Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa
File:                     3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa (raw, json)
Hash identifier:          MPu8wLoidYHd5tk1cLse/v5ha5GWB0P6qRruz+ynIbM=
Subject key identifier:   0A:FB:65:15:2B:98:2D:47:DC:97:2F:C2:F5:D9:5C:9C:9C:02:BC:2F
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584976A990271510037348466E80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13237
IP address blocks:        199.79.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:90:27:15:10:03:73:48:46:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=ae76b040-e691-4030-900c-f772304ef33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:9d:e4:36:bc:4e:81:fd:56:67:73:5e:aa:
                    19:01:a1:e3:ac:fa:92:cf:b7:c8:74:89:18:02:f0:
                    04:0c:2a:50:41:3e:ff:41:fc:a7:61:f1:0f:af:79:
                    5c:14:ff:dd:fb:84:ad:20:ba:57:96:14:c3:43:0c:
                    86:17:7a:8b:94:05:89:73:a9:1b:8f:98:ae:6c:82:
                    f0:23:87:75:68:c2:52:2e:7a:86:e9:af:0a:61:9f:
                    a2:6d:ca:af:98:d5:01:d5:f8:90:f6:6c:7c:8d:59:
                    05:c3:ac:b1:5c:37:91:4a:7b:af:eb:f0:28:f5:05:
                    35:de:fd:5f:1b:51:4a:96:9d:3a:07:35:ca:81:0d:
                    2f:64:35:99:98:3e:29:c9:a7:39:bd:eb:96:23:86:
                    18:2c:38:a0:0b:bd:d1:79:a3:53:4a:cb:f2:f5:7a:
                    e8:7e:f8:00:27:27:d0:06:c2:2c:91:c0:d4:28:02:
                    06:60:56:07:6a:06:f4:c9:0a:c7:81:e0:da:1a:05:
                    f5:c9:f3:7f:d0:8d:59:c7:3c:49:4a:91:b4:74:ac:
                    1e:36:2b:54:f8:ec:b3:83:82:f2:6f:a7:d3:c9:a8:
                    f1:9c:ab:4a:93:01:fa:47:19:7e:e6:91:5e:a1:77:
                    3f:f8:ad:6e:0b:07:77:06:77:7b:a1:e0:9d:0a:ba:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FB:65:15:2B:98:2D:47:DC:97:2F:C2:F5:D9:5C:9C:9C:02:BC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:35:9e:41:0f:77:b5:c5:b8:ae:2c:af:43:b6:c6:f8:6d:5f:
         96:3d:32:66:90:6d:f9:26:14:b6:26:bb:d2:6f:23:dc:0b:b4:
         f4:b3:24:7d:5e:3b:55:07:23:c4:09:b1:7f:fb:43:b4:6d:cf:
         cd:c0:57:cf:ce:3c:b1:19:7d:cf:cb:94:70:12:2d:a5:d9:2f:
         07:59:2c:85:42:39:d2:d9:cb:db:d8:74:67:9d:23:10:12:a1:
         d6:6e:d9:af:29:a1:21:c0:dc:8c:0c:58:e9:b7:b4:52:5a:0f:
         7f:8c:75:26:14:f2:d9:a7:59:be:dd:de:7f:58:6a:7f:b5:e4:
         cc:a9:17:e4:e5:42:2b:c0:5c:e6:41:fb:65:66:4f:87:53:bf:
         0c:40:ac:29:6d:02:39:45:ab:e3:ef:c9:ed:ca:81:72:d3:5a:
         a4:a2:8d:9e:fd:c7:db:1e:28:93:0e:83:95:76:87:90:26:23:
         86:47:93:36:ef:e6:75:d3:82:e7:b3:aa:d6:ea:05:13:bf:a0:
         3a:8d:68:a5:33:9f:b1:ab:d9:23:6c:9f:8d:92:40:15:d2:c5:
         a3:50:fa:56:05:ac:e7:25:ff:78:9d:57:19:23:84:aa:ef:42:
         e1:e4:9c:22:bb:8c:ea:73:90:af:fc:41:26:24:72:e5:8d:59:
         1d:5f:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net