Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
File:                     1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa (raw, json)
Hash identifier:          8x33PS4WSpfA+bSxDl7T9CedhgzmIMr2q6cPkWkMIzM=
Subject key identifier:   77:A6:14:51:76:55:A8:5A:59:8D:85:A2:06:45:40:BC:18:90:1C:C6
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E7DD25811156124E8BC80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        143.198.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:7d:d2:58:11:15:61:24:e8:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=8790e9cd-1f8b-4c45-ac32-abd4d3f5b71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:8c:1f:49:c4:ba:2c:01:35:08:f9:44:de:
                    b6:68:0d:8a:87:e4:f7:66:42:9d:91:d2:71:af:f1:
                    07:20:fd:a1:5f:5d:f7:34:c6:8d:1c:07:9a:7d:3e:
                    1b:23:d1:33:5b:0f:5e:e5:b7:f5:17:2a:bf:20:c4:
                    ba:8b:b8:2e:d2:ab:86:b3:66:83:81:84:50:9f:73:
                    04:c6:27:18:30:41:1a:67:43:90:37:4a:6d:7f:7a:
                    89:ec:4c:2c:e3:3f:a9:62:d0:e7:b0:72:72:89:10:
                    77:68:ff:2c:7f:fb:ec:86:00:8c:be:41:6b:b3:55:
                    a5:1e:a2:fe:5f:1c:92:32:bf:6b:3e:7e:13:7c:e9:
                    af:38:4c:a7:9e:cf:5d:54:f6:3c:e8:5c:e9:31:19:
                    da:7f:02:78:54:4d:1c:49:d8:b1:0d:1d:2a:84:cf:
                    7e:09:ab:0d:e8:fc:48:eb:5c:d4:a6:f4:c4:ec:14:
                    0d:4c:34:1f:1a:40:98:ff:68:20:96:e4:55:c7:10:
                    a4:4d:d0:af:9c:9d:7d:58:31:fe:87:93:43:a4:6e:
                    b9:80:a9:d9:06:7d:31:3a:83:c4:06:06:73:38:e7:
                    26:32:f8:22:06:59:1b:a8:2e:fd:72:5e:3e:aa:1a:
                    d8:3f:06:fc:29:91:8e:fc:41:32:20:05:b8:6d:9c:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A6:14:51:76:55:A8:5A:59:8D:85:A2:06:45:40:BC:18:90:1C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1f6a6e4b-f42d-34bd-b5b6-52b4245c6856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:c5:ae:b2:da:d6:c2:82:83:a1:1c:e3:3a:02:a9:5d:40:
         0a:1b:5f:c5:10:46:c9:71:65:32:98:98:f4:23:c0:25:44:1f:
         8d:51:21:71:7d:06:29:e2:51:1b:2d:45:96:a2:34:de:9d:9f:
         85:34:c2:d6:e3:65:4b:2d:a7:8f:cc:3f:cb:1d:3a:d0:47:b6:
         32:a5:7d:d2:32:24:53:f5:c1:bf:f9:c1:2d:eb:83:6d:60:8f:
         a9:2c:00:d1:60:2b:89:c6:3a:8c:01:28:c5:61:2b:aa:a2:37:
         4b:b5:36:d3:4d:ec:78:f3:df:c6:3e:ff:b1:f5:b3:8a:75:e3:
         73:37:1d:ba:2b:f6:56:b9:fc:81:20:3d:07:f2:16:b5:2b:d1:
         cb:c7:22:73:5e:70:16:7c:30:ab:42:b1:2d:99:c8:cc:94:bd:
         5c:c2:3b:80:44:1e:05:42:98:6e:d9:7c:03:a4:57:47:b3:3c:
         93:8b:64:66:48:d2:b1:49:d0:17:f5:89:e1:00:0b:41:9f:88:
         88:08:db:22:cb:c6:39:ef:12:7c:85:67:3e:19:13:3e:18:87:
         a0:42:4e:1f:56:25:99:ce:5f:51:a0:08:c0:f7:7d:2c:6a:e2:
         a4:6f:3b:4a:ba:75:17:93:b8:59:21:28:68:56:a1:81:e8:f0:
         5b:52:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net