Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa
File:                     f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (raw, json)
Hash identifier:          AOP808W24KRC/Jl2BPIwAN5q+uVEk0l6ttJug9a5gys=
Subject key identifier:   21:64:7B:37:47:A1:19:7B:33:B5:41:18:E5:BE:1D:79:73:5E:57:1D
Certificate issuer:       /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe
Certificate serial:       010D0C9F4328584973DEE798A83314DB258F2680
Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     54542
IP address blocks:        148.59.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e7:98:a8:33:14:db:25:8f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=94539d73-329d-4d81-96a8-6f28bfea2350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:dc:f3:79:88:26:49:46:bd:b3:9c:43:68:
                    9e:96:27:68:f4:7f:f9:f1:0f:f4:34:e8:16:43:a3:
                    08:51:c2:cd:83:dd:b8:91:d3:f7:24:b1:8e:7f:b5:
                    a1:56:78:f5:7c:fe:51:80:b3:27:94:fe:c2:83:09:
                    ce:78:b5:a3:b4:5e:02:4a:20:5d:11:2d:6f:8c:65:
                    b0:71:6d:5a:21:e5:eb:20:5b:4e:47:ec:0c:c2:b9:
                    e0:de:38:fa:c4:b2:70:07:48:ef:08:24:40:2a:35:
                    69:a8:c0:b7:19:2b:4d:e8:98:44:65:a5:c3:30:65:
                    f3:c7:5f:f8:b4:e2:0e:b4:11:77:bc:50:df:6b:ee:
                    da:4b:55:5e:4a:e0:58:f4:9b:ab:08:b6:49:17:7d:
                    c2:07:07:af:4b:58:9e:55:10:c8:8f:4c:42:f1:ec:
                    05:82:79:7c:91:31:92:39:4a:d4:a1:2c:2d:f9:cf:
                    96:36:93:40:c1:9f:89:e0:0d:19:d1:b5:82:b6:10:
                    ef:35:63:e8:46:17:de:da:18:3b:73:49:b6:17:e8:
                    00:d5:1b:2d:0e:88:be:14:3d:dc:85:64:6c:c2:e8:
                    a3:e2:3b:3d:06:88:2d:3a:ce:d6:2e:4d:99:20:80:
                    3a:61:3b:7d:d7:52:79:6b:e1:91:58:d2:46:07:2d:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:7B:37:47:A1:19:7B:33:B5:41:18:E5:BE:1D:79:73:5E:57:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/f2fcc349-624c-38b7-88a5-9fee47bc052d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:a3:e6:6d:5b:ae:61:60:e7:4d:48:af:50:5c:a8:d3:e4:b1:
         cc:5d:4e:bc:ec:61:ec:c1:e2:96:48:fb:0d:83:ef:ee:7b:09:
         07:c1:7b:33:45:ac:fa:73:db:23:47:e5:b8:01:1a:ef:ee:57:
         69:d5:d3:88:5b:02:e7:c4:55:5d:83:5d:6c:ae:4b:f0:73:62:
         c8:71:ac:44:b0:64:9b:e1:a2:5c:a8:b6:fc:78:b5:03:fd:0a:
         9a:21:80:e5:29:a6:7f:e4:87:8f:10:7c:01:24:bf:b9:de:cb:
         73:81:d3:da:1f:74:a7:de:8c:2a:cb:0a:e9:3a:8e:24:17:7e:
         17:27:e3:23:8d:ba:59:a3:d5:15:77:c4:84:12:71:7a:ea:b1:
         e0:ac:f1:3c:86:8b:32:66:e1:e4:ce:07:14:f5:3c:ad:d3:af:
         28:e0:28:ef:b8:39:f6:a2:2f:6f:72:e6:bf:d8:96:74:2a:e6:
         a8:25:32:1b:1f:6b:c4:1c:11:d5:1b:54:11:ce:ee:5a:f7:b6:
         8b:95:97:17:0f:c7:94:c9:08:a1:30:57:6f:81:de:e7:50:2d:
         3f:8c:1a:d0:60:0d:41:96:9f:e5:16:4b:28:0d:49:1f:bc:8a:
         51:bc:6b:f0:d3:cd:dd:f8:a7:c3:76:3e:ec:28:1c:74:02:d8:
         de:52:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net