Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
File:                     ab83317e-d613-3cc0-837d-292716cc95ae.roa (raw, json)
Hash identifier:          Jm45N3O8ioptphVCOv7i0ZOaXH2lVZGnn2rrJHtfGws=
Subject key identifier:   CF:0F:CD:E2:85:8E:61:A9:AA:31:E6:70:0A:D9:60:12:46:94:15:05
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858497114345FAA69743442DF2080
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     397518
IP address blocks:        208.109.143.0/24 maxlen: 24
                          208.109.145.0/24 maxlen: 24
                          2603:4:1017::/64 maxlen: 64
                          2603:4:1018::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:34:5f:aa:69:74:34:42:df:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=9f31b439-4c8d-4e96-a14d-a74fce62f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:64:f4:d7:e7:8f:25:cf:50:6e:32:00:97:
                    9a:da:14:5e:6c:da:9f:e1:84:b3:ad:d8:3d:53:ea:
                    c8:94:51:59:29:63:51:58:04:59:c0:2f:91:9e:bb:
                    60:ef:73:67:ed:f2:1b:63:86:d5:08:de:30:b0:58:
                    b6:64:78:5a:e8:54:12:31:0f:2f:3d:b3:80:8e:a0:
                    07:b8:92:07:a0:9d:b3:ed:fc:82:f3:da:ce:74:34:
                    f9:66:bc:7f:50:7e:c5:e1:16:8c:63:38:72:52:1d:
                    60:5c:06:b4:e1:76:d6:0f:f2:11:07:44:60:5c:70:
                    8b:41:e3:ba:b8:34:98:b6:0a:a9:9b:7c:f9:1a:62:
                    b4:4d:e9:e4:bd:13:38:7a:4a:1d:08:78:58:84:6b:
                    e5:5f:16:93:cd:13:a7:72:65:8d:fc:98:01:6a:c8:
                    7e:42:f8:26:54:13:9b:13:8b:47:a2:5e:85:cf:5e:
                    ea:33:ab:3a:5d:46:29:16:75:41:2b:f2:b1:86:a3:
                    d9:c6:de:3f:c0:e9:19:cd:c8:bc:20:f4:dd:94:c1:
                    8c:38:65:aa:d4:ad:af:b9:56:1d:fc:69:1f:a5:7f:
                    0f:5b:b3:f0:f5:54:74:d2:12:64:df:34:4a:5f:4c:
                    fe:64:0f:32:09:68:c9:98:c4:79:0b:b1:53:77:fc:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:CD:E2:85:8E:61:A9:AA:31:E6:70:0A:D9:60:12:46:94:15:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/ab83317e-d613-3cc0-837d-292716cc95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.143.0/24
                  208.109.145.0/24
                IPv6:
                  2603:4:1017::/64
                  2603:4:1018::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:ac:f4:f8:e2:b0:da:37:10:24:9f:b7:e3:67:b3:5b:7f:
         ca:bb:5b:5c:78:db:c7:e7:fc:c2:c4:c6:62:b7:25:d5:e4:a5:
         08:1c:a2:7a:5b:9b:c3:4b:96:82:56:8d:ae:e0:e3:7e:10:6e:
         09:a5:b0:13:97:dc:68:48:b5:1f:c2:a4:82:3e:a4:4b:b1:79:
         f8:e9:20:0f:5c:9f:1c:29:75:90:f3:7e:97:94:83:96:71:cc:
         97:4d:96:c7:2a:1e:d7:cf:bb:06:ef:ee:2f:ae:83:29:e8:cc:
         47:6c:48:94:58:ff:e0:c1:96:ec:4c:c7:6c:76:7d:a3:87:da:
         7a:cc:1d:1c:71:fa:77:61:41:e5:26:d9:be:28:6f:33:f4:76:
         9e:aa:ea:6f:38:6d:6f:4a:e3:8b:59:24:3d:78:94:71:60:c5:
         6f:2c:70:a0:06:66:23:2d:85:36:65:ea:64:7a:cf:2e:6d:5e:
         6c:f4:0d:3d:75:72:5b:a0:ac:9e:40:9a:cf:fa:13:3d:da:e7:
         2e:7d:d0:4b:73:eb:66:3b:b6:51:7e:8e:9f:84:c8:b1:1d:60:
         02:e9:2a:a5:9e:52:1f:f4:58:ff:24:68:26:c9:54:7b:81:c2:
         9a:3e:b3:4f:a0:b8:f6:b9:d3:5f:07:8e:22:d1:b8:9e:71:56:
         62:83:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:59 2025 by rpki-client on console.sobornost.net