Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/fdd3de26-1c9b-3775-8ee1-8381eb5eab99.roa
File:                     fdd3de26-1c9b-3775-8ee1-8381eb5eab99.roa (raw, json)
Hash identifier:          Ol//28OgSaX4Xd3xuDZfTLf/CwTt5RSlqk2yNb6lhG8=
Subject key identifier:   E6:25:B0:F8:23:CB:1D:2D:AC:46:0E:BD:8F:E8:83:08:5B:52:0F:D2
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F432858496573DC27AEF22BA4B0A8DF00
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/fdd3de26-1c9b-3775-8ee1-8381eb5eab99.roa
Signing time:             Wed 02 Apr 2025 21:03:55 +0000
ROA not before:           Wed 02 Apr 2025 21:03:55 +0000
ROA not after:            Tue 01 Jul 2025 21:03:55 +0000
asID:                     398465
IP address blocks:        64.29.88.0/24 maxlen: 24
                          64.29.93.0/24 maxlen: 24
                          66.180.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:73:dc:27:ae:f2:2b:a4:b0:a8:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Apr  2 21:03:55 2025 GMT
            Not After : Jul  1 21:03:55 2025 GMT
        Subject: CN=de3ffbb9-1091-4bd4-b3e7-35491afb9f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:df:34:14:c2:f5:13:2b:4d:68:70:ce:ed:
                    5d:0b:a6:71:b1:a6:5f:14:a8:11:f1:b8:22:e0:6e:
                    64:d7:b9:63:9a:4e:e0:bf:e7:0b:dd:94:94:6f:4b:
                    19:41:8d:e4:b6:36:10:7f:65:43:d3:75:5b:d7:d5:
                    4c:fc:79:a6:d2:cb:80:d2:fb:c1:d3:d0:d3:7d:2b:
                    06:7f:f6:7c:f0:c9:61:35:d0:cb:3e:cf:f5:87:97:
                    d6:cd:08:f7:b2:97:9e:e4:a0:5b:df:d0:52:78:58:
                    a0:73:3f:ef:8e:b2:b0:a7:9b:61:95:3e:58:72:41:
                    e5:35:f1:98:d0:88:b8:96:1c:b2:8b:ad:28:bc:77:
                    d3:f6:81:99:40:d9:17:27:9b:88:38:78:15:32:32:
                    73:ea:21:24:74:7d:d9:76:b1:4d:dc:69:f2:ad:3b:
                    8e:9f:5a:5f:b7:74:31:aa:b3:f9:fb:8d:45:21:7e:
                    cc:62:7c:ad:17:99:21:6f:84:d5:d3:9b:d6:86:39:
                    8e:a5:35:d0:71:56:9b:63:7f:7e:7f:68:54:3c:be:
                    22:1f:f3:21:01:dd:b9:33:ff:d0:47:51:f9:af:4d:
                    23:ab:63:1a:f0:87:e0:1c:72:e2:51:28:b9:64:08:
                    17:22:53:c6:e2:e5:f4:e0:12:0b:6f:cf:72:6b:9f:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:25:B0:F8:23:CB:1D:2D:AC:46:0E:BD:8F:E8:83:08:5B:52:0F:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/fdd3de26-1c9b-3775-8ee1-8381eb5eab99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.88.0/24
                  64.29.93.0/24
                  66.180.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d7:71:7c:48:f3:3e:cb:35:eb:44:a8:60:18:01:f5:52:7b:
         06:d2:31:68:e4:5e:11:78:59:04:d5:5a:46:11:80:35:c9:0f:
         7f:38:41:c0:57:0e:99:90:27:b9:6b:54:ed:1e:72:b5:06:22:
         f7:11:57:0f:89:6c:e0:f3:d5:80:8a:21:63:cd:12:20:a6:42:
         6f:e1:36:21:65:b4:b8:08:70:fe:ea:98:90:c6:e0:86:b2:e0:
         02:e5:36:9d:22:80:e7:28:5b:38:dd:0f:c5:a7:84:9e:ad:f5:
         7d:71:62:44:3b:d2:db:a0:9f:22:33:f0:47:1b:79:12:f1:33:
         18:9f:c2:6f:05:d0:90:8d:01:6e:55:26:08:d6:ac:6c:2a:ff:
         d7:e9:ab:64:f9:32:32:d8:0e:ce:be:f7:21:52:e9:39:d4:d1:
         a0:fe:03:f3:32:97:e0:4f:62:8e:33:02:b4:87:46:89:64:a2:
         14:aa:15:49:aa:a4:5d:f0:ec:83:3a:4f:78:80:d3:1e:75:4e:
         5f:5c:4b:77:24:50:6e:d7:49:22:ef:37:c2:65:e0:e1:f1:ff:
         90:19:ee:ef:87:aa:b2:e7:88:f1:a8:48:46:16:f8:49:a8:fd:
         d6:4b:bc:57:d2:1b:52:ec:61:ca:00:b4:30:17:0a:52:80:73:
         40:b5:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:42 2025 by rpki-client on console.sobornost.net