Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa
File:                     fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa (raw, json)
Hash identifier:          b90n+zhkfgrZjrxmVr5IE+sfzZOS7bCo7bJFj1MTL3U=
Subject key identifier:   FD:27:1F:FC:01:EF:5A:D5:8F:39:39:28:E7:5D:65:52:15:33:45:E2
Certificate issuer:       /CN=73c8aa7b-fac7-4435-95df-f01200da47d9
Certificate serial:       010D0C9F432858494F93E6D6979054EB7694CE80
Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa
Signing time:             Wed 26 Mar 2025 01:00:40 +0000
ROA not before:           Wed 26 Mar 2025 01:00:40 +0000
ROA not after:            Tue 24 Jun 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        199.66.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:93:e6:d6:97:90:54:eb:76:94:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9
        Validity
            Not Before: Mar 26 01:00:40 2025 GMT
            Not After : Jun 24 01:00:40 2025 GMT
        Subject: CN=a583ef62-0395-4c8f-9b37-01f111cb84d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:59:0c:1e:c6:73:e5:6f:c1:f2:78:ec:42:
                    03:2b:fe:02:50:1d:b5:35:f1:a3:69:3e:e6:f6:6d:
                    30:d2:f0:c9:9d:4c:8f:3c:38:93:f2:d7:5b:ca:fa:
                    fc:33:27:10:8d:65:82:fa:d8:4c:9e:3f:cc:1d:a9:
                    e2:ed:ca:dd:82:de:0b:1e:cc:99:10:b3:d4:11:1c:
                    18:ed:0c:82:09:23:e2:ff:eb:0d:04:51:82:9e:b8:
                    9e:90:f5:26:4b:a3:fd:48:f0:8e:29:16:57:8c:15:
                    e4:1f:c6:b5:09:c7:d9:eb:2e:37:b0:44:bc:cf:bf:
                    db:7b:ed:0e:81:c1:c9:61:3f:00:07:c8:b3:1c:9e:
                    e7:a3:44:ec:f7:ac:7c:2e:a9:d3:42:da:8d:89:61:
                    e2:ae:1f:34:f4:bb:d3:0d:d9:6b:c4:bf:5f:47:08:
                    bf:02:63:c2:94:e2:f5:87:80:96:db:01:c3:96:e2:
                    d7:d2:57:8b:1e:2b:31:3e:2d:03:d6:c4:87:57:5b:
                    4a:0c:c2:e6:e8:7e:83:3d:8d:dd:7a:30:96:4f:10:
                    52:90:46:95:83:cc:49:00:7d:51:bb:67:d0:de:52:
                    b5:99:83:d9:fa:4e:29:bc:92:12:84:19:71:48:a2:
                    c9:85:46:2c:c3:f9:be:98:6f:dc:78:f0:e8:b4:d3:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:1F:FC:01:EF:5A:D5:8F:39:39:28:E7:5D:65:52:15:33:45:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/fe25f1e7-0375-39d5-8b39-0c584de0d8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl

            X509v3 Authority Key Identifier:
                keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:53:94:a5:1d:de:a9:8d:da:57:bf:b7:d7:a6:cd:5c:d1:
         3b:4c:27:46:70:b1:9f:88:d0:ff:63:d5:90:0c:66:6e:f2:11:
         0f:42:9b:38:4d:0d:fb:b6:ed:93:f6:b0:5e:5d:ad:22:74:08:
         a3:1c:d0:65:dd:02:5b:a0:51:60:34:74:22:83:7b:06:54:b8:
         28:d6:ce:af:18:98:e2:a3:ee:0c:f3:67:07:3f:6e:66:13:fd:
         1a:69:58:94:47:4b:e0:8e:9b:da:66:39:70:d8:fc:6e:de:f6:
         a6:83:9b:c0:fc:39:d2:9c:81:df:86:c9:b9:02:95:28:f2:1e:
         38:f7:c1:67:84:18:3b:15:c8:e4:65:7b:84:0f:4f:24:75:f9:
         c8:d3:d1:54:48:c6:da:ac:f5:27:ea:ac:3f:f0:4f:1d:b7:82:
         09:92:01:6c:eb:02:81:31:4e:22:17:8f:7f:e4:cf:2a:b0:67:
         7b:05:47:0a:d0:68:36:20:79:cf:01:f4:f1:68:c4:9e:05:bb:
         82:db:76:34:79:88:9b:74:3f:0f:18:89:7e:33:ff:df:24:20:
         4a:9c:7a:45:a3:b8:14:3c:8a:f5:b1:7f:8b:f8:fe:bf:0a:aa:
         7a:d7:a6:ae:34:d1:a5:82:9d:72:80:64:ee:dd:62:84:ec:a6:
         fb:b7:60:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net