Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa
File:                     900359ad-8560-31f7-ab87-02e701d7668d.roa (raw, json)
Hash identifier:          b7g6Iaw7Y94PF1ZNUnogJiCDKa4ed5SyTb3vKT2lCsE=
Subject key identifier:   DA:90:C3:62:74:10:E0:BA:04:B2:BD:8D:F1:92:A5:20:E1:00:9F:B0
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F43285849780F15853D3CAC75408CE468
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     393336
IP address blocks:        104.193.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:15:85:3d:3c:ac:75:40:8c:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=38e09f02-6b7b-4c8e-b0e8-9f6ed80df9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:10:b7:cb:a0:83:87:7d:57:13:ee:3a:04:
                    b2:f1:48:f5:25:79:43:4b:c3:8c:42:aa:0c:8c:8a:
                    d4:31:34:10:c0:63:df:df:ee:aa:f2:b3:46:58:ee:
                    c3:73:9f:41:8d:ae:c4:41:da:3f:8d:4f:e9:63:17:
                    d2:72:10:cd:bd:c2:72:9c:a9:cf:40:6c:f9:6b:69:
                    a4:6e:bd:5e:79:50:6e:ea:22:da:12:4f:fd:0b:24:
                    b6:53:a7:ac:38:55:18:16:36:16:9a:b5:48:c6:27:
                    7f:67:a4:06:d2:fa:d0:2d:40:ed:1a:70:21:ed:64:
                    89:f6:4e:ed:2e:b6:ea:3b:03:ec:18:4c:03:fc:75:
                    f0:eb:24:ca:36:8f:a8:66:12:5c:b7:64:52:2c:87:
                    59:5d:29:da:8f:e7:cd:ee:b0:bd:09:07:54:01:31:
                    88:87:95:b2:b7:63:df:7a:37:92:cc:83:24:23:dd:
                    50:65:aa:68:cb:fa:d3:8e:0c:89:c6:87:32:f3:96:
                    c4:59:2a:b0:55:c9:00:77:f5:50:34:d4:7d:b7:dc:
                    25:cb:db:99:b6:16:39:16:c2:c6:eb:2d:66:ac:b0:
                    67:71:ef:a9:c4:1b:c1:04:59:b9:b6:b7:73:05:b5:
                    33:55:8b:c9:bf:02:a8:f9:18:a1:03:92:60:1f:bb:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:C3:62:74:10:E0:BA:04:B2:BD:8D:F1:92:A5:20:E1:00:9F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/900359ad-8560-31f7-ab87-02e701d7668d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:17:47:be:16:49:ee:3d:f6:67:07:14:5d:eb:bf:81:c5:57:
         c5:cc:31:ea:0f:f7:78:2f:ac:6b:2f:a0:e5:c2:70:c8:de:16:
         51:65:9a:30:53:ce:ab:f0:1c:11:59:42:c6:45:64:7c:33:5d:
         f0:f1:70:c1:e5:6e:aa:53:c1:07:10:77:4f:e7:c3:84:53:ca:
         b4:c9:ba:46:76:4e:24:ed:89:7f:ff:ef:18:fc:60:d8:e9:81:
         e0:2a:87:20:58:61:64:05:92:60:39:04:6b:10:f8:88:61:d1:
         5b:dc:26:9e:7a:0a:28:ee:78:9e:bc:e5:7a:49:4d:48:9d:a5:
         7d:89:71:3f:29:e5:c0:b3:2c:ac:17:7d:b4:b3:71:d3:fd:bb:
         5a:2c:5c:93:6b:40:c9:fc:5a:ac:ea:83:9d:ec:44:45:10:51:
         ed:3b:6f:c3:99:5a:1a:0d:c8:f4:3c:65:8a:55:6e:04:86:cb:
         54:45:06:35:64:65:89:f9:b3:3d:a6:ec:d1:1d:c4:44:84:94:
         c9:9e:c3:8b:dd:64:4d:34:02:78:e2:cb:eb:1e:91:17:27:c1:
         d5:7f:97:9e:bb:3a:fe:64:cd:a2:fb:4b:c7:64:54:91:c6:e6:
         d9:a6:d5:9a:d1:11:c9:59:b4:4a:e9:90:76:80:4b:d3:53:5d:
         43:4d:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net