Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa
File:                     1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa (raw, json)
Hash identifier:          7vhho2EtAONcP+0zCia8Ax9n4M/3mkN1RrNwyNVm628=
Subject key identifier:   64:78:C4:25:06:FC:A6:FA:19:DD:44:17:46:95:13:9B:A8:96:8E:38
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848E2D11378336B9E075C74CE80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     396961
IP address blocks:        163.253.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:13:78:33:6b:9e:07:5c:74:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=a7b05dd6-9e6e-44c8-adab-757979a51f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:13:de:c4:e9:92:3e:23:41:4b:d6:19:20:
                    a5:62:3b:a1:54:95:da:d1:87:59:0b:02:c6:80:e8:
                    04:13:52:4f:12:e4:27:83:c6:b4:38:e2:78:99:ff:
                    43:ea:1f:e6:8a:a3:7a:a6:e0:01:55:9d:58:96:7c:
                    f2:6b:73:83:8b:da:c9:2e:ed:f0:ec:5d:59:45:a3:
                    0f:2d:33:9a:3f:81:ba:e1:bd:58:fc:fe:02:23:c8:
                    40:a3:ed:d6:7b:37:7a:95:87:b6:6d:41:4c:89:f7:
                    a7:66:fc:33:a6:99:cc:04:55:70:00:8f:94:3d:2a:
                    d5:96:7a:c1:b8:11:8f:72:89:4a:a7:96:17:16:10:
                    01:cc:57:77:fd:f6:1b:17:14:b8:fa:36:08:1e:dd:
                    0f:d0:09:70:0e:de:8c:11:07:01:db:c8:99:39:28:
                    f2:73:0c:e6:8d:76:9c:64:34:bd:8f:85:32:50:e3:
                    26:cb:6e:d6:30:a7:c3:91:b8:a7:4f:f5:0b:db:af:
                    a3:f5:ce:3c:b5:5d:05:e5:45:a8:ef:ed:66:dd:ec:
                    e5:f5:49:09:a9:7d:d0:fc:56:e6:5a:e0:a7:e1:1f:
                    d2:5d:92:44:1b:36:3e:4e:89:9b:d3:95:bc:e0:ac:
                    25:f2:62:4a:3b:d1:4d:32:72:86:d9:3d:02:91:b1:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:C4:25:06:FC:A6:FA:19:DD:44:17:46:95:13:9B:A8:96:8E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:9a:d4:7b:03:59:31:94:d2:f6:1f:d0:a6:63:c6:87:09:
         b5:be:82:39:6e:f9:2a:94:27:60:db:51:79:ed:19:07:57:b4:
         39:2f:1c:d3:f7:44:7d:1b:67:b7:c9:2d:e6:ba:ee:b0:c7:fd:
         8a:02:a2:c0:0b:68:94:07:fb:24:34:a3:dc:09:94:8b:00:bf:
         3a:af:3d:ec:6e:53:27:47:48:5d:dc:fa:ee:f6:4c:16:08:53:
         ac:d6:b8:0c:e5:35:ba:75:43:e3:cf:76:bb:7e:8e:18:c7:0c:
         40:fa:71:f8:9b:5f:ed:4a:1d:0f:01:a1:3d:0e:9b:f7:76:df:
         7a:3c:a3:64:5c:b3:2f:ac:1a:90:8c:88:83:ce:fd:e6:50:c9:
         67:22:c0:03:89:50:e1:9e:a2:77:71:ec:7a:ae:35:7a:18:54:
         1f:dc:6f:c3:7a:20:b4:4b:b6:68:c9:39:b3:07:70:81:d6:2d:
         b9:8c:84:3a:1c:07:c4:c7:63:d3:22:52:70:04:ba:39:6c:52:
         da:74:3c:f8:b7:5c:f4:d7:0d:3e:68:99:55:73:3e:c7:e3:37:
         74:7e:09:27:e3:42:67:f7:df:0f:2c:f3:ad:aa:b5:77:0d:09:
         c3:59:15:11:e3:8a:b4:37:02:6e:77:84:c2:5b:3a:31:30:0f:
         84:0c:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:52 2025 by rpki-client on console.sobornost.net