Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0132a797-4c74-3407-ab7c-c4d343cdfa7e.roa
File:                     0132a797-4c74-3407-ab7c-c4d343cdfa7e.roa (raw, json)
Hash identifier:          bAnGR7uC6W9ZUTIU6G+yNSqhzPM8pGhHLAXao1TQSWM=
Subject key identifier:   0A:C7:72:9A:A5:87:FF:A2:51:DE:5A:FC:EF:3C:14:1E:4D:CB:BC:61
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA485253C8CEDB96A35B100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0132a797-4c74-3407-ab7c-c4d343cdfa7e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.59.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:85:25:3c:8c:ed:b9:6a:35:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1034cb28-a8bc-4d9e-bf86-6d8f7b91a01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b4:ab:53:9a:87:bc:08:6f:bd:f5:97:0d:fe:
                    a1:3b:8a:5a:04:ae:d5:2c:16:45:9e:bd:61:6b:2b:
                    53:94:d4:b5:78:80:47:80:2a:b1:01:09:14:65:81:
                    80:8e:63:96:17:83:f4:39:18:d4:d1:32:1f:c3:e2:
                    91:58:f6:02:8e:1b:6a:c7:7b:7e:4f:20:25:b3:fd:
                    dd:ad:07:30:bb:e4:5e:8e:98:d0:3a:de:4a:e7:aa:
                    ff:35:b7:26:d2:47:92:b2:4b:ab:1c:68:7e:99:1a:
                    f0:4c:6b:41:b5:fb:3d:75:49:f0:a6:94:b2:70:29:
                    96:67:3d:51:bb:f5:7b:4c:09:6d:17:1e:77:3e:25:
                    8d:a6:ea:69:32:1b:bf:aa:67:70:b0:7b:48:64:00:
                    fb:1f:d8:05:d9:b0:6f:67:df:5e:19:a4:70:a6:0c:
                    f6:a5:0c:9a:a1:ea:2e:83:50:32:bb:01:9c:e5:5a:
                    af:07:e9:25:ed:2c:67:3e:7e:c8:f2:4e:03:3e:d1:
                    95:e4:5e:d2:aa:99:09:64:a9:7f:a1:75:1a:33:9b:
                    66:eb:26:b1:c0:77:b2:28:1c:ec:a4:2a:9e:ae:47:
                    c9:bb:56:f1:24:e6:a4:85:7e:78:0a:ee:a8:56:5c:
                    08:00:2b:f3:13:c7:d5:71:4d:c1:60:45:49:c1:7e:
                    27:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C7:72:9A:A5:87:FF:A2:51:DE:5A:FC:EF:3C:14:1E:4D:CB:BC:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0132a797-4c74-3407-ab7c-c4d343cdfa7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.59.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e1:77:a7:51:0e:48:1c:7d:4d:c6:0e:88:df:01:59:9d:47:
         82:fc:3a:65:ee:16:93:14:d4:82:22:a3:08:14:dd:36:db:17:
         ac:38:95:ef:5b:47:59:d2:03:92:38:46:f9:20:a3:20:cc:b7:
         5c:12:5b:cd:2e:e4:a7:bf:96:c3:42:3b:e9:c3:a8:8e:b0:88:
         ad:7a:aa:a6:d7:83:02:5f:72:e9:8e:99:c2:15:cf:a1:ec:10:
         5d:b8:01:17:20:b4:de:84:cf:76:66:d9:e1:b6:15:b2:b6:aa:
         65:f6:85:be:1c:a8:ad:b7:38:9c:e6:68:c5:3c:0f:31:bc:0d:
         75:a3:ee:b4:a4:2f:0d:60:10:b7:fe:7e:ef:d5:b8:cb:17:ed:
         99:fb:88:69:71:21:8e:25:8b:cc:7c:04:48:c6:5c:10:ad:54:
         73:4c:33:d8:d1:4c:bb:b4:5a:44:78:32:8c:c0:3a:db:3e:40:
         c3:d2:21:8b:7f:1b:bb:cc:52:96:85:3d:d3:d9:d7:92:d3:66:
         f5:a6:c6:cf:1e:9f:78:76:8b:03:f4:bf:7a:7a:4f:8f:8c:54:
         5b:4c:93:f2:97:ea:bd:e0:6a:dc:bb:27:6e:85:91:80:f1:18:
         4b:e5:bb:46:53:79:b1:d3:f9:63:36:1f:94:0d:24:e7:85:0b:
         a3:8b:1e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:50 2025 by rpki-client on console.sobornost.net