Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
File:                     70def14d-b4f6-3eef-92c8-38c6768c3263.roa (raw, json)
Hash identifier:          mzzbh4aP4VDGfdUgHgKMWkZIdNqdAl/FGGnrLUJSZDo=
Subject key identifier:   69:DD:C8:02:93:7A:42:21:0D:73:4B:90:7B:B3:03:62:EE:6E:FC:12
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858496B7ED47D244A9CF06823D800
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     53488
IP address blocks:        24.246.128.0/18 maxlen: 24
                          64.127.208.0/20 maxlen: 24
                          173.246.192.0/20 maxlen: 24
                          173.246.208.0/21 maxlen: 24
                          173.246.216.0/23 maxlen: 24
                          173.246.222.0/23 maxlen: 24
                          198.185.218.0/23 maxlen: 24
                          205.236.71.0/24 maxlen: 24
                          216.116.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d4:7d:24:4a:9c:f0:68:23:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=eea6584d-aaef-4e7d-aad7-6de4df61ca2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:b5:40:d4:4e:79:bc:ae:a4:d1:b5:67:99:
                    ab:4c:6f:ab:01:7c:52:2b:ad:d8:43:e6:e2:2e:4b:
                    98:d0:fa:ef:8f:29:01:a5:18:53:32:af:93:9a:1e:
                    82:64:3d:ab:dd:e8:d3:14:2f:08:e3:c7:8c:1d:d4:
                    03:64:b2:0d:08:b8:4a:8e:1b:53:e7:a6:41:44:b3:
                    de:40:18:26:17:e4:ff:bf:c0:4b:b7:c7:d6:5f:54:
                    58:21:0b:46:1d:44:cc:91:ea:fa:65:0b:ef:52:1a:
                    98:76:06:8e:89:0c:fd:c7:fe:25:d5:fb:c1:fa:75:
                    03:e7:9d:38:85:63:91:dd:a7:5a:68:53:04:6b:a6:
                    dd:b7:b7:00:6a:4a:f7:39:89:7b:7c:fe:4f:b9:30:
                    85:8e:66:51:ff:c4:f9:0a:4a:61:f8:01:d0:cb:44:
                    69:95:39:da:8b:2f:fc:ae:f0:a8:3a:dc:8f:b1:a7:
                    75:65:22:38:11:32:3d:80:3a:dd:c6:e9:20:1a:73:
                    dd:e7:08:a4:06:43:18:86:5d:81:fc:44:94:53:de:
                    2e:91:e0:f3:61:0b:bb:cb:8b:61:90:8a:46:16:20:
                    a8:0f:1d:1f:4d:fa:55:4b:af:81:da:bd:91:e6:9e:
                    a4:12:1e:4e:61:e1:61:9d:0e:ee:40:05:a6:ce:07:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:C8:02:93:7A:42:21:0D:73:4B:90:7B:B3:03:62:EE:6E:FC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/70def14d-b4f6-3eef-92c8-38c6768c3263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.128.0/18
                  64.127.208.0/20
                  173.246.192.0-173.246.217.255
                  173.246.222.0/23
                  198.185.218.0/23
                  205.236.71.0/24
                  216.116.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:fe:04:d5:58:de:c5:66:6c:6a:7c:c9:ce:2d:92:c1:66:
         cd:1c:0d:e7:01:6c:7b:af:08:d9:f1:dc:12:26:9f:91:bc:6c:
         64:75:c5:9a:b8:c2:ce:ac:52:68:0c:54:90:0d:88:29:cd:bd:
         68:bc:78:f9:0c:8b:cc:e6:14:f3:be:f3:bc:72:fe:79:36:ee:
         12:18:be:0d:0b:f4:71:21:4b:d7:80:9c:29:d5:af:2f:d5:7d:
         87:c4:35:21:b0:3a:bf:df:76:b0:d3:3a:11:77:da:ac:c6:b0:
         8b:b7:f7:08:b9:58:1e:28:13:a4:ca:ac:bc:58:a0:4c:e5:73:
         ed:79:17:f1:48:59:1f:4c:b5:f2:dd:7d:93:07:fa:e7:5d:d2:
         d6:68:b6:bb:42:3a:4b:57:02:5f:42:7c:ab:35:70:34:27:fb:
         7c:ba:d5:91:f9:76:63:b7:72:85:21:2e:ec:c2:0e:3c:25:90:
         23:e0:34:9f:cc:e2:db:a9:d4:00:7d:00:d1:84:1b:23:9e:6c:
         db:75:71:38:69:0f:5d:a6:b5:7c:2a:69:f7:39:eb:09:a9:9f:
         db:30:d6:ae:11:77:84:8f:4e:30:2b:e3:de:d1:7c:9b:6b:10:
         74:40:0f:ab:d8:82:f4:18:94:2b:a3:ad:7c:9a:07:78:20:f5:
         66:6f:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net