Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa
File:                     5fd740b0-36b5-3924-ab89-baf72be4370e.roa (raw, json)
Hash identifier:          4j0hT9rvD/Cn+5TGuVke+uWqeGOLo7M3x5Hgii5tTdo=
Subject key identifier:   E1:59:20:4E:98:22:72:35:5C:6C:82:7E:1E:BB:E0:4C:B3:D6:70:34
Certificate issuer:       /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
Certificate serial:       010D0C9F43285849754460E793FAC68D497D3740
Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     63199
IP address blocks:        148.153.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:60:e7:93:fa:c6:8d:49:7d:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=27a58702-c773-4031-ba7a-adf9c7aba677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:ba:5d:33:4f:93:7d:6d:a8:59:42:32:2f:
                    4e:02:8b:e0:86:c5:9d:bf:08:28:d9:52:ef:b2:60:
                    5e:bf:92:d8:52:f4:e3:5f:c0:ae:4a:82:ae:57:ac:
                    c0:4a:89:38:8a:dc:bf:94:3e:93:1a:c7:67:db:65:
                    82:d5:68:de:f4:06:2a:c8:67:82:8c:0a:27:90:a4:
                    6d:30:5f:9d:ec:91:e6:dd:67:bd:7a:27:c1:4a:48:
                    35:dc:3c:45:07:11:94:b3:f3:a6:60:92:31:75:66:
                    8e:70:25:4c:26:b1:a4:c5:93:01:96:d8:6c:4a:94:
                    e0:b2:cf:b1:dd:a9:bc:e5:04:ea:28:b7:e8:5e:d2:
                    d5:7a:83:8b:01:d8:d0:4e:8d:22:9d:c6:b0:ba:3c:
                    09:d4:91:6b:9a:c8:ab:c3:37:31:8c:45:1f:58:ff:
                    f6:6c:2d:8d:f9:3d:e6:e9:0d:11:56:7b:51:60:89:
                    26:ba:10:f6:74:33:70:5a:10:38:b0:05:94:e4:b1:
                    ba:8e:65:c1:cd:1d:a6:ba:7e:5b:35:70:1c:06:94:
                    60:54:5c:5a:09:a2:75:a9:64:f0:0d:88:78:b5:7d:
                    a5:a2:e3:16:dc:f5:d4:09:44:4d:f4:01:1d:82:69:
                    7d:ce:25:de:68:ca:e9:1b:8e:86:75:60:a7:78:ee:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:20:4E:98:22:72:35:5C:6C:82:7E:1E:BB:E0:4C:B3:D6:70:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/5fd740b0-36b5-3924-ab89-baf72be4370e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.153.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:55:a5:69:1c:3a:6c:f5:d6:03:7e:5e:77:ba:23:0b:4d:
         ba:08:c2:94:2a:9b:0e:49:d2:67:de:e7:41:60:64:98:ac:89:
         ec:b7:08:25:79:9b:d1:d8:da:77:32:a7:7c:89:f8:7c:42:f5:
         47:24:83:d6:ea:0a:e5:13:a3:01:2d:54:71:ac:1d:52:4a:f6:
         28:eb:5d:bf:ec:ba:ee:ef:6c:63:00:a7:2b:1d:a8:cd:b2:18:
         36:93:e7:be:2c:04:69:fc:da:6a:21:c4:a5:3a:85:5b:3c:95:
         3d:96:3f:ef:4e:df:04:90:8e:5f:df:0b:7d:d5:d2:a2:93:af:
         aa:10:76:8a:4f:4a:81:50:8d:c9:6a:f3:35:ee:69:c4:70:5b:
         63:8d:1e:df:ea:d2:7b:4f:41:21:7e:5d:59:03:6a:98:cc:a9:
         72:a3:af:6e:d1:fd:a6:0e:05:6a:f1:51:82:2c:41:1f:b9:f1:
         db:42:42:0c:8b:25:de:ee:bc:31:16:04:d3:5c:75:91:49:dd:
         97:84:41:21:dd:4c:5f:a3:df:34:f5:71:84:1c:da:a5:4e:12:
         33:1e:3c:07:2e:82:6b:90:5b:8b:e9:97:62:00:d7:e4:d0:db:
         f6:24:28:da:9e:4b:23:6e:7e:a5:63:6f:37:e5:ac:99:10:46:
         e1:1f:f8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net