Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04de1de-fe5d-3fe8-bdeb-6c43fbd9e757.roa
File:                     d04de1de-fe5d-3fe8-bdeb-6c43fbd9e757.roa (raw, json)
Hash identifier:          IRO6GGYhShYNmI8AuyrDA3nY/rUfG0sFnm8wx4UZc+Y=
Subject key identifier:   76:43:CA:BC:4A:11:EC:FA:E4:4A:0C:8B:DB:04:15:F0:BA:E6:29:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA531D47EF35CA12F416840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04de1de-fe5d-3fe8-bdeb-6c43fbd9e757.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        71.195.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:31:d4:7e:f3:5c:a1:2f:41:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=5e26217c-2802-4b19-9db6-adcb3ae4d61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d4:cc:d9:51:9c:d6:ba:75:07:53:f1:d3:c7:
                    eb:24:c0:cb:03:c9:4a:8c:4c:b1:33:71:76:e1:1f:
                    02:91:f5:1f:7b:b6:8d:02:fa:fc:84:06:a9:ad:db:
                    fa:66:a8:27:7a:10:c3:06:02:6d:93:f1:d0:7e:a1:
                    b3:f4:80:e2:82:72:07:e9:a0:49:8f:ed:50:72:ab:
                    4f:a3:36:6f:a1:35:33:9f:90:c8:22:2e:cd:85:b5:
                    e1:5b:10:61:56:9f:35:5b:06:11:d2:20:35:95:5b:
                    18:4a:22:49:36:e3:5e:82:48:1d:1f:34:22:6f:25:
                    41:0c:35:f9:f4:4d:ce:33:8c:16:3f:7d:68:6b:bd:
                    70:c4:7e:ec:f0:dd:75:2d:3f:20:53:27:26:74:63:
                    3b:84:b4:5d:bf:de:f0:30:43:eb:ed:be:c0:d6:38:
                    08:85:53:1a:03:01:07:94:08:64:7b:6d:8f:5a:e9:
                    75:e3:dc:37:19:63:99:ae:ca:24:49:12:bc:0e:86:
                    3b:f6:3a:fa:8e:07:e3:e9:eb:5e:01:d2:f6:ae:50:
                    19:be:35:ef:8c:03:bd:96:ff:53:b5:a2:0d:bf:4d:
                    aa:b5:05:7c:4f:fd:cf:1b:4e:4f:c9:d2:0a:25:e3:
                    25:0a:b1:6c:48:7b:c7:cd:93:b8:17:e8:86:d2:ca:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:43:CA:BC:4A:11:EC:FA:E4:4A:0C:8B:DB:04:15:F0:BA:E6:29:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04de1de-fe5d-3fe8-bdeb-6c43fbd9e757.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.195.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:aa:96:ba:a3:fd:80:87:2e:cb:60:dd:96:a1:ec:0f:75:
         4a:97:d9:7e:5d:ed:38:5a:2e:25:c8:0a:27:6f:ee:cc:6a:fd:
         15:52:95:44:b0:99:f6:a4:57:89:5a:9e:d9:d1:dd:ae:81:a4:
         96:45:1b:7b:17:f2:37:ad:f5:6f:3c:88:12:b3:de:ab:3f:5a:
         dc:0b:40:6d:ba:87:52:2e:61:e5:77:76:9e:3a:4c:a8:58:62:
         58:c3:53:1e:a4:9e:7b:c6:63:fb:37:b5:e2:3c:3d:a0:32:5d:
         25:08:71:e2:c4:77:ed:57:35:2a:2b:e4:07:92:71:81:fd:d4:
         55:50:95:9d:f2:f4:7f:20:6a:c2:68:b9:b4:96:4c:9a:8a:53:
         27:cc:ce:72:a1:7f:0d:f7:22:8b:84:45:a3:36:c8:89:e9:d6:
         f7:cc:34:04:ef:3e:26:f2:f8:52:8b:9f:1a:fb:e5:54:3c:b8:
         f4:bf:2a:d0:0f:0c:c4:ea:86:e4:4e:06:6c:78:35:78:f6:d9:
         71:fc:d2:76:84:b2:94:fa:31:bb:83:a2:61:5d:cd:8e:2c:08:
         ba:01:77:46:e2:ab:0a:e2:56:ec:6b:bf:e2:a5:42:16:7d:5a:
         48:70:69:22:4a:b8:f7:86:5a:58:8e:af:12:70:cd:e7:fe:d6:
         15:a8:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:14:30 2025 by rpki-client on console.sobornost.net