Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/c69e8524-f253-3426-912c-d639bc181611.roa
File:                     c69e8524-f253-3426-912c-d639bc181611.roa (raw, json)
Hash identifier:          kROtixdyNlFXL7FCE8+UMGq9HUN9VzKUvSRrMjiy924=
Subject key identifier:   BF:93:25:30:CE:B5:0F:AE:77:4A:EA:2F:BB:A1:7D:A2:B2:A8:D3:54
Certificate issuer:       /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
Certificate serial:       010D0C9F4328584981D45343998618116ADD8700
Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/c69e8524-f253-3426-912c-d639bc181611.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     14618
IP address blocks:        168.203.5.0/24 maxlen: 24
                          168.203.6.0/24 maxlen: 24
                          168.203.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:53:43:99:86:18:11:6a:dd:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=d49ed7bd-6989-4777-aec5-4633fda8feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:ec:ed:39:31:36:98:6a:11:e6:80:dd:02:
                    b9:75:5c:9f:33:bd:e5:a5:a5:d8:c8:d7:15:71:c7:
                    f7:4d:7a:59:c8:9e:31:17:b7:81:9f:bd:5b:06:64:
                    ea:67:78:ab:9f:1d:88:78:15:ea:71:61:ab:47:dc:
                    43:12:e3:9b:3d:f1:fa:89:1b:5f:35:72:c7:ff:b2:
                    78:0d:97:c1:c4:39:ab:8a:32:56:22:f8:29:a8:6b:
                    11:58:3f:ec:0c:0d:9c:bd:4f:2d:88:b2:1a:07:64:
                    b1:78:46:cb:49:60:04:42:0a:2a:70:a2:fe:46:c5:
                    e3:67:c5:18:49:6c:9e:b6:36:21:6f:97:89:35:72:
                    de:f3:7f:ee:c3:23:88:39:d8:1f:84:0a:c6:0b:93:
                    89:88:f2:99:f8:f3:c0:aa:3a:ae:12:d0:0b:26:cb:
                    c3:71:43:50:da:09:c4:4e:a4:7e:4c:dd:c2:72:f0:
                    b5:0b:8b:46:c3:c6:09:64:32:e3:e8:4a:bc:2e:73:
                    8b:d2:cb:ef:d6:c4:96:59:b1:8a:bc:5b:8c:ee:a8:
                    90:9e:5c:98:d6:a5:4b:ea:25:1f:08:16:ca:de:6b:
                    39:45:e2:f7:9c:ea:d6:6c:ed:50:69:24:14:fe:f0:
                    7b:e8:dd:e3:13:7f:fc:ac:a6:0f:f1:91:20:f1:e0:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:93:25:30:CE:B5:0F:AE:77:4A:EA:2F:BB:A1:7D:A2:B2:A8:D3:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/c69e8524-f253-3426-912c-d639bc181611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.5.0-168.203.7.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:88:15:1e:c1:72:08:8f:0f:4a:31:51:b0:04:62:d5:14:e7:
         d2:4c:fd:bf:b4:c2:68:05:55:10:86:98:50:0c:2c:bd:31:5f:
         a6:25:65:41:52:b4:4b:d8:fc:83:b0:6a:2d:9f:9e:30:7c:41:
         70:9c:29:ad:ca:2d:f7:1a:dc:fb:5c:85:7e:de:66:16:26:b6:
         a1:a2:64:57:ff:b3:b8:6e:e2:99:eb:61:78:e5:8a:5a:cc:5b:
         1c:7a:99:d7:1f:67:44:89:25:6c:19:91:01:56:95:0e:0a:60:
         7f:9c:75:67:7b:37:0a:36:96:25:f0:fb:d5:cc:00:f9:3b:5e:
         1e:1e:13:94:3b:5f:c0:3f:23:1a:19:d7:7f:a0:8b:8c:d9:01:
         5a:ed:66:8d:96:aa:1a:91:6a:7f:3d:7f:bf:a5:c9:c9:e5:ef:
         84:ae:dc:14:88:81:17:f9:50:4e:1b:81:b6:b2:5f:86:58:b5:
         90:6c:18:69:f4:13:93:b4:0a:39:50:7d:44:25:35:1c:3a:0f:
         0a:dc:f3:5c:0f:1a:3c:b4:50:4d:0e:b8:e8:cf:c2:2b:60:ee:
         2a:e1:ac:df:86:ed:8a:25:60:1b:03:8a:41:69:e1:0c:3f:54:
         76:c6:e0:5c:72:8a:34:19:d7:ea:5b:91:9b:cf:04:1e:b2:bd:
         b1:aa:10:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net