Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/271c9ba3-c89f-3f06-b023-4cc54233b1de.roa
File:                     271c9ba3-c89f-3f06-b023-4cc54233b1de.roa (raw, json)
Hash identifier:          2RduQIQ45G2KosXpf3EQKYlWJ18UyR8dF9BeqdbsQjU=
Subject key identifier:   39:D9:F4:21:F6:D0:21:39:DA:FB:E2:C7:08:4C:7D:25:3C:32:04:53
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285849350EAE1C2B618EB49A0C8A40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/271c9ba3-c89f-3f06-b023-4cc54233b1de.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     399763
IP address blocks:        216.249.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ae:1c:2b:61:8e:b4:9a:0c:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=a9bf4358-00d6-4106-80d7-fd2ea5224a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9d:f8:4c:bf:89:3d:1e:cb:0c:f8:7e:4c:e3:
                    c6:75:0b:de:b8:50:89:17:03:50:f5:92:c3:d9:d6:
                    c9:7e:5d:20:5f:8f:b5:93:54:a9:3d:eb:0d:1f:8a:
                    30:79:86:3c:c0:6c:5f:c7:58:a7:79:60:4f:80:e5:
                    b0:53:10:80:6a:e8:8e:3c:e7:a2:50:ac:ee:e9:96:
                    cd:96:d2:ae:1c:aa:19:e4:94:8a:11:c3:93:5c:f7:
                    71:bd:97:8c:4d:0b:dd:b3:9f:8f:50:32:37:e4:0e:
                    d9:4c:b1:a9:f2:f8:73:01:e8:c5:bb:3e:0a:94:81:
                    92:9a:a6:cf:a4:9f:c7:77:e9:a3:ff:53:00:ce:54:
                    04:7a:39:2c:7c:d7:23:ab:03:97:67:9d:e5:74:ad:
                    14:2f:c5:07:9a:ba:d2:c9:e1:32:be:3a:d6:7e:04:
                    46:91:c8:3c:3b:81:72:5e:91:d6:c9:8b:a3:b6:d7:
                    66:27:b2:c3:f4:ee:2d:69:23:7e:88:24:6e:e5:69:
                    0e:6d:23:2c:b5:19:32:e1:94:57:68:0e:60:ed:05:
                    a3:59:a9:49:66:ef:da:df:4e:86:75:00:77:dc:1d:
                    69:39:3c:6c:7e:c2:14:ba:cc:56:f8:0d:bd:98:cf:
                    39:2a:07:54:38:59:a6:fc:08:de:b9:6b:35:5c:97:
                    42:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:F4:21:F6:D0:21:39:DA:FB:E2:C7:08:4C:7D:25:3C:32:04:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/271c9ba3-c89f-3f06-b023-4cc54233b1de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9d:b6:cf:6e:e7:29:15:16:87:ee:f2:e1:e5:b6:92:33:8f:
         f1:0f:cc:56:c5:9d:ab:85:48:a8:e7:40:99:cb:83:bf:09:96:
         4c:a1:0d:21:bb:96:6f:db:34:0c:de:af:9f:b4:20:3b:29:03:
         61:cb:d4:a7:06:ab:b9:c6:5d:a8:01:30:f0:0a:a2:cc:47:91:
         fc:fc:27:a4:57:b3:8e:0b:e3:0c:10:63:34:90:5b:06:79:27:
         ea:7f:50:69:5d:b5:4b:f5:73:90:7f:dc:92:13:49:11:74:6d:
         5d:56:a2:3f:0d:48:1b:f2:8c:6c:d5:dc:cc:5e:92:d5:86:11:
         2b:1c:be:38:c0:15:ef:41:10:b3:1a:28:d0:c4:d8:7c:fa:c0:
         b2:2a:71:96:a8:53:5b:f5:63:50:8d:4b:64:1e:2e:d3:d0:a1:
         b1:83:3d:55:a0:fb:93:2c:9b:2d:bb:11:f4:11:9f:ba:c9:f4:
         33:29:7e:e1:22:e2:19:1e:cf:0f:aa:0e:5a:3d:77:04:f1:ed:
         51:20:78:0f:f3:ec:1b:ab:d5:53:f9:f6:b4:2d:2c:44:d8:d5:
         02:b3:41:48:94:a9:1a:fe:6a:0e:d7:56:50:49:60:5c:75:0b:
         2d:9f:d9:31:ba:97:90:f7:53:24:fb:6e:90:4f:89:06:ee:80:
         40:b6:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net