Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7af4ef35-f90e-39e3-9ec6-496e0e07261e.roa
File:                     7af4ef35-f90e-39e3-9ec6-496e0e07261e.roa (raw, json)
Hash identifier:          B3LU05osa5bX5glGJr4mgZp88M3bVtDhbNQxVwgt0xw=
Subject key identifier:   D3:77:4B:B7:88:7C:27:F6:35:98:46:60:52:AD:6B:5E:6B:5A:14:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA65E983A93DC79B41A1700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7af4ef35-f90e-39e3-9ec6-496e0e07261e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        96.108.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:5e:98:3a:93:dc:79:b4:1a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=172e9a42-bd25-4cd3-9c4f-ae971c10cc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:00:fb:97:67:84:e9:40:93:2b:d2:92:e6:
                    8b:10:e2:3e:98:f3:e0:76:4b:0b:08:17:75:a3:9f:
                    47:b2:ac:33:29:22:03:64:60:88:f0:57:23:f4:c9:
                    89:44:f5:4c:b0:00:9c:65:b4:79:3f:c7:3b:c8:ab:
                    0d:1b:6c:d9:08:8f:97:16:fa:8c:76:c7:c3:1b:0e:
                    f6:13:64:7c:d1:f8:50:60:a2:f1:23:83:f7:1c:74:
                    ce:34:f2:ba:44:6c:79:00:98:98:2e:02:87:18:db:
                    c2:12:bb:6e:73:97:c0:2c:a8:a0:cf:e1:b9:55:62:
                    23:bf:00:8d:30:68:a4:7a:af:8b:9b:c6:54:71:1a:
                    cd:85:0d:2e:65:76:ac:39:ec:66:2c:c8:c6:8a:f6:
                    1c:f1:61:b8:e0:a6:b7:3f:68:37:f1:c5:c8:10:7c:
                    2c:c0:2d:2c:41:c4:27:e9:b6:e7:cb:71:c8:7e:c0:
                    7b:94:a5:e7:28:da:14:e9:4f:61:d7:8f:6d:eb:c9:
                    26:1c:6d:03:b1:f1:3d:b0:36:1b:ba:4d:37:b2:0e:
                    97:6e:64:72:5d:4c:8b:0e:4c:fc:f6:6c:79:0b:63:
                    40:fe:e6:05:93:df:e4:b5:81:33:14:2c:65:13:81:
                    a7:cb:ba:c3:46:56:44:8b:14:4c:c2:ea:45:0b:3f:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:77:4B:B7:88:7C:27:F6:35:98:46:60:52:AD:6B:5E:6B:5A:14:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7af4ef35-f90e-39e3-9ec6-496e0e07261e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.108.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c4:6c:a0:94:cc:33:eb:40:ea:0f:cc:ed:3e:24:5f:b7:23:
         66:a4:f4:be:df:c9:eb:92:45:cf:15:16:f8:ba:99:28:ee:73:
         d7:3d:2b:93:09:c5:18:cb:b2:17:0a:6e:cd:e4:45:e9:e5:93:
         a0:14:49:61:fb:a1:e1:91:62:50:e4:14:3c:6e:53:f9:fb:b9:
         72:30:9c:d0:cc:77:ac:1b:8d:d7:16:a7:00:e2:42:aa:2b:30:
         f5:cb:de:f3:7d:d4:21:3f:12:30:c8:97:4a:eb:b4:52:43:18:
         6f:25:c9:4c:bc:31:d9:80:56:46:24:fb:18:b7:79:b0:d2:70:
         75:e1:c2:ec:99:55:9f:1d:3f:27:60:a0:8a:e7:cf:18:a0:d4:
         8f:56:eb:6a:f1:72:93:2d:04:4e:33:8c:65:38:1a:41:f5:c0:
         4d:25:e3:4d:60:f1:42:25:09:59:7a:65:4f:d8:a4:74:eb:55:
         24:05:d5:c2:48:88:31:87:f8:bf:92:34:54:32:99:6e:b2:c2:
         ee:e4:3a:e5:cd:e7:c3:e4:a9:eb:bf:95:49:01:94:8d:ba:03:
         2c:40:80:0d:3e:e8:45:6a:3d:76:5e:0b:11:de:60:ad:ed:2f:
         61:4b:b6:5a:56:e8:9d:01:85:6a:ce:81:ba:e3:e7:e9:47:bb:
         66:5a:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:52:36 2025 by rpki-client on console.sobornost.net