Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
File:                     8c35d617-cec2-3448-87cf-b812bd3bee7f.roa (raw, json)
Hash identifier:          jbcIv2qS/S61QnSdEcKRLN6KozG6Do5BNrQxYtcCakI=
Subject key identifier:   C4:B7:76:B6:9F:76:44:0E:12:29:48:2E:4D:9E:76:88:41:47:E4:13
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F43285849780F0B116F9F76D4901A2E80
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     19381
IP address blocks:        64.119.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0b:11:6f:9f:76:d4:90:1a:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=84ce8831-dc91-459a-9778-af401c0e7be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:5d:14:23:85:d9:f5:fc:1c:f5:82:f4:48:
                    57:54:f1:27:2f:26:bf:6c:47:b3:29:9f:d7:9a:b6:
                    19:92:b5:61:b9:d2:97:b8:fb:1b:6d:40:e5:47:bb:
                    4a:6c:8a:13:0f:01:8a:c1:64:27:73:d2:c2:e3:c3:
                    c5:b2:bf:5e:70:6c:9a:90:19:16:95:c0:ab:86:fc:
                    dc:a0:41:bd:2f:1c:3c:f5:a4:ab:af:88:a2:9c:2d:
                    62:25:bc:ec:64:80:9d:05:e0:77:fd:73:af:c1:e4:
                    ae:7a:82:ed:d3:8b:ca:27:04:4d:88:b2:ca:79:8a:
                    63:1c:d5:19:8a:10:5d:5f:f0:1a:49:ce:7e:20:be:
                    e8:f3:fa:ee:95:ee:ad:16:60:7d:ee:e2:c0:fc:45:
                    d3:0d:a4:cc:c7:78:2c:57:d3:1d:9d:2a:1c:7f:fe:
                    4c:fd:38:fe:85:40:06:d9:ac:76:2f:25:f7:80:01:
                    f2:43:5e:49:a6:bd:84:42:78:52:05:18:3a:3c:cf:
                    0b:df:e4:73:d5:f6:07:7a:b7:25:c8:07:db:13:09:
                    5c:a9:4f:b6:a6:c1:70:ed:6d:34:65:1a:01:4c:33:
                    c2:4f:eb:ae:02:12:21:11:d2:61:77:b7:8a:e9:d5:
                    d0:2f:9d:79:a3:c5:dc:48:a3:89:96:b3:65:be:1c:
                    9a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:76:B6:9F:76:44:0E:12:29:48:2E:4D:9E:76:88:41:47:E4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8c35d617-cec2-3448-87cf-b812bd3bee7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.119.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:04:61:cf:61:e1:b9:5b:f0:ed:36:2f:91:e3:3d:85:22:69:
         e0:b5:4c:db:f1:f0:3d:4e:c0:62:e9:b0:b0:88:6b:7b:8f:b7:
         2b:10:57:0a:3f:e6:63:2d:2f:51:8e:3c:65:5c:71:3d:d9:f8:
         fe:3d:b8:01:9c:bb:24:40:ae:98:58:ae:e8:9d:e3:8d:e0:c9:
         53:ab:08:a5:57:9e:83:97:62:74:95:e3:32:a7:ae:dd:02:80:
         9e:5d:f0:07:92:23:e8:37:bb:9c:15:de:56:5d:a5:26:7d:f8:
         6d:04:b0:20:56:cb:b1:f4:a8:04:50:64:82:34:1b:3c:31:43:
         ce:25:01:04:d5:99:16:fb:52:96:4f:72:a9:cf:61:4f:92:5a:
         b6:1a:57:d3:16:64:c7:cf:1a:53:cf:33:ee:65:6a:c2:87:c2:
         1e:1e:00:f2:ea:0f:8a:18:62:ca:50:91:3f:be:7f:d4:52:a8:
         fd:da:88:40:5d:3e:a8:d0:09:65:ad:7c:09:5e:8c:aa:ad:3d:
         40:78:f1:eb:bd:3e:3a:76:58:1b:32:73:7a:58:4c:aa:ff:58:
         0c:19:c3:fe:c8:e3:2a:84:6f:a2:97:c9:a5:97:55:3f:e7:83:
         c3:42:f2:ed:33:cf:94:dd:70:f1:f9:2a:da:4a:ac:4d:38:65:
         70:f3:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:24:59 2025 by rpki-client on console.sobornost.net