Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/5977a25c-e719-3f95-8196-c5ed258a76f4.roa
File:                     5977a25c-e719-3f95-8196-c5ed258a76f4.roa (raw, json)
Hash identifier:          sbfWpSb3rUj5hHvDsIElp6HOQVQj1ne2mNsFve0NLoE=
Subject key identifier:   98:D5:70:62:EB:5C:1A:A6:43:6E:8D:4F:B1:8F:B3:67:55:91:74:7E
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F432858494E2EAB6F71F23EAE02D6AF80
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/5977a25c-e719-3f95-8196-c5ed258a76f4.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        164.55.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:ab:6f:71:f2:3e:ae:02:d6:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=bb9d0ba7-2ad8-4bdf-a74e-4eb14013b858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:aa:12:26:97:46:42:2c:48:32:61:34:37:0c:
                    a3:9e:d7:23:e6:62:48:e4:e7:0a:77:27:c9:2b:20:
                    ba:9f:f6:c3:ed:3d:b4:fc:d8:92:80:fe:f1:47:8b:
                    89:7a:e0:d1:61:1a:c6:d4:07:a1:55:21:a8:a2:ea:
                    7d:cd:33:61:1c:ce:bb:39:cc:b5:ba:aa:c9:88:cd:
                    5d:a2:58:f1:8c:5b:da:c4:83:10:99:6a:00:45:7c:
                    af:0d:7b:79:c8:a7:75:cf:b9:5d:57:33:da:e2:08:
                    cb:7a:24:51:37:e1:00:67:b4:55:23:78:84:b4:5a:
                    e2:50:3b:9a:f9:50:71:0c:53:72:9f:7b:3e:2d:d8:
                    78:1e:37:57:17:12:47:87:f2:51:d0:e5:5d:f0:61:
                    8f:a6:43:df:38:2b:14:e5:4a:d2:35:7f:60:02:cd:
                    60:d7:06:11:d3:19:cb:84:95:fa:a4:1f:e5:6b:41:
                    40:ce:b3:96:ff:98:82:d4:f7:dc:e5:d5:bd:4f:21:
                    25:e8:db:5f:98:a5:5e:0f:f8:0b:1b:b8:64:22:8b:
                    e4:38:07:ab:93:b4:1c:a4:10:0c:ef:3b:e7:15:51:
                    05:14:d5:63:c2:2e:d4:a2:e3:5c:51:b8:51:22:c6:
                    ac:f3:cf:5e:cb:54:4b:c0:7c:c7:f3:24:e3:47:55:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:70:62:EB:5C:1A:A6:43:6E:8D:4F:B1:8F:B3:67:55:91:74:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/5977a25c-e719-3f95-8196-c5ed258a76f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:c4:6e:03:05:60:2f:2c:8d:b1:6e:01:f6:f4:89:ec:08:
         90:a2:d7:47:2f:91:1d:3c:b4:15:8a:8b:a7:7c:c4:74:74:57:
         e7:17:6d:a2:32:b3:5f:81:2f:0c:a9:3f:c0:12:71:63:23:1c:
         82:4a:55:77:76:c1:16:ac:1e:f4:55:9e:1c:99:0d:11:5d:9a:
         36:63:be:32:40:da:ed:ab:36:9a:ea:e0:49:8d:6b:61:24:dd:
         61:29:47:3b:1c:ae:d9:7f:3b:31:d2:05:17:2e:6c:e9:fb:42:
         e2:a4:86:d3:ef:8f:e3:58:2e:ec:b4:c3:ab:9b:43:83:b7:e4:
         01:b2:ed:0f:0a:0b:58:a6:ff:6e:ec:43:2f:83:df:d7:d0:06:
         90:cf:1b:79:3c:e6:8d:82:76:89:1d:86:c7:55:d6:60:0d:cd:
         23:19:68:b7:51:a3:e6:c6:09:3f:f7:b5:ad:c8:39:7d:e7:b9:
         26:21:5b:ee:ab:38:18:64:10:c7:94:aa:0e:ba:7d:df:2e:0d:
         b8:fb:6d:fc:29:66:71:6c:05:fe:c3:97:d4:2d:05:a5:99:65:
         75:20:c5:d9:76:68:ee:40:81:d1:8a:40:ec:d6:d3:d5:c7:57:
         1b:c4:ab:e9:b8:0e:d5:cf:17:8b:2c:a4:9e:fe:28:23:04:1a:
         03:66:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net