Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa
File:                     dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa (raw, json)
Hash identifier:          lGFAhqlzK4wAgeAc15TFNdg2jkCGeDk9hLWJ2mfMSO0=
Subject key identifier:   FC:D4:44:A9:63:F6:CA:F7:98:B5:8C:FD:2C:E6:59:42:5B:79:6A:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4F2C7779A216EEB056C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33652
IP address blocks:        68.86.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:f2:c7:77:9a:21:6e:eb:05:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=56442303-808e-4150-af71-376c210ca8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:1f:37:4e:67:85:3f:ab:3c:8c:45:fc:96:
                    28:ce:5a:6f:a2:41:5a:c7:59:b5:a5:d2:5f:c0:6c:
                    0e:d9:26:78:1e:7d:ef:bb:df:f6:a7:5c:3c:e6:c4:
                    5e:32:41:6f:9b:57:5f:dd:d6:ad:f6:12:30:78:be:
                    a7:ef:09:e9:64:8e:8a:d9:2e:32:d3:56:96:3e:71:
                    a3:d7:2c:7a:10:45:f6:38:ab:a6:63:a1:a2:f3:d9:
                    3e:f7:80:c7:95:80:12:24:2f:5e:db:57:b9:a1:0d:
                    99:42:75:b0:7a:70:5c:41:0d:65:1c:09:6e:c3:41:
                    c6:66:01:1e:5f:41:71:1a:a6:a5:ef:25:bc:02:57:
                    79:eb:92:ae:b2:ba:24:19:ed:7d:ea:f3:4f:af:c2:
                    e8:4d:17:d2:7f:af:af:a9:63:e7:1d:7d:6f:2e:9a:
                    07:78:3a:34:9d:ac:f8:43:d8:8b:d5:b8:0d:5e:8f:
                    7c:ad:55:6e:a0:77:35:14:2d:e9:04:60:c8:47:cb:
                    13:c1:09:bb:9e:27:a9:ff:ec:01:90:75:f3:d5:9c:
                    cd:6b:a0:de:0d:af:e8:20:46:d8:48:cc:c6:4b:ea:
                    d2:5a:3d:89:ef:2d:f3:c9:06:69:6e:1c:02:3b:99:
                    a6:20:70:cf:92:52:b0:cc:4c:0e:bb:5f:79:ef:52:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D4:44:A9:63:F6:CA:F7:98:B5:8C:FD:2C:E6:59:42:5B:79:6A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfca6a85-ad0c-3c66-81f4-cb321cd40426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:1e:2d:d9:43:98:6e:25:16:c2:39:61:a0:5c:10:e5:66:
         57:03:24:1e:53:77:1e:7b:5c:74:9d:32:23:ee:7f:35:a0:9e:
         f3:b4:2e:2a:24:b4:70:df:2f:ea:69:2c:ee:2b:b8:ae:a8:06:
         cf:c2:56:a5:3e:6e:69:ac:e2:ec:3d:1d:1a:86:2a:16:ac:e6:
         d4:9d:59:6f:8b:eb:f2:4a:67:37:e0:40:bf:22:52:e5:6d:dc:
         c4:d8:17:41:83:c9:95:69:43:0e:1c:e0:28:bc:df:9e:6e:9c:
         b1:2e:56:27:81:04:1a:0f:fe:4f:16:87:eb:74:20:9b:36:99:
         ce:04:14:a0:2e:c0:73:90:b0:0c:9c:de:d7:8c:aa:2c:a1:e1:
         10:88:79:3b:be:70:c8:9a:59:9a:37:0d:92:33:84:c8:08:c8:
         70:cb:1c:30:49:3b:19:31:40:f8:e6:f5:46:89:33:a8:1d:be:
         9e:c3:40:a8:c8:78:d2:cf:30:1b:f0:cf:d7:4b:ba:1c:3b:e4:
         c5:94:74:31:05:de:aa:a7:1d:10:7a:6b:87:4a:fe:be:04:ea:
         01:d0:fc:8a:fd:8d:6e:36:18:df:53:95:e4:fa:2f:68:26:d2:
         32:a2:39:27:82:9e:ee:22:61:4b:87:85:de:2a:1b:28:3d:10:
         f1:bb:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:18:13 2025 by rpki-client on console.sobornost.net