Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/63b6f9a1-ad83-3ea5-a965-04547410dc4d.roa
File:                     63b6f9a1-ad83-3ea5-a965-04547410dc4d.roa (raw, json)
Hash identifier:          VE30pdTBi7Vkw4k30VjeDJq3I6ISdsmk0n5PGAZ2bEQ=
Subject key identifier:   94:A0:80:51:8A:9A:53:97:C8:C2:18:87:C7:B1:B0:77:36:52:D7:CC
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849674EF33F091DC4F8A1E06EF0
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/63b6f9a1-ad83-3ea5-a965-04547410dc4d.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     32133
IP address blocks:        64.98.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f3:3f:09:1d:c4:f8:a1:e0:6e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=62eb953e-e4eb-4e36-9772-ac7a7e523aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7b:99:39:26:26:37:ea:9e:23:87:4f:64:69:
                    3f:83:4f:37:10:02:d8:d9:a0:3e:e3:31:a3:91:83:
                    2a:f4:17:64:00:11:a3:de:9d:27:06:c3:23:7d:08:
                    61:44:4e:b6:af:c2:7a:19:9b:43:58:af:38:df:56:
                    75:4c:96:ff:92:75:81:12:ba:98:bf:36:01:06:44:
                    5e:cd:dc:09:04:a7:a9:11:52:fc:95:3b:77:01:6b:
                    cd:10:7e:b1:48:63:73:e6:e9:5e:d2:87:4d:48:6f:
                    28:14:e2:e6:af:92:09:e8:8b:ea:7c:20:77:f1:9c:
                    6d:e3:79:3c:87:1f:d6:0b:8b:45:55:38:e8:fb:fe:
                    9b:4b:4a:c1:1b:22:02:5e:a1:02:12:8f:2c:95:b2:
                    c8:95:5c:b5:35:ea:bd:aa:ee:a4:35:45:84:14:8d:
                    63:9d:43:7d:26:3f:e9:57:ae:dc:aa:91:84:ed:58:
                    84:91:4b:12:e6:e6:1e:f1:66:61:52:8e:75:84:3c:
                    2e:fe:dc:3a:36:74:d7:6c:58:94:c1:76:49:e1:8f:
                    f4:1c:ef:3a:71:33:0f:59:c4:51:46:4b:4d:6a:f1:
                    53:8e:be:7e:94:65:0e:9b:11:55:aa:b8:71:f7:ee:
                    df:17:3a:c5:56:e7:e6:dc:36:5c:6f:7f:e7:fc:50:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A0:80:51:8A:9A:53:97:C8:C2:18:87:C7:B1:B0:77:36:52:D7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/63b6f9a1-ad83-3ea5-a965-04547410dc4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:01:fe:13:09:e3:7a:41:13:bd:be:42:7c:16:1a:70:77:9a:
         16:71:e8:df:f5:c7:4c:11:f4:b6:52:4e:b5:b0:f7:90:6f:17:
         31:d7:ac:6c:17:13:6d:8e:c9:11:f5:18:e4:91:ae:7f:39:46:
         3a:e3:86:6a:50:8b:34:3f:b5:5b:65:4d:6a:62:20:f6:44:04:
         a0:10:39:0c:01:ae:d6:c2:71:6b:c2:a3:b1:75:f6:1b:3c:5a:
         2c:22:c2:db:e4:02:cc:fe:ce:42:30:f0:b3:8e:50:93:95:19:
         1e:17:55:64:5e:da:1d:c8:f8:9b:89:48:9b:d0:d0:ac:d3:b1:
         74:2a:55:a3:cd:4e:c5:a2:ce:c5:33:ea:0e:e6:c5:6c:47:fc:
         34:08:50:ab:50:8a:b1:90:f7:bc:88:1a:d3:0c:e8:c5:5e:37:
         57:39:d4:ec:a9:1e:f0:40:d8:6e:96:4c:ec:cf:f2:f4:7a:5f:
         f7:87:51:24:4a:b2:b5:d7:12:e3:2f:4b:64:ab:82:c4:a0:39:
         3b:43:9b:71:e0:4f:d7:b1:db:c3:e8:13:66:22:59:2f:8b:2f:
         6c:f2:df:ec:84:87:ef:f2:fd:a7:3f:ac:61:69:02:4a:ae:0e:
         b3:9a:ac:47:08:4d:2f:fe:5b:77:03:c4:41:a4:02:aa:9d:51:
         26:e8:e0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net