Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa
File:                     709234c1-6400-3078-afcf-c2f8506b08a0.roa (raw, json)
Hash identifier:          XQ2NgdHJ6NpzW7OblypbJJTgD8rpSvIZPj6ynt+u0wk=
Subject key identifier:   F6:8F:DD:35:51:7D:29:EE:90:03:2C:A3:D8:72:50:51:D4:A7:B0:A1
Certificate issuer:       /CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
Certificate serial:       010D0C9F43285849806F17B10E869D8F0127A5C0
Authority key identifier: 3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     400818
IP address blocks:        69.197.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:17:b1:0e:86:9d:8f:01:27:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d91b72c-b83a-431c-9cfd-60b797f3113e
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=eeeb314d-dd47-4865-95b0-c95658e2f39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:f8:e1:bf:64:12:cc:70:97:88:58:62:6e:
                    4d:0b:00:f3:af:65:fc:b8:4d:b3:fc:16:56:3e:df:
                    c2:6c:da:a8:a5:75:79:4a:f8:11:3a:ed:f3:54:7a:
                    79:72:3a:46:79:7f:e5:93:77:02:9b:7d:b6:c9:12:
                    00:fb:b4:7a:11:b2:33:68:2c:45:c4:39:ee:8a:11:
                    37:5a:0f:ee:49:4c:69:ea:cd:a3:5c:27:28:a9:41:
                    58:c6:92:b7:fe:c4:94:dc:bb:28:3f:8d:31:16:64:
                    74:96:25:33:20:70:86:94:ce:48:be:26:15:3b:05:
                    4d:ab:40:13:02:65:0e:d9:a5:a4:12:87:48:70:e1:
                    33:2e:d1:f8:74:29:f1:4e:71:4d:00:8d:9d:b9:cd:
                    96:f1:70:5b:11:dd:50:71:56:75:e5:9b:3b:44:4e:
                    b3:68:78:84:e3:03:7a:1e:46:75:79:e5:37:09:b7:
                    19:28:66:4e:21:03:44:4c:e3:5f:ef:3c:85:5a:b9:
                    ea:19:74:37:bf:be:5c:ab:aa:ef:34:f0:c7:e7:15:
                    79:b5:c9:a5:ff:62:43:dc:3b:1d:92:f4:86:e8:53:
                    7d:ab:65:8d:4a:9a:be:c7:d7:a3:10:ea:06:a0:5b:
                    0b:9d:d4:c9:eb:19:bd:05:52:07:dc:df:29:19:1a:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8F:DD:35:51:7D:29:EE:90:03:2C:A3:D8:72:50:51:D4:A7:B0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/709234c1-6400-3078-afcf-c2f8506b08a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e/9d91b72c-b83a-431c-9cfd-60b797f3113e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:66:FA:1A:C0:9D:08:AF:D5:EC:72:B5:D7:FB:24:CC:B6:A9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d91b72c-b83a-431c-9cfd-60b797f3113e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.197.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e8:2d:8f:db:04:d6:a0:99:1f:51:fa:49:5e:53:57:f4:9b:
         c6:87:c6:1f:5b:39:b6:0a:61:65:eb:f3:fa:0b:15:62:83:8f:
         60:89:30:25:6b:06:bc:0a:d3:a6:4c:84:01:59:54:48:4d:75:
         bc:65:5a:c5:38:f0:33:5c:49:e4:ab:dd:64:9a:fc:f0:7d:9d:
         85:af:2f:0e:72:83:2e:49:e7:32:d6:3f:83:6a:84:7c:e4:30:
         7c:f0:80:39:9f:e9:92:a0:48:95:81:1f:41:2f:3c:bb:4d:29:
         4b:2e:52:51:a5:09:c9:28:f6:e3:44:36:71:f7:d3:d2:10:c7:
         ed:72:42:b1:25:78:65:f6:57:4e:9c:05:3a:32:c6:6a:ef:14:
         3e:1f:22:3d:82:b5:14:b7:3a:96:25:0b:26:98:fa:dc:5f:a2:
         58:2b:48:7c:c6:12:24:60:1a:8a:be:0f:14:86:48:ff:cc:58:
         40:6b:0f:c4:2e:db:41:e2:ca:73:83:70:95:1e:f7:be:74:c7:
         09:5b:f3:c2:85:2c:b4:60:dc:6f:e1:5a:cb:a2:ea:3b:be:12:
         27:01:61:61:f5:67:26:82:70:58:d8:5d:ab:ca:c0:09:2b:dc:
         7b:77:a2:1e:09:f8:93:31:6f:cd:95:54:98:13:1b:1f:54:90:
         b7:13:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net