Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
File:                     b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa (raw, json)
Hash identifier:          +5XjC0mTgoUV9AufuaSLsjUUtDpy6lrOC/Ybzp/SxZ4=
Subject key identifier:   29:47:0C:1B:D4:A4:6E:DC:EE:11:F2:61:94:1F:94:6C:47:4F:85:BB
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F432858497114288C0C2EF489A9C8CF00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     174
IP address blocks:        207.230.3.0/24 maxlen: 24
                          207.230.4.0/24 maxlen: 24
                          207.230.6.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:28:8c:0c:2e:f4:89:a9:c8:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=99b757ff-f9da-4e85-9bbb-5dcb2075eb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:78:d1:f7:de:5b:9c:cb:6e:b8:fd:cd:a1:
                    5d:b1:ab:35:fd:ef:03:43:64:5b:be:e2:16:bc:0a:
                    62:68:21:cb:59:e2:29:14:1a:93:1e:b8:d4:cf:cc:
                    b4:3a:69:74:91:9e:bc:6e:40:66:c1:ea:9c:fc:7d:
                    01:a7:61:c0:a6:a6:e7:08:5e:63:45:9e:8f:b6:db:
                    2c:e2:3b:54:ab:70:38:fc:75:a5:43:1a:51:62:d0:
                    5b:74:7c:52:9e:7c:d0:72:81:5d:c9:90:45:6e:9c:
                    61:df:b6:23:f2:40:e3:59:86:62:6c:c7:16:fa:7e:
                    74:89:de:f7:b0:0c:9d:fe:2c:b0:85:97:83:cd:3b:
                    13:0e:26:2c:05:44:ae:1e:0f:84:dd:5f:58:e8:47:
                    83:4d:ff:5b:10:df:95:16:65:10:99:bb:51:2a:1a:
                    cf:48:33:42:b6:2d:31:27:8c:c2:79:87:8b:69:0a:
                    8e:f4:32:d3:3e:48:67:1c:6e:28:e4:33:9f:e3:96:
                    ca:c4:dc:52:b0:ef:06:96:fc:92:94:f4:60:32:b4:
                    9a:da:6d:9b:51:d7:3f:71:cb:ee:af:2b:25:84:5a:
                    e7:12:1a:93:19:b1:25:c5:f3:72:03:09:13:2b:a6:
                    12:20:ab:77:56:a9:d3:c2:6d:fe:a5:10:e5:a1:d6:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:47:0C:1B:D4:A4:6E:DC:EE:11:F2:61:94:1F:94:6C:47:4F:85:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.3.0-207.230.4.255
                  207.230.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:8b:65:9c:fe:59:18:5c:b0:26:45:30:d8:7e:dc:c2:0c:
         2d:3c:01:47:d4:15:98:f3:4b:14:10:29:36:b9:10:fb:97:f5:
         bb:96:e5:89:32:eb:4d:89:39:c5:c5:de:c4:9e:cf:3f:ff:73:
         09:c1:f8:cd:f8:9f:2e:33:3c:9f:2e:14:0a:54:a6:6d:9c:eb:
         ef:63:89:ba:54:c1:d7:bc:f3:63:68:81:46:0f:8c:c1:42:51:
         c3:80:4d:63:92:54:40:3e:0e:fc:3f:ee:fb:d4:d1:a1:97:61:
         8e:34:c4:9b:82:c6:d5:df:9f:98:c6:52:b3:73:6b:78:53:1e:
         60:28:71:35:f8:da:4c:d1:2c:1b:91:9a:46:7e:93:3a:e4:ef:
         64:fb:ba:61:96:a1:58:6d:63:55:a5:5b:46:9c:26:e4:b1:9e:
         df:fe:27:95:5e:84:0a:09:b2:dc:31:13:44:92:08:78:bd:a3:
         15:b0:92:5a:78:ff:09:2e:09:8e:c4:dd:79:b2:c7:cb:df:f6:
         6f:16:e5:fc:99:16:8b:49:3d:ff:ad:a6:be:a6:49:2f:14:45:
         a7:16:ca:62:50:0f:a3:c4:35:1d:50:cd:fc:23:a3:d9:e8:b8:
         d8:2a:23:7f:8f:93:04:77:7f:38:bd:56:eb:e5:77:38:9d:e0:
         55:ac:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net