Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69721a46-3f25-3343-aa26-7ac85d6b08f7.roa
File:                     69721a46-3f25-3343-aa26-7ac85d6b08f7.roa (raw, json)
Hash identifier:          2BY3hjyaP8Qf/55eVI3Wub78XYm8Z7x5QMqYYRbX+DE=
Subject key identifier:   31:3F:2F:99:DD:55:59:88:95:74:6C:96:86:9B:EF:AC:FD:7B:AE:9E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC20AB0D951B6DE0CA4100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69721a46-3f25-3343-aa26-7ac85d6b08f7.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        96.7.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:20:ab:0d:95:1b:6d:e0:ca:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=d5bbea3f-9632-40bf-8161-89c34581b485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:1e:9f:75:06:92:71:3a:f9:1f:fa:e1:7f:
                    c7:71:10:a5:8e:75:8e:a0:ce:15:db:17:9e:b0:0a:
                    8d:06:6a:23:2e:0e:1f:44:d3:26:01:6f:a1:2d:9d:
                    ea:b9:ed:37:87:5b:bc:81:6e:55:63:92:41:fa:53:
                    58:33:fe:11:56:cc:81:23:12:85:f6:b7:34:c5:a3:
                    ba:32:c7:20:d3:47:a5:6b:cb:9b:5f:55:2a:42:56:
                    2a:93:e5:33:5f:3d:c9:a8:d7:80:7b:19:b2:36:e9:
                    ee:37:78:c8:d4:5c:88:16:80:39:43:63:ab:d3:5c:
                    2a:66:d8:b9:45:03:b6:f7:e5:3d:c0:e2:fc:26:37:
                    96:c6:0b:28:97:3d:d9:29:5d:20:d8:96:c4:9f:c1:
                    09:41:c4:f3:77:d8:54:34:73:f6:6a:9d:33:b0:18:
                    11:3c:cc:98:a9:0c:fe:e5:17:92:1e:8a:93:86:17:
                    ac:82:45:7c:69:4d:4c:8f:44:ae:ae:6d:38:41:79:
                    95:0f:3e:90:84:ed:88:78:05:b0:4e:8c:30:3a:1d:
                    3a:65:64:8a:03:78:41:1c:37:f0:ea:e4:e3:6e:09:
                    c3:32:21:87:5b:e2:be:f1:98:46:d8:36:66:2a:92:
                    fd:4e:db:e2:32:11:95:d8:01:78:f8:09:d1:a4:10:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3F:2F:99:DD:55:59:88:95:74:6C:96:86:9B:EF:AC:FD:7B:AE:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69721a46-3f25-3343-aa26-7ac85d6b08f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:48:43:4e:e5:3f:87:97:ad:ad:28:20:ef:da:41:88:c0:83:
         92:c7:de:44:4a:47:de:85:5c:1b:5d:3d:45:f0:2a:e5:3e:c4:
         d3:b0:52:eb:1d:db:d7:07:5a:8c:42:52:55:09:51:40:ed:16:
         b6:64:f6:9c:b0:06:96:af:16:dc:70:61:72:f1:7f:30:2a:1d:
         bc:dd:69:73:29:e3:62:63:46:89:ec:76:6e:91:14:e3:a3:62:
         3b:46:8d:c9:18:b8:84:15:50:b0:00:eb:c3:22:78:3f:56:5d:
         1f:bc:8f:0e:ed:53:dd:3e:4c:43:72:e1:9e:e8:85:45:0b:02:
         d5:c3:66:b6:d6:49:e5:54:f5:3c:52:5d:47:bb:7b:a5:df:02:
         4d:9b:fc:5b:f9:1d:33:23:bf:78:ec:d9:d6:72:73:bb:1d:af:
         00:14:4f:0e:b6:49:02:0f:3b:93:fe:92:19:70:a9:be:40:ba:
         24:9c:4b:46:e6:19:84:98:10:b1:c9:4a:b7:7e:91:33:5d:11:
         77:ff:bf:1f:a6:01:44:92:d1:9a:93:4f:c9:fe:c5:4a:c1:9a:
         ad:cc:cd:f5:b4:3b:19:16:47:3d:87:0f:34:fd:cc:d3:ab:a0:
         73:49:62:34:ef:70:f5:55:e2:12:74:4c:40:28:45:b9:16:fd:
         4b:28:f1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:07 2025 by rpki-client on console.sobornost.net