Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8e7e60c8-a1ed-325c-9973-e9d0f962ec03.roa
File:                     8e7e60c8-a1ed-325c-9973-e9d0f962ec03.roa (raw, json)
Hash identifier:          3O4t7LavwMFDvTwqfKRBf6J/NitFA2b5JGUEZKtfJo0=
Subject key identifier:   7B:E2:EB:DC:A0:2E:A1:08:05:63:84:F0:0B:A0:D7:B9:1E:E2:C6:24
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858495ABEC412F890BF48DC7716B0
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8e7e60c8-a1ed-325c-9973-e9d0f962ec03.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     31815
IP address blocks:        64.13.192.0/18 maxlen: 24
                          64.207.128.0/18 maxlen: 24
                          70.32.64.0/18 maxlen: 24
                          72.10.32.0/19 maxlen: 24
                          72.47.192.0/18 maxlen: 24
                          205.186.128.0/18 maxlen: 24
                          216.70.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c4:12:f8:90:bf:48:dc:77:16:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=c25882e4-2559-49be-bfc6-ac79f2fa2ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:25:f8:80:95:50:ec:3e:7d:80:a5:69:8b:6e:
                    6b:15:00:4d:21:c4:af:ca:33:76:6a:91:35:ac:b3:
                    cb:65:13:c9:1f:6f:27:8a:03:26:a9:4e:f1:fe:3f:
                    e0:c0:db:e1:d8:02:be:52:56:8c:d9:bf:e2:59:94:
                    ee:c0:b4:e5:e9:65:3f:d9:e1:85:65:30:c3:88:70:
                    70:fa:ac:b6:fe:28:f7:75:6e:60:19:48:d2:00:8d:
                    5c:d9:af:01:2e:7f:49:d4:11:d8:23:a3:23:28:e6:
                    3c:ea:31:a8:65:0b:74:50:f7:aa:9d:61:4d:67:0f:
                    23:3f:0a:bb:eb:20:71:50:92:7e:11:cd:6e:be:25:
                    cb:66:30:3e:de:48:57:50:37:f7:c0:25:7d:80:b6:
                    fa:a2:dd:bf:6a:c6:a7:00:0b:a5:b1:cd:be:b3:23:
                    b1:58:ec:0a:79:40:f0:54:38:00:75:57:76:8a:ea:
                    32:94:e8:06:63:bf:bf:41:12:ec:02:48:7f:70:8a:
                    8d:74:25:ab:35:dd:74:ed:fc:59:c2:36:ff:97:af:
                    55:e4:f8:8a:a3:8c:4a:cc:93:9d:09:75:06:4f:92:
                    f4:3a:88:be:b8:80:a9:c6:f3:25:84:19:d6:6e:f6:
                    aa:a9:0d:4e:f2:56:4f:93:c1:de:f5:f5:2c:f1:5a:
                    ac:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:EB:DC:A0:2E:A1:08:05:63:84:F0:0B:A0:D7:B9:1E:E2:C6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/8e7e60c8-a1ed-325c-9973-e9d0f962ec03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.13.192.0/18
                  64.207.128.0/18
                  70.32.64.0/18
                  72.10.32.0/19
                  72.47.192.0/18
                  205.186.128.0/18
                  216.70.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:10:db:9c:9d:b4:0b:07:64:ce:5e:6a:43:03:56:a4:48:0a:
         35:4e:b0:ce:b3:34:f6:84:61:84:06:d4:b0:f4:08:ba:b9:b1:
         99:48:1f:21:4d:32:e6:21:ea:17:b1:63:74:be:77:f5:30:ec:
         5b:c1:28:e1:a2:21:5f:f3:38:43:15:52:90:68:72:d9:0e:6e:
         28:45:2f:60:47:75:ce:af:79:16:e0:1a:d9:97:27:a4:53:46:
         4b:90:b4:39:4f:7e:fe:2a:04:d8:ca:4f:86:8b:14:55:0a:36:
         81:2c:88:74:0c:9d:ec:52:65:3f:35:3c:38:b9:25:e2:b9:82:
         e9:d3:56:a3:2d:ac:6e:a1:d7:ce:7e:ac:a6:ca:20:28:79:db:
         07:2c:86:38:cb:f5:f7:3f:15:02:00:93:86:16:c8:2f:6f:ee:
         d2:54:4b:5a:e9:20:41:40:af:67:71:7f:59:09:c2:be:60:fb:
         9b:f4:65:f8:45:ed:5d:e8:bc:f5:2f:8d:51:c5:10:05:9e:c6:
         88:b0:83:e1:ab:65:27:c3:c1:41:9b:38:9c:a3:66:85:05:7b:
         a8:2b:96:ce:05:e0:77:42:83:6a:eb:6e:2d:af:2e:25:41:de:
         79:68:34:c5:b2:5a:a9:15:5e:b8:37:09:74:19:c3:92:fc:b3:
         cb:ac:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net