Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
File:                     6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa (raw, json)
Hash identifier:          jkjevSiEOTQwps/m4vwQiBRSyaXwFOpYNnpra/BHKHw=
Subject key identifier:   6C:CE:33:6C:77:9E:9F:EE:C6:21:60:42:89:11:56:1A:C7:40:A2:F7
Certificate issuer:       /CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
Certificate serial:       010D0C9F4328584964844B86C3DFDA0F5CA31200
Authority key identifier: 60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     174
IP address blocks:        137.155.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:4b:86:c3:df:da:0f:5c:a3:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7875058f-5363-4bbc-9de7-bfd669c88bd9
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=2af9cd36-afcc-433b-8ec3-a77a8867d34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f0:91:13:46:0e:3f:6f:23:f1:40:46:4a:0c:
                    d0:27:1e:97:b8:0c:5e:75:6f:db:1a:db:ae:92:8b:
                    97:ff:fa:57:3f:bc:43:1d:06:18:6f:2f:f2:5f:35:
                    e0:c7:e4:6a:21:20:23:20:1c:54:01:e0:48:a4:f6:
                    23:8a:1e:ad:a8:8d:f1:75:36:9f:a5:43:52:7b:c1:
                    93:05:c8:fe:df:e8:f8:a7:8d:66:51:06:d1:f4:e1:
                    2a:b0:67:aa:9d:75:ff:6a:14:80:c7:9b:ea:55:91:
                    c8:1c:47:a4:c4:bc:5f:e7:60:91:4c:6a:4d:cf:1f:
                    f8:ad:79:4e:a0:c3:6e:7c:ed:70:99:3e:42:2e:0e:
                    20:c8:61:94:5d:44:7c:17:fc:02:d9:6d:fb:0e:38:
                    38:3e:84:df:02:92:68:d0:ec:b9:6d:11:b5:2b:91:
                    93:29:d5:c5:88:43:12:a3:f9:3e:56:48:7c:fa:7f:
                    59:40:c5:7c:39:23:1a:18:83:a1:e4:68:e6:75:66:
                    f6:13:2e:48:71:b4:35:72:d9:06:80:19:ad:a2:1f:
                    56:96:0b:85:aa:52:c6:ef:3a:27:e0:d8:f2:84:d9:
                    b8:31:77:f3:47:ac:97:a2:8f:69:35:cb:07:cd:2e:
                    53:dc:7d:a5:55:62:c9:03:9a:77:bc:77:dd:d4:e4:
                    54:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CE:33:6C:77:9E:9F:EE:C6:21:60:42:89:11:56:1A:C7:40:A2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/6e84ed7b-3df5-3929-82e8-5dbf0e916a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9/7875058f-5363-4bbc-9de7-bfd669c88bd9.crl

            X509v3 Authority Key Identifier:
                keyid:60:F8:59:9A:79:56:37:4D:45:E0:02:ED:58:C0:8D:19:18:5B:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7875058f-5363-4bbc-9de7-bfd669c88bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.155.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:3c:2e:4b:7a:17:5b:01:0a:0f:02:34:5f:27:71:17:f6:
         2b:d1:ce:7c:13:59:80:0e:0c:39:2b:6e:80:d4:b2:58:70:2a:
         00:4a:4a:41:16:78:aa:89:19:9e:73:29:bc:b0:78:5c:bb:2a:
         73:54:6c:41:28:a6:07:32:2d:52:d9:aa:5c:86:18:83:ac:3f:
         32:8b:11:d2:27:8c:3f:44:45:82:b4:94:e0:58:9f:d2:e7:c7:
         d0:83:b3:a5:27:78:f4:1c:08:25:07:6b:c1:79:bc:be:c5:2e:
         2a:83:b2:8b:bd:f6:ae:48:60:eb:2f:f1:4e:26:75:c8:13:64:
         98:28:6c:fc:18:37:03:95:5c:7b:19:44:c7:28:20:05:ba:0d:
         f0:5f:89:74:ef:86:8e:33:47:93:46:4a:d1:69:73:fd:ca:aa:
         63:05:38:33:6a:23:a9:ff:a2:1b:4b:d0:df:9a:ec:aa:4b:7f:
         6e:33:f9:9a:5e:71:12:da:14:b8:1a:86:9d:0a:30:71:44:59:
         cd:27:1e:75:dd:ab:1c:85:64:6c:29:02:87:fb:72:a1:af:ff:
         42:0b:87:f1:c7:e5:18:bc:41:39:b3:0e:d4:b1:2c:75:bb:d1:
         f5:4b:18:d0:3b:37:90:81:ab:2e:86:67:95:66:60:51:c3:49:
         71:cb:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net