Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/8317e356-398a-3a5b-b9fc-4cc874002a99.roa
File:                     8317e356-398a-3a5b-b9fc-4cc874002a99.roa (raw, json)
Hash identifier:          nsalJ1TzTs+J1cccrxzRebvdnQ4A+WzfPcvvIiBNZmM=
Subject key identifier:   49:0D:5F:25:F2:B2:07:2D:3D:DE:32:5C:4D:FB:8B:2E:5A:48:C8:04
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849674EF24EEA6E56E43BF66B80
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/8317e356-398a-3a5b-b9fc-4cc874002a99.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     32133
IP address blocks:        64.98.208.0/20 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f2:4e:ea:6e:56:e4:3b:f6:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=fc5bcc32-3453-412a-9b12-5d5eb1f84444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:37:0f:d8:c1:db:de:0d:83:14:c3:b8:6a:
                    41:8d:ea:a2:0e:9e:d5:c4:43:f5:65:63:41:a6:ca:
                    a8:c4:fc:a5:92:90:0d:e6:4d:38:be:ee:49:3f:dc:
                    99:04:3e:c5:8a:7d:1b:9e:34:4d:a1:a5:40:b3:d5:
                    16:3e:e5:35:68:cd:de:96:54:dd:aa:8d:33:ec:7a:
                    7b:29:51:9f:65:d9:2a:81:a9:09:e6:54:b4:aa:a9:
                    a2:98:f0:27:be:21:86:63:8c:a2:55:63:b1:90:ad:
                    07:89:05:36:fb:5e:a1:d3:08:a5:4d:40:d5:44:47:
                    84:e0:10:17:77:78:e6:04:72:ab:72:cd:8c:72:7f:
                    3a:a8:6f:b3:5f:46:b5:0f:eb:cb:65:cf:c3:74:fb:
                    24:74:c8:b0:93:6b:bd:ad:42:0d:8b:d7:37:4b:9d:
                    3f:a3:10:a0:78:37:6e:ec:80:89:68:f7:40:2e:f8:
                    2b:dd:5d:63:2e:58:96:16:59:de:95:b9:2b:f1:7c:
                    fd:fc:bd:47:7d:1d:28:33:f1:84:f8:b2:7c:42:9b:
                    d1:f0:13:7b:c3:66:89:a0:93:56:d3:9f:77:a2:dd:
                    7a:8f:7c:ee:69:54:20:07:22:c0:d7:44:b8:bf:d0:
                    a6:7d:12:3d:53:f6:ea:85:ae:fe:ba:37:cd:1f:d5:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0D:5F:25:F2:B2:07:2D:3D:DE:32:5C:4D:FB:8B:2E:5A:48:C8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/8317e356-398a-3a5b-b9fc-4cc874002a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:0e:15:e3:91:16:cd:f1:a1:34:90:81:85:c7:f4:11:38:
         9a:26:fb:bb:d8:21:cf:97:38:2c:c7:98:87:8f:ef:8f:d4:e0:
         db:7f:df:02:64:1e:88:87:53:f9:52:db:78:a0:cb:55:4c:3d:
         63:e5:34:ec:b2:9f:d0:26:ed:6f:52:08:31:a4:d5:af:33:92:
         fb:97:58:17:75:a6:00:ab:25:07:6e:71:8a:1d:f0:52:fc:2c:
         38:59:0b:90:a2:c9:58:31:72:bb:22:26:2c:2e:49:2f:76:82:
         ef:6b:12:26:87:a3:80:cb:bb:5f:42:20:f9:78:02:fa:dc:8f:
         0a:31:b2:fc:34:72:4a:76:c5:08:c6:78:c7:ca:00:a5:18:72:
         da:4e:2d:fb:eb:7f:df:f1:7e:90:91:a7:30:83:8a:77:7a:fa:
         d7:a1:e1:a0:c4:97:8e:35:08:70:94:eb:21:95:97:4c:70:77:
         29:4c:35:bf:8d:87:0b:26:82:5f:35:f7:c6:aa:86:e4:d0:70:
         4a:90:fe:9e:d0:88:4a:1b:14:0c:91:57:7e:c6:e9:25:6f:bc:
         99:f5:77:5b:5c:00:c9:38:88:3b:34:b2:6b:d0:78:26:00:e3:
         d5:2a:bc:3f:cb:f4:7e:6c:e7:77:73:45:e8:6c:11:5f:94:ee:
         04:d0:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:30 2025 by rpki-client on console.sobornost.net