Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/d18280a1-9af6-33b3-b851-11707b8fd86f.roa
File:                     d18280a1-9af6-33b3-b851-11707b8fd86f.roa (raw, json)
Hash identifier:          W5hTjSTQ4p2NlGKne/46Ku5n5ej8JMCVNM56xVIe2lQ=
Subject key identifier:   4A:70:2F:8F:F7:A0:51:A9:67:31:BF:BA:2C:17:CF:C9:48:6E:7C:BF
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F432858494734003A31B22DF0765C8E10
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/d18280a1-9af6-33b3-b851-11707b8fd86f.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3257
IP address blocks:        209.135.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:34:00:3a:31:b2:2d:f0:76:5c:8e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=7b564af1-4555-4ae5-a032-ae0cb0e2e473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:6b:4a:c4:55:d0:4a:45:d7:39:0d:16:23:
                    50:81:7d:04:58:a8:61:e9:d1:c7:19:24:ac:f1:36:
                    93:35:d4:32:ea:6c:69:74:9f:39:89:81:94:00:9e:
                    5f:77:ab:25:c7:9a:2a:74:48:97:8d:d2:d9:e6:62:
                    c9:96:34:87:fe:a8:4d:5d:97:2b:8d:37:48:d3:c2:
                    d1:ce:fb:59:16:10:b7:0d:a9:73:81:93:c3:38:4f:
                    3f:c3:4d:1f:ae:d9:1d:85:5a:48:08:56:a8:0e:02:
                    d7:f7:0f:16:51:61:bf:6f:c3:e4:ff:45:02:fd:93:
                    83:0b:ce:67:ad:4c:e6:f1:a4:5b:9c:47:fd:40:a9:
                    9b:92:8c:5c:e6:b4:05:60:14:36:a1:ed:73:30:50:
                    19:66:18:01:d2:2f:2f:93:97:1c:83:3a:e9:07:d4:
                    48:44:13:db:4a:41:77:0e:b3:a9:ce:11:43:3c:06:
                    07:67:a2:d5:50:90:4a:79:0b:fb:61:96:70:04:20:
                    05:88:e0:a0:05:c1:e7:46:6a:35:07:78:be:5f:f9:
                    c7:0f:7f:f9:af:b2:e0:c7:88:e6:85:8f:10:ce:be:
                    44:83:ba:d7:93:61:4e:a1:0e:b4:0a:f1:c7:4d:60:
                    42:58:0d:8d:69:d7:ab:62:f4:cc:ca:81:ea:63:76:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:70:2F:8F:F7:A0:51:A9:67:31:BF:BA:2C:17:CF:C9:48:6E:7C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/d18280a1-9af6-33b3-b851-11707b8fd86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:60:ad:e5:20:e0:47:36:50:43:44:0f:69:7f:e0:c3:dc:20:
         80:53:5c:79:f9:f2:79:ea:fc:5f:a3:5f:30:bc:b3:34:04:7c:
         df:fd:46:f6:b4:77:57:00:8f:de:fc:39:e7:9d:86:b7:06:85:
         b1:9b:14:64:ba:1c:7d:0e:77:9f:e2:6d:cb:55:ca:be:7f:75:
         3e:d8:18:9f:0d:b2:ef:7e:79:9e:72:03:45:52:5b:da:bf:43:
         3c:ef:d9:bf:ad:2a:be:f8:79:f7:79:50:d0:ae:cc:28:c2:1f:
         97:ea:b1:42:80:6a:42:20:93:53:c9:b9:db:24:91:aa:15:45:
         d3:92:96:d1:de:f3:f6:da:c0:a5:91:ed:3f:85:f3:c1:5f:27:
         cb:44:bf:a1:c0:62:ca:f7:4c:43:78:25:2c:c8:19:f0:41:fa:
         36:59:3e:1e:d4:cb:c9:aa:c2:ab:c9:4c:06:d5:36:91:2e:1a:
         fa:3b:8c:27:a6:ee:8e:54:dd:0f:7a:68:65:7d:00:1c:40:d5:
         b6:0e:16:7a:c0:fc:e4:d6:01:1e:e5:40:79:8f:9e:15:d9:35:
         47:f2:b0:19:f0:8f:eb:51:8c:78:16:1e:46:6c:0f:35:27:8d:
         fe:3a:ae:d4:cd:cf:9f:7d:a7:48:fd:7a:70:7c:7c:80:fe:74:
         e5:a6:74:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:07 2025 by rpki-client on console.sobornost.net