Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa
File:                     02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa (raw, json)
Hash identifier:          rFS06x9xAQq++v1gMYdjfAymlOq+mXKZs5oyTPxSv1E=
Subject key identifier:   20:3E:83:B5:C1:AC:02:81:80:9B:74:56:B2:17:EF:56:FE:6C:3A:17
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849631EC1DD2D77C6E69535E8C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     396450
IP address blocks:        163.253.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:c1:dd:2d:77:c6:e6:95:35:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=e944071a-57cb-40f2-953a-ce784aa0d8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:b6:8b:e4:f2:ed:80:36:29:74:10:d2:b2:
                    15:b3:52:05:2a:45:40:5f:00:a3:3a:2c:6f:03:9c:
                    52:a4:c9:4c:76:8f:cc:ca:69:4a:80:1e:f6:e3:78:
                    28:93:96:8a:09:81:0b:2a:77:b2:24:c6:de:af:c2:
                    4b:1b:a2:c1:30:47:e0:43:d8:cb:cf:3b:7f:68:79:
                    4e:39:70:60:a1:f5:eb:0e:99:14:65:27:dc:31:e6:
                    ae:80:25:20:c3:aa:3e:ee:a1:e1:c5:ea:1d:3e:49:
                    41:f3:e0:ea:d1:94:1f:bf:0f:4a:6f:1c:f1:cd:78:
                    1d:2d:91:21:8f:e8:31:65:d0:91:7f:3d:a7:f3:b1:
                    1a:ee:dd:e7:39:7b:51:d6:9b:a4:14:b9:0e:12:69:
                    4e:d7:af:a3:47:27:99:6d:9f:bf:21:57:78:ea:57:
                    e8:68:97:b0:68:93:46:96:a7:15:c6:3d:c0:52:8b:
                    d1:6f:1c:82:ac:17:62:38:01:42:60:6f:d5:91:2f:
                    29:41:a5:b8:d4:8e:b1:37:d4:75:7a:fe:43:ba:88:
                    9e:6b:0b:fc:b3:92:13:2a:3f:f7:fd:6e:9f:3e:e9:
                    2d:8c:fd:6c:a0:c1:f5:b7:b2:cd:b4:dd:7d:8b:8a:
                    d1:05:4e:db:cb:d3:85:2a:11:5a:6e:9c:37:07:23:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3E:83:B5:C1:AC:02:81:80:9B:74:56:B2:17:EF:56:FE:6C:3A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/02a3b748-7b55-3f29-b8de-605b5f3e8c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:15:cc:38:9b:10:9b:39:b6:31:a8:1b:46:18:87:b0:81:03:
         f2:8a:b5:6c:33:4e:ae:ad:8b:a8:8a:12:64:9b:a4:16:e5:03:
         0e:81:2b:aa:c0:f4:87:cc:6e:10:c6:d5:ee:80:fc:86:4a:b7:
         eb:4b:35:f3:0a:09:08:df:6c:c3:36:9b:74:9c:a5:32:56:ef:
         b1:4b:da:01:54:a5:52:6f:5b:3d:de:a6:7f:57:84:b3:48:f2:
         d4:ab:0d:ef:28:dc:be:6c:1e:b2:a0:82:47:97:30:61:94:97:
         7d:0d:6e:79:82:48:ee:2f:63:ab:89:81:af:0c:cd:f8:07:c3:
         0a:ff:95:f1:c7:4f:3a:af:34:b7:c3:b4:40:42:fe:64:2a:68:
         cf:4b:fe:0f:41:c9:88:f2:e8:90:5b:50:62:59:f7:4c:e1:bd:
         bc:e6:d7:ef:5c:1f:91:84:d2:98:71:87:22:06:38:60:f2:3c:
         41:d8:92:ed:e2:f2:e2:0c:43:4c:9a:8e:5c:8a:70:21:08:1f:
         9d:c3:f9:45:92:89:80:8f:a6:f5:a7:63:e0:a1:82:02:9d:95:
         a4:70:79:98:d3:f2:d9:2c:2c:cc:67:27:e4:eb:87:32:b7:47:
         43:eb:58:3b:b8:9b:2d:e3:d4:47:74:02:a4:ac:9f:c1:3e:c0:
         06:37:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:52 2025 by rpki-client on console.sobornost.net