:cd:c4:c1:90:63:38:c3:3c:62:8a:56:fd:c6:6f:
                    b3:18:aa:76:62:94:91:35:9d:b8:19:af:4b:83:90:
                    17:b6:24:d2:32:65:42:cd:25:3f:00:a1:f1:8c:d4:
                    32:5e:63:1a:41:4a:b5:61:57:bd:bd:7a:e5:22:ca:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:44:FF:A5:BB:58:B9:DD:6E:55:81:D1:5B:87:C9:36:75:DF:47:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/6dc95a7c-1546-3fd4-887b-7ca1e12a8aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:ab:ef:6e:d2:20:a7:29:b1:28:e8:e5:27:2d:4a:bd:97:
         1c:4f:48:a0:56:79:35:8a:d8:cd:05:f0:f1:55:48:d5:e2:25:
         3c:77:3a:b0:36:7e:90:bd:33:f7:f8:9a:a5:6e:12:05:73:b8:
         e4:57:40:a8:74:81:0a:61:a9:b4:bb:2e:22:2c:5b:e0:c9:f4:
         b1:74:ce:c3:76:64:8e:d0:80:21:4c:bb:42:6d:61:23:ee:d4:
         9d:9e:bd:d7:58:09:98:ac:3d:69:bf:75:a3:6f:ef:14:66:de:
         d9:3a:cb:d5:83:b3:68:44:58:b5:ba:9c:16:09:1e:c9:93:eb:
         94:05:e1:b3:d3:34:ff:3e:7c:a7:79:dc:c0:29:b9:a3:c5:d4:
         21:8b:08:df:cb:99:f8:3c:7a:b7:31:09:11:eb:76:03:c0:26:
         ab:8a:62:74:76:79:eb:13:3d:00:74:ff:a5:54:3f:89:fd:f9:
         7d:61:6b:47:44:71:8a:37:8e:cd:01:b3:f2:c5:a9:1d:e6:48:
         62:9d:73:f9:c4:fc:6c:fe:ca:05:94:b9:d6:0f:2e:6e:51:1c:
         f8:c9:9a:3b:ab:ea:28:c8:af:11:59:3d:b2:c5:d4:0f:f3:aa:
         cd:96:65:23:39:b2:2e:a2:01:b2:96:cb:43:92:59:fe:4e:05:
         fb:3e:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net