Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa
File:                     dd500401-147e-3a58-a77f-2dd06ab30b5f.roa (raw, json)
Hash identifier:          II6VRmOIjkDp4h0KvWeFxywpPRJZJGkvpbk5KyTh5+Q=
Subject key identifier:   44:62:AE:49:74:AE:D7:1B:51:E4:FB:F4:C8:2B:D2:BB:4C:96:C7:73
Certificate issuer:       /CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
Certificate serial:       010D0C9F43285848A44E4D31EC550104AD982EE0
Authority key identifier: 2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa
Signing time:             Thu 23 Jan 2025 16:37:13 +0000
ROA not before:           Thu 23 Jan 2025 16:37:13 +0000
ROA not after:            Wed 23 Apr 2025 15:37:13 +0000
asID:                     400597
IP address blocks:        217.149.99.0/24 maxlen: 24
                          2602:fb1b:63::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:4e:4d:31:ec:55:01:04:ad:98:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811bd2ac-c53d-40a6-bfa4-275c2241af63
        Validity
            Not Before: Jan 23 16:37:13 2025 GMT
            Not After : Apr 23 15:37:13 2025 GMT
        Subject: CN=5bfa1f7a-2ef5-4122-86da-4bc3fb531e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:2e:11:73:a4:39:fd:29:fb:07:77:4e:9e:
                    3d:55:cd:6b:3c:21:81:28:60:57:ae:db:ac:47:69:
                    76:51:d2:4f:19:31:20:15:0b:bc:d8:47:74:42:9b:
                    7f:5d:fa:34:69:81:fa:39:7e:00:26:35:56:68:79:
                    36:a1:48:69:54:28:97:d0:66:ac:42:8a:8d:f3:26:
                    68:fc:c2:72:c4:60:d8:c0:33:10:98:c2:7e:e6:5f:
                    5f:b4:b1:ee:80:8a:dd:36:23:c8:f1:fc:d9:88:bd:
                    2e:4c:78:d3:c0:36:94:30:49:5c:aa:97:a9:17:3d:
                    37:60:3e:ae:e7:15:e6:24:aa:45:e1:79:98:82:45:
                    a3:6c:36:ac:8d:e7:1a:c6:0e:5e:fa:33:89:d2:47:
                    7e:21:25:6d:d1:91:fb:f4:fe:e1:0b:40:59:43:b7:
                    ae:4b:2a:aa:0b:f1:c6:c2:ef:5e:71:94:f9:62:2d:
                    aa:58:56:00:ea:12:2c:be:b0:d3:cf:88:4c:17:1b:
                    5a:f5:b9:a2:b1:e7:cd:fb:64:3f:8e:73:df:15:7d:
                    3e:66:7e:b7:91:16:66:08:18:76:1b:4d:04:2a:58:
                    d4:8f:99:9f:f4:6f:8f:52:6b:6d:cd:85:4c:32:a0:
                    05:ab:1b:7c:04:e7:0c:dd:54:55:a0:f9:df:c9:f4:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:62:AE:49:74:AE:D7:1B:51:E4:FB:F4:C8:2B:D2:BB:4C:96:C7:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/dd500401-147e-3a58-a77f-2dd06ab30b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63/811bd2ac-c53d-40a6-bfa4-275c2241af63.crl

            X509v3 Authority Key Identifier:
                keyid:2F:A5:72:68:C3:77:88:79:8F:DB:55:DE:D1:BB:C7:C6:A8:86:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/811bd2ac-c53d-40a6-bfa4-275c2241af63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.149.99.0/24
                IPv6:
                  2602:fb1b:63::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:04:07:42:22:37:02:c0:11:57:6a:07:e4:51:08:00:ae:1e:
         88:b4:8a:8c:c6:dd:70:6f:51:e9:3c:f2:38:d2:9d:c0:18:44:
         9f:33:c2:c6:4f:1a:5b:c6:95:59:48:af:a1:2c:1c:50:e1:ca:
         1a:3d:66:1c:6b:9a:5c:74:fe:e2:c6:10:23:2b:98:ea:9b:99:
         ad:4d:9b:38:9d:e6:aa:eb:51:26:58:e7:6d:08:b0:c4:27:cd:
         b0:41:92:78:0f:a3:31:6b:f2:71:f0:52:9d:fb:41:22:5a:47:
         7a:5b:a1:42:ae:34:6b:5e:30:de:ae:e1:61:f5:e6:95:14:32:
         ac:98:f2:a2:13:db:50:cb:82:1e:07:74:fd:fe:4f:73:bc:26:
         b2:19:1b:04:f8:ea:9e:1c:76:e8:36:73:35:80:da:95:6f:14:
         2d:90:e5:19:f7:95:0b:7f:6f:06:f0:c9:91:41:f3:fc:99:6c:
         29:d6:5b:1f:20:8e:93:ff:27:cf:36:95:18:45:7e:93:38:24:
         01:41:c0:48:75:c6:a2:c6:6b:25:0a:b1:76:d3:09:6c:26:61:
         c0:65:79:f1:55:e6:51:af:4b:ac:97:93:63:c3:76:f7:f1:57:
         ea:7b:66:32:0a:97:2f:4c:78:7b:49:98:da:65:4b:ea:09:70:
         3e:5c:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:52 2025 by rpki-client on console.sobornost.net