Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa
File:                     31d57c5c-244f-3c6d-bc40-cf2409894a69.roa (raw, json)
Hash identifier:          sOgJDfTyfXYP63xM5XGq/iUR3Tty3FTo9Vgpuqi5AWM=
Subject key identifier:   55:B7:1B:BB:2C:59:26:A8:75:12:70:35:D0:42:AF:4E:22:2D:6E:10
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584900215A548757ADF5E0610300
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     393262
IP address blocks:        150.252.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:5a:54:87:57:ad:f5:e0:61:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=408f9175-7860-470b-b856-c8afb57d256a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:e6:29:14:12:b5:7e:e2:32:75:95:d7:13:
                    48:ff:e2:23:05:ce:7d:9e:74:e0:10:56:8b:5a:08:
                    57:76:84:35:b2:20:21:01:9d:c0:72:c4:60:ff:5d:
                    a3:f6:c9:1f:52:6c:7c:8d:80:90:e9:b0:f5:23:bb:
                    5b:fc:ec:5c:55:70:4e:68:a6:71:a9:4d:ac:db:2f:
                    5e:78:e2:48:65:67:0c:5e:17:e4:c0:f4:9a:30:37:
                    d8:16:25:74:b1:b0:de:6d:a4:f7:14:d7:1d:dd:ed:
                    b5:24:21:33:89:dd:8c:52:9b:8f:82:1f:ff:cf:65:
                    32:7a:ca:38:6d:f1:0b:41:c5:f6:b4:85:02:60:1d:
                    a4:43:fc:ce:f5:8a:d6:98:45:ce:94:3f:55:f7:2d:
                    15:85:55:c2:e0:f3:5f:a9:a9:64:ab:60:87:bc:e1:
                    5c:9d:64:e8:5e:f9:d8:ec:30:98:11:ab:30:41:5d:
                    9d:2f:39:de:a0:6c:45:36:8e:65:c8:7c:39:1f:df:
                    57:9f:98:59:3b:7c:dd:8f:e7:e4:6a:f6:47:9f:5a:
                    f4:b0:f0:9a:42:4d:4c:05:12:4e:73:07:dc:00:01:
                    a8:ca:11:d1:21:b0:9f:2c:0f:d0:de:09:1d:8d:57:
                    d6:49:e4:6a:31:56:3c:a6:f2:57:0f:be:c3:6e:98:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B7:1B:BB:2C:59:26:A8:75:12:70:35:D0:42:AF:4E:22:2D:6E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/31d57c5c-244f-3c6d-bc40-cf2409894a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:0b:60:40:80:53:c0:00:14:88:f9:6b:30:e7:d7:09:d9:33:
         10:d8:fb:d2:db:a4:04:56:3a:f6:05:84:2c:e3:39:08:a3:80:
         c1:6a:56:8a:99:2e:22:a1:97:7b:e5:ba:6b:6e:ca:ed:18:aa:
         54:dc:1e:42:12:53:c3:b1:a3:e2:10:05:6d:e6:e3:32:48:77:
         e6:52:1f:62:d7:65:1c:7e:bf:2a:81:b8:6f:01:bb:2f:e5:cd:
         87:89:60:d0:77:bb:63:fa:cc:00:8c:2a:cd:fd:d7:58:f4:9a:
         d7:ff:9e:c3:06:85:30:bb:60:3d:21:f7:01:fa:13:26:77:60:
         ce:85:ef:e8:86:a4:3a:ff:72:f9:5c:62:39:04:3d:7f:5f:7c:
         6c:31:c0:8e:0f:d2:48:15:b2:f3:b7:34:ef:c9:30:4e:7f:c4:
         96:46:40:f2:13:e7:e1:75:f2:24:2b:6d:74:7f:17:d1:af:98:
         ae:5f:a8:7b:f7:36:63:1a:e4:7d:93:3e:03:21:5f:d7:f3:2d:
         64:17:b0:9b:69:f4:a0:12:6e:bc:8f:90:b2:96:3a:87:e5:2e:
         01:7a:ad:04:92:5c:a1:b5:d5:ad:1c:d1:77:99:82:d1:36:a1:
         00:d9:25:85:9c:b1:4e:1e:9c:27:b0:97:7c:52:a1:d1:fc:cd:
         1c:9b:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:51 2025 by rpki-client on console.sobornost.net