Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa
File:                     f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa (raw, json)
Hash identifier:          nwJ1xFgcdNDm3nDdNbLTf4Ki1dbnihpa4nzNE5htuUg=
Subject key identifier:   F8:95:A9:C8:40:96:CF:62:2F:D2:02:F9:F5:4E:39:80:CB:83:DB:6A
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858497BC989564B3A556501E5D580
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa
Signing time:             Thu 10 Apr 2025 21:04:19 +0000
ROA not before:           Thu 10 Apr 2025 21:04:19 +0000
ROA not after:            Wed 09 Jul 2025 21:04:19 +0000
asID:                     16509
IP address blocks:        208.83.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:c9:89:56:4b:3a:55:65:01:e5:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr 10 21:04:19 2025 GMT
            Not After : Jul  9 21:04:19 2025 GMT
        Subject: CN=ca778e9c-6ba6-4aa7-a48f-27b744b69ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2e:4f:89:ad:f2:2a:21:0c:f4:f7:fe:02:ee:
                    11:d2:f1:30:9a:ef:0e:a8:90:ae:05:7f:4d:0f:c1:
                    6a:64:c6:0e:da:4b:78:45:e9:c6:86:1a:ce:6f:9f:
                    f2:af:c2:59:b9:77:fc:01:68:34:69:69:3e:e0:7d:
                    af:2c:8d:08:78:f7:02:76:87:33:b8:0e:77:b3:e9:
                    4f:4d:04:51:11:5d:36:6d:c9:35:44:e9:ca:e9:ef:
                    ce:a8:9a:bd:88:f7:4f:f1:18:cf:cb:b5:0a:24:f2:
                    fb:2b:a4:0b:0c:71:50:8b:56:9e:6e:a0:eb:dd:54:
                    94:a3:60:74:4a:a2:c1:ee:56:2c:f6:39:ef:f5:3f:
                    89:8b:82:f4:ec:99:8a:08:73:c5:56:23:46:71:f2:
                    ae:7a:fb:3b:a9:26:ce:0f:3a:8c:5d:99:b2:4f:b9:
                    ef:51:b3:18:73:03:57:5c:28:05:42:ff:15:ea:47:
                    7f:1c:9d:90:04:9a:16:e0:25:5a:42:cf:2f:1e:d4:
                    9d:eb:b4:7c:d6:01:92:12:ee:1b:a5:7d:73:e2:a5:
                    8e:82:7c:b6:fa:49:e0:03:c5:dd:d0:69:81:cd:02:
                    bb:7c:4a:71:c2:35:bf:bc:f2:cc:b6:c6:45:6a:4f:
                    dd:f5:e8:9f:4b:1c:7c:b7:88:ae:e4:c1:a4:71:a7:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:95:A9:C8:40:96:CF:62:2F:D2:02:F9:F5:4E:39:80:CB:83:DB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:c8:0d:b7:56:b3:b1:28:d8:c3:1d:fc:a7:1b:78:1f:f9:
         48:f7:01:81:44:57:3d:fb:85:a4:26:f3:ec:22:61:a9:72:05:
         33:9b:42:a0:36:c2:d0:f6:60:c9:8c:af:35:05:c9:79:61:1a:
         fd:7f:88:53:52:74:6b:03:7c:f1:cf:46:c2:43:96:8f:e8:88:
         fe:d2:38:43:49:cd:1f:29:2a:52:d2:58:e4:19:2e:79:82:a6:
         b4:df:9c:61:5c:0a:a2:dc:b3:c2:82:77:ad:0f:56:f5:e2:d2:
         23:f9:25:3e:39:e9:80:f4:7c:cc:8c:a8:b4:69:09:e8:5d:58:
         3f:19:c3:b4:04:d5:48:85:fd:1e:e0:46:b9:4e:e7:52:69:72:
         92:30:d6:9f:20:81:02:2e:f5:c6:c4:f8:7d:20:88:c7:19:b4:
         99:f2:54:d9:d6:53:fa:7b:fd:ba:4a:98:06:b0:8f:ca:37:75:
         d0:19:9c:4b:b9:89:5d:7e:cb:56:60:c0:f2:33:8b:ee:cd:bc:
         3d:56:51:50:a5:3b:a3:ad:90:ba:32:9b:d1:e2:58:a5:a8:69:
         5b:fb:c9:0b:01:8b:83:d1:a6:b9:a7:e4:58:f8:49:e5:1e:a7:
         76:f9:6e:a0:e2:4f:71:58:57:18:74:50:eb:c6:b4:37:96:bf:
         76:2d:30:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net