Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa
File:                     33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa (raw, json)
Hash identifier:          BqUoPF0iicDebXcDwe56yKFEcOEkbxu/vJ7xQz1vHqw=
Subject key identifier:   8F:D1:9E:4F:A6:E9:82:EC:0C:43:C7:C3:E2:E3:88:6E:68:4B:31:C4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C247990750D202F22258180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.157.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:79:90:75:0d:20:2f:22:25:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=cb7c8f37-3d5c-4a3e-aa0a-1ec9d24d8cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:ec:a4:23:ec:90:1f:59:f5:00:4d:7a:45:
                    19:40:ed:6b:58:b5:37:18:88:37:2c:cb:94:c4:ac:
                    db:39:99:b6:82:8a:74:ec:44:4a:05:63:31:3a:1c:
                    9a:60:f0:86:fe:3f:de:45:14:55:8f:ae:10:a9:1f:
                    b7:06:fa:05:5b:98:67:57:9f:0a:51:3c:04:0f:62:
                    7d:3b:9b:4b:84:6f:6c:9d:5d:42:63:77:40:91:0b:
                    b6:19:55:a2:27:6c:86:4a:50:78:d1:28:c4:30:32:
                    ac:e9:a9:1b:15:99:3d:22:c0:be:37:67:5a:0a:c8:
                    18:cf:95:4d:10:81:6c:03:b8:87:99:85:7a:24:24:
                    77:a0:00:dc:f1:71:03:85:09:f5:65:c3:85:aa:5a:
                    27:f0:b9:6f:8b:d5:b9:8f:eb:e5:e1:49:08:df:da:
                    df:8c:bf:65:c9:c4:eb:ab:a9:c1:c0:fc:5e:59:7a:
                    ad:53:2c:f4:61:51:54:1f:68:42:95:b9:a4:21:39:
                    73:68:c6:4b:f2:64:6e:a6:e7:f1:5c:a3:6a:41:6f:
                    1a:4f:f6:8f:62:6b:58:ac:36:37:c1:e5:72:c5:c5:
                    f5:d2:a6:ad:5a:f9:d0:fb:7e:31:2a:ff:89:f0:c3:
                    f1:34:b8:2b:1c:17:b2:8c:6c:75:a5:10:53:7e:ba:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:9E:4F:A6:E9:82:EC:0C:43:C7:C3:E2:E3:88:6E:68:4B:31:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33f67ad8-34e5-3c14-a684-3d2ceec671f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.157.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:91:b1:0b:c8:11:88:84:17:9c:55:1b:46:a7:59:2f:99:7d:
         7d:f8:93:eb:56:87:12:90:c0:51:f6:99:61:6d:c3:7a:1e:75:
         30:d7:3f:a6:7e:e8:af:e8:d1:99:61:55:5f:c4:c5:f8:fb:fd:
         d2:26:5b:c7:bc:86:d3:94:1b:35:80:b9:0b:db:51:76:be:79:
         7b:2f:23:3e:20:07:5e:d3:1a:86:a7:d0:4c:77:48:45:61:b4:
         50:e9:06:2a:ec:c0:55:ac:ed:c7:37:82:1d:03:33:bf:68:35:
         c5:d7:b7:cf:32:94:ba:53:b4:3e:82:78:2d:52:08:be:c1:ac:
         cd:a2:80:94:b6:66:95:01:b8:79:4c:fe:5e:5e:7f:84:d2:3a:
         a6:d0:c8:72:d4:c7:97:04:96:70:95:fe:1a:9b:94:3f:78:d6:
         16:95:84:2e:9f:f9:21:04:4d:49:0c:ed:7d:bd:2d:de:0a:10:
         5e:5e:b0:38:67:33:ed:79:90:ec:29:63:d9:d1:28:17:dd:f2:
         0b:c8:03:74:a5:1d:c5:31:03:6d:21:b3:d8:11:a1:1f:21:4d:
         eb:bd:2d:74:70:e9:c3:37:70:fe:c8:23:c5:e5:1d:8e:aa:91:
         80:43:14:91:4e:c9:ce:bf:5c:f9:97:ae:8f:63:29:01:70:5c:
         94:ba:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:26 2025 by rpki-client on console.sobornost.net