Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/442b49e7-7bca-3178-aa78-ad10124e199d.roa
File:                     442b49e7-7bca-3178-aa78-ad10124e199d.roa (raw, json)
Hash identifier:          AtugsI01bbO5byX4jeJ8jbGP4YZJMgonfVc5rOeJeyk=
Subject key identifier:   4E:1C:22:E1:9B:C0:09:D0:7D:15:F6:BA:02:12:F4:24:C0:04:A4:76
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F432858497279B93763DC12DC66642470
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/442b49e7-7bca-3178-aa78-ad10124e199d.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        204.155.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b9:37:63:dc:12:dc:66:64:24:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=cbd3fc47-8f45-4239-9419-cc6cfdb7c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:f6:da:78:f1:07:74:5c:fc:f3:0b:9d:26:
                    e6:0b:57:ca:4d:c7:85:e1:b4:22:db:7e:04:9e:b3:
                    23:54:cc:dc:09:64:59:be:46:b3:46:59:7f:e3:06:
                    22:3f:44:0c:f8:79:40:44:95:70:69:98:ca:b4:ab:
                    af:31:43:ca:5e:38:5f:e6:1f:5e:13:e5:5c:57:42:
                    4f:44:fd:ab:e4:b0:73:07:03:ca:c0:a6:c7:d3:ae:
                    51:f8:43:73:e3:2e:6f:ad:c0:07:85:bc:53:77:81:
                    ec:51:c2:39:33:9e:57:54:44:26:e6:2b:7d:b2:4d:
                    92:3e:2f:ca:1d:c4:01:1a:27:b1:3f:76:16:5b:5c:
                    78:30:ef:ca:e9:39:56:30:32:59:80:f2:20:69:9e:
                    59:50:8c:ab:3c:e8:0d:c6:43:08:8c:c6:47:1f:73:
                    e3:c7:d6:f5:f3:5d:1c:ca:04:68:e6:8b:1a:cc:85:
                    3e:74:5b:2a:1f:57:19:73:2c:38:db:de:d5:b9:98:
                    74:cf:6e:b5:1b:42:96:14:2a:7b:42:a1:0d:cc:96:
                    b8:df:ed:08:49:8f:4f:2b:a0:2e:20:6e:dd:79:3f:
                    a8:32:9d:b5:e8:1b:25:18:af:49:cf:93:cd:3e:56:
                    23:46:f4:1a:c6:2a:32:53:6a:9a:7d:98:be:15:30:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1C:22:E1:9B:C0:09:D0:7D:15:F6:BA:02:12:F4:24:C0:04:A4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/442b49e7-7bca-3178-aa78-ad10124e199d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:6a:03:88:0a:b9:b0:67:95:1c:8c:30:24:f2:20:40:4f:
         38:be:98:b1:5e:66:bf:50:d4:63:55:40:52:ff:06:66:50:91:
         da:3e:c1:36:e1:67:f6:48:c2:ec:c7:9c:8a:e0:4c:d3:b9:53:
         1b:2e:ff:fe:a5:8b:77:16:f2:38:df:16:c2:e7:6f:7d:51:2e:
         c9:cd:3b:30:49:3f:4c:dc:f1:cd:e3:e6:52:e9:b3:ed:6b:8f:
         ce:ed:96:4c:2e:10:0e:38:fb:a7:e1:52:b9:16:da:f1:00:66:
         57:28:70:95:07:e7:9f:5e:2e:84:ac:82:17:24:b3:b9:ab:27:
         b8:4c:65:e5:e2:79:3b:7e:4a:14:e7:20:b4:2c:36:af:43:3c:
         1e:d9:82:a4:e8:09:8a:4d:36:20:36:60:20:e7:63:08:5b:5b:
         6c:c2:8c:b5:49:2f:55:ba:90:62:0b:ed:be:c2:f2:e4:4e:8c:
         35:6c:a1:e6:e1:f2:b5:64:a6:75:0a:a1:45:27:4a:c7:a0:8d:
         55:0e:91:e4:b0:f5:04:d0:66:8c:24:9e:a2:3b:f6:17:db:b1:
         1f:90:a6:64:1f:17:bc:cc:9a:0f:b4:5c:59:c0:6f:1b:57:24:
         8d:5c:e4:d7:1e:59:c4:1e:c5:ad:7a:a7:bc:2f:72:c9:6f:a4:
         32:c5:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net