Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
File:                     507729c2-e423-364b-9ad4-8254769227ae.roa (raw, json)
Hash identifier:          tSv4e/XwHHexKaN3d/zoTIkiqtrrfKD7RJLQiMASPQQ=
Subject key identifier:   57:08:30:5F:4B:C0:22:6B:B3:B7:7E:A2:28:CB:CA:43:8C:6A:A7:7F
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584955294FB05DFEE61F5D0EC180
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     54004
IP address blocks:        64.84.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:4f:b0:5d:fe:e6:1f:5d:0e:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=48a4e9a5-a529-42fc-8109-a960a0b5051c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:41:1a:ed:87:d0:a7:9c:c8:13:9d:45:ac:
                    75:ff:80:65:b7:f0:9d:af:0e:73:f6:32:7c:cb:3c:
                    0f:10:01:e9:52:76:ab:01:6d:e7:ad:a7:84:e0:52:
                    a8:97:f6:0e:08:56:27:1d:98:55:09:7a:12:36:48:
                    92:bc:58:ff:f3:8a:5f:21:b7:ed:bd:af:cc:e9:e4:
                    9d:e5:ef:8a:c9:1f:4c:4b:be:e4:dc:6e:1d:b1:dc:
                    e1:75:d8:ed:a0:a4:ea:e4:f1:95:1c:1d:ef:10:d3:
                    79:93:76:9e:71:a4:7b:64:e6:0f:9b:63:af:ec:a2:
                    62:80:b2:6d:c2:34:bc:07:bc:46:09:1c:1c:fc:3e:
                    ea:25:2b:ae:37:01:4a:95:d9:ff:14:67:56:aa:85:
                    cb:36:e2:db:46:14:56:76:1d:ea:65:d4:d8:e6:9c:
                    fd:de:c8:fa:0a:47:ea:62:cf:1d:76:3a:b4:c3:0d:
                    b5:eb:e5:e6:06:fa:bb:a1:1b:06:c1:2b:4f:06:1e:
                    af:c3:76:8f:5a:85:8e:4c:0b:08:c9:6c:fd:67:90:
                    b1:14:de:bf:c2:5b:55:57:90:92:b6:0e:f6:db:9f:
                    c2:55:8b:f3:bc:35:c5:59:a1:68:52:d0:7d:0c:05:
                    0a:e9:69:b4:04:0f:d4:56:f2:c8:60:60:b2:c9:61:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:30:5F:4B:C0:22:6B:B3:B7:7E:A2:28:CB:CA:43:8C:6A:A7:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/507729c2-e423-364b-9ad4-8254769227ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:47:55:11:cf:1d:5d:3a:a7:75:32:96:6f:44:4e:1e:65:
         e5:d2:af:4b:d9:f8:5f:91:e0:c3:1a:bb:c3:d3:6e:fb:42:51:
         cf:1d:8b:4e:15:ca:5f:70:a8:53:5d:07:73:aa:61:95:fb:ba:
         d1:47:f4:c0:a9:64:3a:8a:af:25:87:95:53:4d:c9:5c:12:1f:
         c1:bd:55:ee:73:f6:83:e0:70:12:be:1f:22:e9:ae:02:a6:8e:
         fa:37:1f:32:76:cd:f4:95:c3:b0:3e:2e:5a:6f:9a:d9:61:46:
         21:1d:6e:d3:cf:48:fb:3f:b6:15:30:88:24:82:31:3f:51:c5:
         82:1e:fd:fa:19:c5:2b:d6:16:66:f2:18:8f:33:67:95:52:8c:
         d8:7f:69:93:96:79:51:b6:05:b4:55:c2:c7:e8:19:f1:c6:c4:
         6d:1b:fe:c0:5c:53:68:a0:b8:a3:b3:74:34:77:22:f7:40:f3:
         87:98:e9:92:e5:f9:da:63:7a:88:bf:a3:56:7c:cd:d0:48:ff:
         e9:5e:bc:88:7b:26:b8:48:59:94:46:6b:c0:0a:26:59:12:54:
         3d:2b:46:01:f7:fa:a7:93:d4:58:bf:e9:aa:08:5e:c6:0e:2f:
         93:9c:32:7b:ee:06:ba:3b:62:29:07:98:b0:e2:a0:c6:4b:fa:
         85:28:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:37 2025 by rpki-client on console.sobornost.net