Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
File:                     f159d949-9c09-33cf-8df2-ab93c225a5ab.roa (raw, json)
Hash identifier:          KIP/UNSJNe9XOmvPm6fSK4SFywZYlFoXhOQY0fqVocM=
Subject key identifier:   35:69:DF:83:86:94:09:A8:49:85:F0:F6:C3:2D:EE:DD:CE:DE:BB:D8
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584973DEE9CF26CBAE34CF6F2380
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     5650
IP address blocks:        104.251.80.0/24 maxlen: 24
                          104.251.85.0/24 maxlen: 24
                          104.251.89.0/24 maxlen: 24
                          104.251.91.0/24 maxlen: 24
                          158.115.224.0/24 maxlen: 24
                          158.115.225.0/24 maxlen: 24
                          158.115.226.0/24 maxlen: 24
                          158.115.227.0/24 maxlen: 24
                          158.115.248.0/24 maxlen: 24
                          158.115.249.0/24 maxlen: 24
                          158.115.250.0/24 maxlen: 24
                          158.115.251.0/24 maxlen: 24
                          172.98.185.0/24 maxlen: 24
                          206.127.218.0/24 maxlen: 24
                          207.230.96.0/23 maxlen: 23
                          207.230.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e9:cf:26:cb:ae:34:cf:6f:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=5bfd9854-ab02-4b57-bcda-eed2a5bbfeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:59:df:1d:62:d7:b0:fc:f6:7a:43:0c:db:f2:
                    0c:b3:84:b2:51:0c:c1:5a:78:17:f5:b3:99:92:9f:
                    e6:11:f4:44:9c:19:71:9b:8d:f0:12:96:10:f0:27:
                    da:bb:fc:02:a9:55:b8:6e:98:2f:da:91:5c:3e:a2:
                    fa:8c:e6:e0:25:c7:ff:a4:4d:51:e7:23:85:75:9f:
                    a6:71:6f:58:41:43:8b:3b:7f:5e:bd:eb:8a:9e:15:
                    83:0b:b9:18:28:6d:2f:d8:2a:72:00:30:ed:f6:8a:
                    4d:27:4b:d9:41:df:5d:6d:62:ba:8b:e6:ce:62:76:
                    bd:9c:e0:96:0b:a4:7b:ec:a2:01:0a:f8:01:dc:c8:
                    b7:4e:e8:5a:64:ba:bc:26:49:4c:1c:ac:23:61:7f:
                    f9:40:6b:ca:ca:72:e1:f2:e3:b6:76:a0:04:2d:51:
                    3b:48:00:ac:1d:b0:65:0c:2d:5f:7e:d4:3a:80:39:
                    69:fa:7b:83:21:03:b8:28:cb:2c:61:a6:d8:79:d6:
                    b5:72:9f:bd:6e:75:a9:bd:65:6e:4d:81:de:31:a8:
                    4a:5c:84:bf:84:f8:75:9c:82:ac:0b:53:f2:ee:45:
                    40:08:ec:d4:f0:0f:7a:2d:2d:77:99:10:14:e3:90:
                    a6:99:d7:54:b3:12:56:e5:f9:1a:af:e9:bc:02:a9:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:69:DF:83:86:94:09:A8:49:85:F0:F6:C3:2D:EE:DD:CE:DE:BB:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f159d949-9c09-33cf-8df2-ab93c225a5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.80.0/24
                  104.251.85.0/24
                  104.251.89.0/24
                  104.251.91.0/24
                  158.115.224.0/22
                  158.115.248.0/22
                  172.98.185.0/24
                  206.127.218.0/24
                  207.230.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:41:05:8b:83:8a:4e:4c:a6:9f:ee:bd:93:6d:4e:57:f3:
         4b:bb:7f:04:bf:5a:7a:1e:f2:97:bd:b5:f8:c1:5c:c2:6c:17:
         57:56:9d:0a:b1:50:42:ec:c7:72:aa:f5:64:8e:bf:43:ea:92:
         a5:23:62:ee:32:eb:03:df:df:c9:33:a8:68:3a:81:ac:06:c9:
         d3:4c:af:d7:91:58:a5:e3:bb:5d:31:10:0f:e6:fd:c0:0b:90:
         ba:bf:1c:94:1e:80:13:67:d1:4d:c3:63:be:ce:ae:ed:39:b7:
         92:7d:ce:4c:e9:22:c4:88:8b:4f:8b:9e:77:5a:12:61:23:63:
         40:ac:d9:08:13:ff:74:6d:9c:cf:48:d7:1a:19:16:8e:20:11:
         7f:e7:f8:0c:8d:50:fe:1f:0b:d9:64:5b:b2:2a:98:17:b7:d1:
         7d:c4:ea:34:51:5b:24:55:d7:09:9c:18:93:57:cd:49:38:a8:
         05:a8:99:d9:c9:49:7e:27:c5:b7:18:6b:e5:10:d3:2d:88:7e:
         78:01:82:52:b0:ab:95:58:3c:72:8a:26:6a:a4:a7:b6:e6:f7:
         2c:69:ba:5e:07:42:21:a4:01:51:3b:6c:0d:d5:51:46:f1:d9:
         10:61:01:2b:1f:28:ba:69:b7:b8:79:87:7e:33:cc:93:79:7d:
         ae:20:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net