Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa
File:                     a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa (raw, json)
Hash identifier:          nWvpHwXOQ96MTnqc1FbQXKYF0R+AJeolMxg5f9c2dkM=
Subject key identifier:   82:8A:6D:11:84:A7:8B:D1:B7:75:CD:D0:C2:1E:4E:95:E9:32:3A:D1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858496FAEF1DB06BDD0DBCAD51E30
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:f1:db:06:bd:d0:db:ca:d5:1e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=181b9da3-e532-489d-adf4-c7756e02f4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:7e:b3:f9:cc:35:d4:92:a8:cc:b9:78:81:
                    1a:af:57:51:7b:d7:d0:9f:2e:dd:3f:19:b5:61:aa:
                    ec:88:57:6f:f9:72:8a:1f:e4:ea:2d:26:87:6f:51:
                    b7:48:60:ba:94:95:a2:b8:7f:36:b4:72:cd:db:9b:
                    88:c7:a4:87:f6:20:91:78:03:06:f4:a9:ed:e6:e2:
                    cb:7d:ad:45:d3:80:08:8d:06:28:73:11:db:71:98:
                    d3:70:ba:3e:c0:c6:6b:5f:bf:43:e9:ca:fd:03:9c:
                    7d:f0:bb:fe:b6:d3:47:1c:17:f0:53:04:f0:55:02:
                    c8:b5:00:d7:8c:9a:86:7f:1b:da:8c:d9:01:e9:15:
                    aa:85:b7:af:e6:38:27:6c:9b:fa:8d:1d:c5:f6:6e:
                    7d:f1:66:50:29:9d:b0:3b:6e:01:b3:80:a4:3f:fa:
                    01:90:aa:16:52:81:a6:ef:4b:cb:11:8d:60:66:2b:
                    b3:6e:b7:0f:c4:7d:c6:ad:b0:da:c9:a8:b6:1a:15:
                    f0:ea:74:60:5b:c9:e6:c8:24:22:43:d6:27:8d:af:
                    c8:d9:2c:e9:33:c3:22:24:52:18:74:3d:66:fc:4a:
                    79:a7:39:df:14:fa:fe:c4:a4:8d:76:f8:86:8c:ae:
                    dd:b8:db:b2:c5:5c:fa:82:3e:a0:3d:88:ee:b4:2e:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8A:6D:11:84:A7:8B:D1:B7:75:CD:D0:C2:1E:4E:95:E9:32:3A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a5ab7123-1d1a-3ed9-b7cc-9d37c0089a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:90:83:f0:e7:80:3e:1c:e6:d5:3c:c6:76:12:42:26:74:c5:
         7f:91:2a:84:6a:9a:d9:ec:a9:56:3d:20:57:63:6c:47:9d:b2:
         86:78:c6:b2:f0:a7:43:27:07:a5:d0:9b:81:ef:74:71:4e:f8:
         9b:d4:59:00:f5:17:f0:d9:3f:64:06:3e:07:3e:ca:b1:49:33:
         51:1c:37:eb:94:70:f3:f7:f8:fc:ab:49:9f:dc:0b:25:a3:08:
         2b:86:59:28:ca:da:f5:f3:aa:fa:58:4b:09:14:e3:5d:27:01:
         c8:4e:d8:a3:b0:f2:e6:11:03:d4:0d:02:a4:83:f8:be:a6:da:
         bf:39:8f:4f:ab:78:54:85:c1:d1:c0:29:a6:d3:77:be:5f:f3:
         76:bc:cf:9a:e6:82:a8:90:fa:ac:2a:92:3f:73:f0:d4:2d:2d:
         59:b1:b9:cd:0f:29:f3:ea:be:b9:dc:4f:51:25:10:06:71:56:
         ec:bd:e6:a3:43:bd:21:b4:8e:37:33:8b:47:3f:4d:8b:be:12:
         f5:38:4d:05:d6:8d:eb:ca:9e:fe:90:1d:e6:bc:a1:33:eb:7a:
         78:d2:5f:dd:93:9d:13:0f:c3:4f:a3:e7:51:72:4b:d6:3c:62:
         24:72:a8:e7:54:91:19:c7:90:ea:c3:e4:f9:5c:10:f9:d9:e7:
         7e:a3:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:16 2025 by rpki-client on console.sobornost.net