Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa
File:                     39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa (raw, json)
Hash identifier:          Xd2eL8ByoZG5GFy/Eh/RvUXpNJKxV/il8n2AWU9F86s=
Subject key identifier:   5F:7F:3B:D3:5F:0E:44:0C:D5:69:94:36:61:89:20:73:52:03:78:70
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858490BE760F771E9553B1D475F00
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa
Signing time:             Sat 01 Mar 2025 19:13:55 +0000
ROA not before:           Sat 01 Mar 2025 19:13:55 +0000
ROA not after:            Fri 30 May 2025 18:13:55 +0000
asID:                     14618
IP address blocks:        137.184.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:e7:60:f7:71:e9:55:3b:1d:47:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar  1 19:13:55 2025 GMT
            Not After : May 30 18:13:55 2025 GMT
        Subject: CN=e9502add-9369-4a7e-9490-c29d5ce820c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:67:b7:b2:89:d2:40:61:d4:e3:76:12:dc:
                    70:20:01:8d:9e:ce:d6:92:ae:b1:b8:67:5e:5b:9e:
                    98:59:36:ba:a9:9b:42:2d:f6:18:aa:03:2b:88:b8:
                    0e:4c:e7:63:bd:ed:a6:62:f6:7b:c4:55:da:56:14:
                    e6:a5:45:a3:d3:eb:1f:f5:8d:da:0b:c8:35:30:9d:
                    ec:cb:44:31:68:0c:5a:01:05:59:b3:8c:f6:ff:bc:
                    8c:1e:07:4a:a6:ae:71:8d:2e:4e:7b:44:cf:eb:90:
                    7a:ea:86:aa:cd:47:f3:19:f4:c6:0c:5d:7f:e9:4a:
                    74:43:58:b0:b6:58:a7:d0:e4:f4:a2:18:07:42:41:
                    69:de:30:b2:35:e2:dd:1c:1a:67:69:d6:ba:9d:af:
                    a5:bc:69:18:ef:e4:3a:c8:8f:d3:23:23:ee:15:90:
                    d6:f9:f3:d2:d1:72:a8:15:15:90:bf:fd:86:9b:ca:
                    9b:92:6b:4e:49:44:47:26:bb:f7:2e:06:bd:4c:af:
                    43:35:44:ea:7b:cb:47:c2:df:7f:bf:c4:43:55:54:
                    5e:5d:d3:33:72:0c:fa:30:27:1b:0c:5e:1e:3d:68:
                    67:d8:8e:90:5d:33:a1:c5:5a:9c:67:cd:0a:cb:f3:
                    d6:f0:d6:1a:74:79:40:dd:1c:bb:c0:52:3a:d9:34:
                    82:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7F:3B:D3:5F:0E:44:0C:D5:69:94:36:61:89:20:73:52:03:78:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/39ec9af8-8fa7-38c0-9d93-ae0c1c1350f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.184.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:36:2a:3d:9a:a3:22:e1:f8:28:1c:d6:71:68:65:2e:65:
         8c:bc:76:73:6a:d8:f4:b3:5b:79:2d:59:ce:44:6e:86:b3:c8:
         a2:35:b7:bd:f9:91:d6:e1:06:bf:ba:df:6a:c7:98:a5:44:bc:
         67:bb:11:0c:7f:f0:44:34:5e:e5:3a:ad:f1:f5:cc:6f:49:36:
         ac:24:ff:b5:c8:03:6f:d2:ca:f3:7b:61:ef:25:3d:b5:d4:6a:
         4f:4d:4d:6e:f1:20:d2:c8:3a:20:5c:62:41:2b:9c:15:e0:de:
         87:61:da:3b:58:fe:53:8d:69:3b:ad:80:43:f0:a4:8e:f7:86:
         51:1c:21:e1:ac:e5:8a:48:61:7b:fb:55:da:2b:36:3f:60:af:
         6f:0a:b3:39:f6:8f:ca:cd:2b:c1:96:0d:89:f3:c7:6a:a3:f0:
         72:28:8b:99:35:f3:6a:ff:d1:a9:72:34:a1:70:fa:93:b5:69:
         23:ab:d6:52:02:6d:62:fe:c4:49:c5:cd:58:8f:54:0e:a0:33:
         17:94:84:83:11:2f:f8:f7:92:06:c9:ba:7e:10:27:53:df:1b:
         85:c0:de:41:60:67:a5:04:82:fe:b1:5c:39:c2:db:26:16:b9:
         ac:17:04:ab:32:84:31:79:eb:0a:73:b4:e7:7c:2f:6f:a5:8b:
         4b:51:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net