Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa
File:                     33111570-d8d7-3e47-925b-bf3d43b8c236.roa (raw, json)
Hash identifier:          WF55XEHy6EwG88pT3TVpZESMh4a6cQM4pUOud+aV7IE=
Subject key identifier:   3C:6B:1B:2F:16:4D:60:42:48:51:60:F0:80:9D:F2:21:F9:63:D2:5D
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F43285849648442A5B5EFCDC35A55BE94
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     26464
IP address blocks:        64.30.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:42:a5:b5:ef:cd:c3:5a:55:be:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=c10c31aa-2344-4d87-93ca-3f81566e33b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:9b:f4:e5:93:f5:bc:a4:3c:37:c8:16:b7:
                    6b:e5:43:26:93:65:56:3f:99:65:ab:72:63:54:b5:
                    b3:0f:06:ec:ec:43:a0:c0:d9:df:84:da:3f:8d:0b:
                    51:03:3b:5a:45:c1:85:60:49:fc:37:76:b7:bc:30:
                    60:d3:3c:3c:ba:49:90:b0:ce:b1:31:8d:94:0c:e5:
                    f6:36:fe:3e:c4:f3:6e:3e:05:af:72:55:e4:8a:99:
                    fa:a2:c0:35:a4:6c:65:66:69:7a:20:0e:eb:bd:e4:
                    70:f7:49:44:ea:09:05:93:ae:94:7a:51:11:6a:bd:
                    05:46:be:93:df:6a:95:8a:4f:6b:86:4c:c2:c1:13:
                    ba:5f:6b:25:df:dc:ad:d7:07:6c:e9:5e:68:eb:e8:
                    e6:a4:2c:5a:12:92:b8:ff:2d:d7:b6:bb:9f:5f:1a:
                    f1:ad:d2:a8:4a:a7:b3:e5:3d:27:af:33:4e:4e:d3:
                    88:8b:ec:ca:48:6c:99:91:72:83:18:3e:23:00:0b:
                    4f:19:a9:2f:9e:16:80:b8:a3:fa:08:db:67:79:86:
                    1c:19:a1:bc:ff:a5:74:0a:42:5d:ac:55:fa:d5:fa:
                    21:c3:df:aa:1a:f3:e1:6a:ff:85:95:8f:ed:81:a3:
                    7d:29:25:1a:23:c9:69:77:83:ad:d2:25:65:a5:59:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6B:1B:2F:16:4D:60:42:48:51:60:F0:80:9D:F2:21:F9:63:D2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/33111570-d8d7-3e47-925b-bf3d43b8c236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:59:a7:16:b8:10:20:9e:b9:cd:23:89:07:27:b5:9d:ba:a7:
         38:f5:38:ee:69:46:a4:27:eb:8e:78:87:85:20:bf:ad:7b:2a:
         3b:ee:11:f6:91:13:95:91:2f:98:f3:d2:85:92:a3:6b:46:87:
         98:27:08:5b:f4:fa:31:71:d9:4d:72:42:f0:0d:61:69:a5:f2:
         36:f0:0b:61:c8:4e:27:42:49:db:d3:5a:08:91:d5:bd:48:6c:
         1e:ff:a8:9d:f8:d9:37:70:49:bc:44:0e:93:07:1a:d0:11:0e:
         96:f1:b7:6b:d0:c3:12:3c:2c:4d:b8:af:77:1c:fe:42:03:38:
         05:f8:48:29:37:17:6d:7d:a8:b7:62:a3:ea:66:c6:30:0c:8d:
         db:f7:25:37:03:63:0f:75:f6:d3:25:4a:c3:dd:4c:37:59:c9:
         67:6f:fc:45:9f:27:39:34:49:c0:1e:51:5c:a8:a9:07:da:94:
         69:33:33:39:da:c7:7e:c3:1f:37:7d:ee:bc:cf:45:5f:d9:69:
         eb:19:24:f1:e6:ee:d0:18:cd:f8:dd:56:11:b4:52:10:63:d7:
         8e:b8:b5:91:34:2e:e3:73:6e:2e:a6:c4:67:22:19:b0:3f:00:
         6e:9e:dc:c0:e7:25:59:a2:c7:e6:e1:6f:f2:48:0b:20:8a:b8:
         1e:89:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:11 2025 by rpki-client on console.sobornost.net