Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa
File:                     a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa (raw, json)
Hash identifier:          uxbMbuYpRuNvpkrUCT+THdsCq6zPEfdqKsuzVl6bIvI=
Subject key identifier:   4C:77:AB:6B:34:93:CB:36:6A:99:5E:1E:B0:B4:0E:D6:F7:3E:38:DD
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F432858494E2EB3A04B70A5AD58583000
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     19527
IP address blocks:        57.140.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b3:a0:4b:70:a5:ad:58:58:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=9e2539ac-8053-4df0-955f-b48cfd34853b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:cb:e7:3c:fd:54:36:eb:d3:06:3f:3c:c6:
                    46:ce:09:28:b9:f1:d8:05:dd:bd:fb:3c:09:a4:20:
                    2e:e2:58:3d:d1:bf:96:32:84:16:1c:79:12:05:4a:
                    35:f4:d2:67:c6:eb:eb:8d:27:a4:92:b2:57:00:f6:
                    92:01:cc:67:33:98:cb:b8:0e:82:5b:bc:c1:2e:42:
                    79:64:af:1a:e0:b0:45:03:90:4b:44:c8:6f:2f:f8:
                    e6:ec:88:04:8c:30:ad:94:a4:2f:d0:9d:fd:16:30:
                    e8:49:d7:21:f1:29:72:dc:a5:dd:8d:fc:6e:56:dd:
                    54:36:56:cb:70:3e:0d:e3:3e:22:31:5f:cf:11:c8:
                    c6:71:e7:99:ad:37:42:13:f9:7a:25:a3:6e:67:2c:
                    0c:e1:81:a2:e9:d0:bc:6a:67:95:94:de:b0:0c:24:
                    1b:b5:37:73:68:29:b0:39:6b:ce:ca:ca:fa:46:58:
                    53:ef:7b:ec:67:2d:da:8e:7e:d7:24:da:cb:2c:4e:
                    aa:c0:8f:d3:1b:d6:c2:c5:34:ca:55:6e:7d:81:22:
                    f0:a4:a2:92:5d:cd:4c:e9:2f:7f:7a:86:72:82:42:
                    20:8f:db:c3:53:43:2b:24:ac:94:34:2e:dd:0a:63:
                    3c:a5:0b:58:0d:bf:ed:d5:12:84:3c:8c:2f:19:a4:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:AB:6B:34:93:CB:36:6A:99:5E:1E:B0:B4:0E:D6:F7:3E:38:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:73:a8:46:37:6f:58:07:58:1d:7b:04:01:cb:6d:86:6f:89:
         44:ce:c0:c8:b8:74:04:21:60:67:91:05:87:27:1e:24:4a:3c:
         cb:16:82:97:2b:65:53:c7:97:d7:5a:52:7f:97:61:ae:09:ae:
         50:2c:ed:41:15:5c:f1:4b:2d:60:89:f9:6e:80:ee:22:12:17:
         e3:49:ed:c0:39:34:70:da:56:54:54:36:4b:51:87:12:0a:7e:
         54:8c:35:34:93:36:de:fc:d5:52:0d:1e:6b:f1:b3:0e:0e:3e:
         9f:0a:bb:c6:03:da:71:86:7b:b2:3a:8d:2a:60:93:b7:c0:1d:
         e9:23:85:cf:d3:23:6a:93:60:b4:8e:00:59:db:8b:50:be:f2:
         dd:4b:d6:4d:8a:f6:26:d8:64:51:23:80:ad:4f:32:28:ed:e8:
         b5:3c:19:5b:ef:b9:86:9b:e1:56:be:5a:e7:34:ea:3b:54:38:
         df:88:ea:24:0b:98:7b:7b:4b:8a:b3:3b:e7:9c:75:cb:a4:06:
         11:99:64:5e:e9:5d:a0:79:db:1c:ef:dc:1f:15:f5:95:0f:eb:
         2c:01:c2:48:d1:57:11:c2:4d:59:8e:08:c3:15:aa:83:65:66:
         64:37:89:55:24:9f:cf:44:00:3d:e1:88:b9:d0:37:b0:a4:ae:
         ff:65:d0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:13 2025 by rpki-client on console.sobornost.net