Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa
File:                     12016b71-96e5-3124-8f79-0266ee8ef00c.roa (raw, json)
Hash identifier:          HkSdhR58d5drHSQUzidSvJI2jEO9PPN2ZBqv+QAyD5E=
Subject key identifier:   F6:24:FE:94:9E:5E:CB:8E:8B:13:F5:56:C7:F4:58:25:02:51:72:6F
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584965E97111CC945A7D365C4640
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     16437
IP address blocks:        192.160.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:71:11:cc:94:5a:7d:36:5c:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=d115cfc7-2c60-4188-9171-5a3a6d3f83a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:ed:cd:0b:50:74:0b:fb:20:7f:95:2d:3e:
                    af:4e:94:9d:c2:72:51:aa:a4:8f:d1:de:8a:bc:78:
                    33:f6:48:b2:bc:b9:e6:80:a9:0f:b7:43:08:1b:51:
                    10:f7:34:ea:35:05:84:81:13:1c:ce:b4:55:94:3c:
                    4f:b3:11:e2:75:51:7e:69:fc:f3:fd:ad:33:1a:8c:
                    d4:5d:68:11:63:5b:7b:c3:18:2f:85:92:9d:15:03:
                    28:58:af:24:26:45:57:1c:e3:69:dc:a8:6e:52:52:
                    31:2d:ae:e9:54:b2:27:15:b2:41:44:ac:69:e1:3a:
                    67:d1:ca:da:3f:ba:b5:2b:a6:a1:46:b0:91:d6:1a:
                    f8:44:62:bd:b5:5b:79:87:ed:b2:ff:48:12:a6:3e:
                    9b:91:6c:5a:28:df:6f:3b:8e:78:ea:a1:7f:9d:54:
                    d3:f7:69:1d:52:a7:f5:b2:d1:9d:6a:74:78:d4:39:
                    51:48:06:7b:3c:e9:53:e1:c0:29:ba:22:52:b6:2c:
                    79:49:98:dd:44:37:47:b6:79:4d:85:ba:ab:03:55:
                    c2:47:74:a9:d1:63:6d:60:ab:98:bd:d7:6d:4c:37:
                    de:aa:7e:d4:50:7a:e2:2d:5f:e9:74:72:e8:fc:70:
                    9f:29:59:e1:10:7f:c2:16:2a:68:a5:1a:82:1d:d7:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:24:FE:94:9E:5E:CB:8E:8B:13:F5:56:C7:F4:58:25:02:51:72:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12016b71-96e5-3124-8f79-0266ee8ef00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:10:c0:7d:f6:ae:3f:c2:e8:25:0a:a2:bf:36:5a:f1:59:9f:
         b6:7f:c2:56:6d:bb:fb:13:9f:0a:60:93:6b:dd:23:f5:a9:0b:
         9e:b7:0c:77:12:5f:2a:28:8e:f0:3f:57:0e:0e:aa:fa:72:9b:
         69:3e:1a:8d:8c:29:d2:a5:d2:ae:8d:ff:a5:2a:6d:b1:a9:e9:
         be:e1:30:c3:b4:8c:35:3e:af:9c:b4:8b:2f:50:9d:b0:64:b2:
         d9:9f:e2:f6:e4:c1:e6:55:76:2b:20:a9:e3:37:6d:58:28:8c:
         e4:80:ac:2f:18:81:35:8d:3e:9f:05:98:4f:71:42:29:c4:64:
         36:c3:93:11:33:fc:a8:0f:17:f2:8f:3b:8a:51:7c:a2:37:26:
         15:e3:4e:a6:ae:15:ff:25:88:63:73:18:80:ba:84:d1:aa:4c:
         95:9d:dd:c7:e8:aa:9d:69:ec:4a:02:7b:a6:7a:62:50:df:5e:
         36:5c:36:31:d1:5c:a4:56:c2:49:58:6f:89:1d:ca:da:02:7c:
         2d:5f:a4:f5:ab:98:fa:e5:96:59:dd:8c:13:16:e9:62:51:f8:
         35:2a:35:e0:5a:64:46:1b:aa:7b:7d:d0:ce:8f:cc:bf:32:0f:
         4d:b9:5d:35:89:43:88:0a:47:8b:fa:c2:3c:7e:12:ad:85:98:
         70:c3:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net