Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa
File:                     629df4aa-26d3-3389-ad5a-de5201771d41.roa (raw, json)
Hash identifier:          pvKuwEK2JOwdY+JqNVVFRQnuJiHz8dY+p+Jyiqf2Nvg=
Subject key identifier:   9D:31:FE:B3:A4:C7:E8:CD:AD:AC:0C:5B:01:E9:87:CD:6A:2B:D3:E1
Certificate issuer:       /CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
Certificate serial:       010D0C9F4328584902EC2323AC0121BB2F52E600
Authority key identifier: E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     6128
IP address blocks:        161.129.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:23:23:ac:01:21:bb:2f:52:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e379dee-5556-42b4-8b8d-63dbfaf4f0ed
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=524fea20-a0b6-4456-bda4-2e82d291157f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:5f:61:fb:05:b0:5e:d7:93:c9:53:bf:1f:
                    78:bc:fd:18:8f:e5:33:ea:c3:2a:c4:8e:bc:0f:06:
                    9b:5b:1f:6f:b2:e7:39:9b:72:e1:49:3e:de:82:33:
                    f9:0e:7e:e6:c7:f2:82:c1:59:e7:94:33:76:d4:21:
                    c7:11:7a:d5:f5:b0:f4:40:45:1d:82:3c:3d:91:7e:
                    77:79:8c:bc:f5:dd:0e:2e:ca:13:be:79:32:0b:d8:
                    24:7f:fc:b5:35:c5:90:82:0b:77:4f:56:0e:ba:44:
                    ab:45:8f:6a:02:9f:e9:31:de:a7:80:ac:94:27:3b:
                    f2:f4:a2:be:25:63:7a:09:ce:4b:3e:99:7a:74:6d:
                    32:21:8e:0b:c7:10:21:7f:d6:45:02:8e:fa:fc:da:
                    8a:2c:ef:b1:a3:69:f4:47:d8:51:f8:f2:ce:49:45:
                    28:d6:b2:3c:ab:56:08:dc:ba:10:c6:8f:73:2a:8a:
                    4e:14:99:e3:94:90:9c:b6:64:f7:2f:6f:25:ad:c0:
                    34:bb:24:10:25:39:d9:61:73:5c:11:69:2f:db:fb:
                    fb:88:93:1f:da:9d:05:6e:f4:22:28:5a:dc:ff:4a:
                    f6:a2:b0:03:27:08:24:86:bc:bb:8a:fa:ff:79:3b:
                    b1:99:e7:00:78:a4:ac:c5:4b:ed:12:15:fc:0b:eb:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:31:FE:B3:A4:C7:E8:CD:AD:AC:0C:5B:01:E9:87:CD:6A:2B:D3:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/629df4aa-26d3-3389-ad5a-de5201771d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.crl

            X509v3 Authority Key Identifier:
                keyid:E9:9B:88:C2:7F:72:0C:AB:6C:EB:5A:12:EC:61:79:A5:DE:53:84:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e379dee-5556-42b4-8b8d-63dbfaf4f0ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:99:7f:9e:d9:74:d7:0f:68:23:b7:2a:13:8b:30:31:6d:
         23:39:d8:5f:96:22:e7:07:9b:ea:f6:74:34:2c:63:88:a0:e6:
         96:6e:27:44:ce:c3:2c:fa:c5:18:37:8d:05:7f:3c:bf:d6:29:
         35:c6:b1:ec:c9:c7:51:60:53:9a:27:46:2c:09:ea:82:68:88:
         53:b3:94:d6:fc:af:c9:f2:95:fb:0f:89:ac:a0:90:97:cf:d7:
         a6:e6:d1:33:71:ac:ca:02:bd:ca:9a:0d:0a:fc:25:60:59:cc:
         1d:61:8e:cb:27:5e:81:4b:86:01:68:9d:31:2d:44:6a:e6:fe:
         f6:e8:9c:0e:3f:5e:8e:7e:e1:99:cd:c5:66:eb:66:0b:ae:4a:
         78:03:db:19:d0:f1:8d:70:49:59:b2:f0:f7:e5:72:ea:30:06:
         7f:70:b3:0a:6b:4c:33:91:38:fe:a2:58:12:6c:5d:d8:b3:19:
         0c:78:b3:2e:e8:e3:5f:c7:eb:23:96:c2:e8:41:5e:9e:1d:d7:
         77:d9:78:d3:24:71:f4:6f:39:af:09:e3:01:41:a7:54:59:d8:
         83:fa:fa:dc:f3:54:ee:71:83:8c:96:d9:98:fd:ae:6e:56:9d:
         a4:8e:55:32:82:bf:d1:1e:4a:b3:a6:ed:59:0f:78:92:9a:d5:
         71:ea:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:49 2025 by rpki-client on console.sobornost.net