Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c22b0c5a-103c-3e33-bbec-11b31784a28b.roa
File:                     c22b0c5a-103c-3e33-bbec-11b31784a28b.roa (raw, json)
Hash identifier:          NBIyDPvcVTreg4+6r/q+zpl/nqFlsfwBGyhVxEBey0Y=
Subject key identifier:   51:24:10:4F:6C:E2:CA:9A:BF:67:B2:11:E8:66:98:0A:07:86:7E:0B
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F432858480214FF6D71F7B171E49ABE00
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c22b0c5a-103c-3e33-bbec-11b31784a28b.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     36734
IP address blocks:        76.77.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:ff:6d:71:f7:b1:71:e4:9a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=17e6546f-4df9-4967-935a-83fc411b96ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:11:cd:24:bc:98:44:6e:b7:60:5e:ab:81:
                    94:ca:29:cd:89:36:fe:f3:c3:78:cb:ab:ed:c0:66:
                    1e:fb:5d:57:e1:04:ab:99:b0:58:a3:bc:57:40:b1:
                    31:48:db:b9:c9:77:08:72:f1:30:00:71:15:97:47:
                    40:29:6e:cd:b9:aa:ee:4f:9d:4a:16:fe:3e:11:16:
                    50:d1:95:f2:e0:25:a2:07:5c:38:fe:48:d6:cc:09:
                    f9:69:34:6d:0d:1d:b9:93:9e:83:0b:d0:21:01:f1:
                    70:a2:99:67:c0:95:54:f8:df:e7:f5:9e:96:ae:01:
                    24:e6:c2:08:c7:60:ed:0c:cd:a6:f1:9d:1d:ed:1d:
                    a9:de:dd:c7:00:21:5a:e9:8b:d1:9b:39:e5:dd:f5:
                    60:ad:5b:da:f9:92:bd:13:5a:e1:e8:05:50:7b:c6:
                    7b:5f:0c:a9:15:c3:b2:04:8e:2c:61:81:c7:61:13:
                    21:08:51:61:4e:a3:e8:ea:18:d5:62:4e:74:ce:df:
                    0a:22:18:b5:ab:da:51:97:c6:d7:67:57:ca:22:f2:
                    b0:d2:d0:bf:72:d9:65:85:17:eb:f8:6e:41:b2:7a:
                    24:11:ee:cb:85:92:2b:1b:10:ec:9d:51:1e:d1:de:
                    3a:f3:6f:d1:43:a4:ac:ae:8e:d7:e8:fc:e4:f5:2a:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:10:4F:6C:E2:CA:9A:BF:67:B2:11:E8:66:98:0A:07:86:7E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c22b0c5a-103c-3e33-bbec-11b31784a28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:4f:30:6d:22:d1:78:28:4f:3d:fb:9d:62:8c:6a:dd:92:
         a2:7b:36:f2:a9:5d:d2:a8:56:c7:6f:17:3d:66:6c:36:dd:22:
         3b:54:6b:7a:a5:fe:f4:7b:89:cf:74:f9:b6:17:5e:18:9c:e8:
         e8:88:00:ee:e9:f2:05:c8:18:6f:17:68:34:be:bb:57:c6:ff:
         bb:d8:3a:0b:a5:43:dc:10:44:18:27:d8:53:48:c0:e5:60:81:
         f8:10:51:d3:d2:0e:48:0b:bc:63:28:20:74:51:fa:1b:0b:33:
         7d:ab:ab:9b:1e:e5:6b:91:af:90:24:89:c5:08:fd:e3:e4:32:
         db:c0:82:1d:dc:96:0b:3c:d0:8a:84:ff:a5:17:75:4d:9c:5f:
         d1:2f:4d:ce:c3:f7:67:3d:55:68:f2:41:88:d9:c1:59:55:63:
         ad:98:22:0f:37:a0:4b:aa:cc:ec:2e:7e:6d:25:09:ae:bd:c0:
         67:96:34:b4:b2:48:1c:60:df:b5:e2:dc:58:8d:42:a9:af:09:
         f1:87:97:b3:e0:ce:88:8d:34:45:48:8b:c6:5c:97:10:40:d3:
         b0:a9:31:80:4e:c8:77:33:2f:1c:bb:3c:92:5f:cb:03:a9:37:
         b0:2b:f8:8d:75:23:b4:84:e5:44:70:bf:50:7c:33:1d:3c:e1:
         b5:b8:70:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 03:25:37 2024 by rpki-client on console.sobornost.net