Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/35530ed1-4866-3a96-8a52-ec31596fa68a.roa
File:                     35530ed1-4866-3a96-8a52-ec31596fa68a.roa (raw, json)
Hash identifier:          GNUwqNEeDUCRbioIndDNBzvo8ZUWhSSg3rrHZtXrpzU=
Subject key identifier:   09:60:F4:C4:F4:87:68:F9:B4:DE:60:26:71:35:76:28:8B:DB:0C:5E
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849674EEE685C332D2EFBA05600
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/35530ed1-4866-3a96-8a52-ec31596fa68a.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     32636
IP address blocks:        64.98.14.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:ee:68:5c:33:2d:2e:fb:a0:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=480ec9a9-7f72-4b87-8f38-c373c80cb01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:51:9a:b5:70:42:35:db:65:a8:e0:81:15:
                    d9:01:69:04:ee:f3:9b:98:17:dd:e4:ad:49:d9:e9:
                    c5:a5:20:0d:7d:3e:2e:a5:1f:3b:62:45:a0:48:7d:
                    1a:1a:5e:8e:6e:f1:b2:4e:69:cc:18:80:48:c1:5a:
                    0e:b1:66:fe:c8:b9:97:27:10:6d:29:e4:64:ec:b0:
                    1e:1e:7f:75:76:37:ef:57:0a:9d:f4:36:38:95:45:
                    ad:e0:cc:87:d5:62:b8:f8:76:30:87:fe:4c:9e:e8:
                    94:96:17:31:b2:a5:85:37:0d:65:c1:60:39:3d:7d:
                    60:34:8f:94:91:18:09:c2:25:2e:e0:db:65:47:f5:
                    82:e5:b5:72:fe:57:7d:1d:bc:a6:2b:98:31:32:e0:
                    a4:68:28:b2:cf:53:bf:9c:2b:86:12:fd:7b:62:66:
                    f7:bd:62:27:ab:3b:4a:34:89:7d:c1:27:4c:78:32:
                    0a:1f:90:ed:a6:e0:da:8d:67:ec:21:e0:7f:a6:4a:
                    8c:b0:3e:96:42:a2:fb:59:70:c8:55:48:90:2e:de:
                    4a:1f:37:c7:b3:31:e4:cc:0d:9f:0f:bf:41:3b:51:
                    51:84:98:2d:ee:ea:76:14:50:e4:86:2e:70:2f:9e:
                    27:0f:e0:0b:2d:21:64:c1:66:a9:b1:a7:fb:b1:81:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:60:F4:C4:F4:87:68:F9:B4:DE:60:26:71:35:76:28:8B:DB:0C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/35530ed1-4866-3a96-8a52-ec31596fa68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:88:5b:0c:76:c2:72:16:0d:70:06:71:74:27:9e:41:ee:
         81:81:64:01:38:c8:00:83:d3:27:65:0d:35:58:d7:54:af:f2:
         37:69:11:71:bc:a2:32:8f:e4:46:9c:e0:e2:e5:86:0a:cf:0a:
         ee:96:e2:e4:f7:48:da:fe:09:38:2b:db:a4:be:02:70:ca:89:
         eb:c7:2b:00:94:1f:d2:41:7a:f3:c0:98:aa:58:81:37:25:80:
         3c:c1:21:8d:0f:8f:06:36:f8:7e:07:d0:c8:a2:5a:7d:d7:31:
         77:da:9e:f4:30:e5:c4:7e:87:38:0c:d5:d4:84:e6:cf:5e:8c:
         07:33:60:c6:e7:ef:cc:bb:96:cb:21:3a:46:47:6e:86:fd:1c:
         38:3d:7d:fe:45:c5:cb:41:ab:4b:a0:65:ef:1c:ff:fb:73:98:
         0d:ad:f7:9d:2e:16:e9:df:e0:b2:5a:53:7c:b3:73:6e:d8:5f:
         93:ec:c1:11:fb:22:55:1e:41:cb:a0:22:78:ce:12:e0:a8:88:
         6c:af:78:d9:20:38:15:13:95:2d:37:42:df:da:ed:ed:67:38:
         78:38:5b:40:29:8c:2a:85:14:fd:7c:64:ea:41:26:ba:a2:3b:
         a3:62:6d:fb:ab:d2:57:e9:7f:ee:7e:3c:55:af:d4:88:2b:7b:
         0a:10:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net