Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6cc8e646-445a-39a3-88e8-8303f0b22dd4.roa
File:                     6cc8e646-445a-39a3-88e8-8303f0b22dd4.roa (raw, json)
Hash identifier:          FofVObP6KOyhmlgnb8Zz/f5+LehAYml/8nWpdqfxrb8=
Subject key identifier:   32:7A:F5:0C:7A:05:F2:44:AC:96:6B:FA:1D:03:7D:CB:32:F2:8E:C1
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285849806F2A727306BEA869DAC180
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6cc8e646-445a-39a3-88e8-8303f0b22dd4.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     30058
IP address blocks:        50.7.210.0/23 maxlen: 23
                          50.7.214.0/23 maxlen: 23
                          50.7.220.0/23 maxlen: 23
                          50.7.222.0/23 maxlen: 23
                          198.16.66.0/23 maxlen: 23
                          198.16.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:2a:72:73:06:be:a8:69:da:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=93db95e6-1c8c-4014-8ab1-de81f997d410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:73:31:83:74:76:24:bf:56:15:64:b9:69:
                    33:a2:a7:af:08:71:75:e1:ba:90:84:48:06:a8:29:
                    b3:a7:8e:36:4a:f6:6f:bc:d9:4d:4b:6d:27:54:f8:
                    12:60:96:60:6e:ca:c9:ce:1e:9d:9e:21:a6:44:49:
                    ba:c3:0d:d5:0c:ff:29:71:ff:27:1f:be:f6:d3:f8:
                    d6:6c:3f:fe:10:e8:00:b5:ce:a8:36:17:26:e3:1c:
                    e4:78:b0:98:f5:9c:bf:ca:ff:c5:5d:01:89:c7:85:
                    14:e3:0c:78:6d:fc:02:df:be:c8:e1:37:ab:6e:ae:
                    7a:82:5c:28:03:65:06:6a:30:be:ec:06:97:64:32:
                    5f:c0:7e:e4:48:72:2c:4b:ac:c6:78:a6:67:95:25:
                    61:d5:a1:5b:ca:c2:d8:bc:97:32:f5:10:7e:c4:b9:
                    ec:bc:a5:65:7e:05:ae:70:0e:0a:f3:50:84:78:53:
                    98:40:6e:81:28:e9:bb:45:7b:25:d0:14:2b:4a:1d:
                    09:c4:8b:d2:68:4b:7e:b5:f4:48:6f:76:dc:5a:ff:
                    d2:ff:a6:1f:fe:a4:4a:84:9d:3b:9a:de:11:04:4c:
                    e2:bb:af:66:27:29:19:4b:1a:ef:82:06:7c:5c:9a:
                    44:73:20:2f:da:8b:cb:10:80:54:77:16:11:c3:17:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:F5:0C:7A:05:F2:44:AC:96:6B:FA:1D:03:7D:CB:32:F2:8E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/6cc8e646-445a-39a3-88e8-8303f0b22dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.210.0/23
                  50.7.214.0/23
                  50.7.220.0/22
                  198.16.66.0/23
                  198.16.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:dd:03:fd:81:6b:21:0c:d6:95:6e:88:17:b6:b8:92:3b:
         c0:44:f3:78:7d:54:0a:b1:a7:8c:8b:a1:76:b0:93:de:fd:1d:
         87:98:ce:96:ac:1f:ef:85:94:a9:b8:1c:1a:c7:76:39:09:75:
         43:6f:77:1d:8f:23:50:3d:19:cc:a9:2e:fb:9e:18:ba:03:52:
         a4:37:12:66:c8:a4:8e:e7:5b:a2:8c:71:f0:8e:4e:ca:32:37:
         de:c8:39:04:66:21:29:0f:8c:53:9d:7b:5e:a1:b1:be:d0:58:
         82:f7:be:c0:c4:b5:23:72:31:f8:9e:2b:f5:6e:3a:6d:06:2f:
         f8:d8:05:87:c7:c3:3f:af:65:a3:76:79:a0:07:04:13:1f:53:
         db:57:75:69:26:4f:cd:cd:ed:5e:e9:2c:aa:a7:ce:92:fe:f3:
         35:14:21:94:9a:89:83:d4:40:d9:36:d2:14:ef:8d:1a:3e:30:
         d8:93:77:2b:ea:f2:ec:b7:b5:e9:a3:bc:cc:7f:2d:94:a1:4a:
         53:e9:df:bb:d3:90:74:74:d1:1e:5d:51:29:8a:66:7f:1c:7e:
         58:3e:a8:66:0b:61:30:53:75:32:ec:b5:84:d6:03:2c:9c:13:
         66:64:e8:d3:d9:21:e7:2b:00:1e:32:57:85:56:70:82:09:65:
         0d:7c:04:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:09 2025 by rpki-client on console.sobornost.net