Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
File:                     92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa (raw, json)
Hash identifier:          gHr0n6biOhYoOCsjOjbWymjE+cM5BDygqNQDRkuvWkM=
Subject key identifier:   1C:9A:F5:26:6D:7C:C7:23:14:68:CE:F9:6E:A3:7F:9D:44:F8:3B:C8
Certificate issuer:       /CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
Certificate serial:       010D0C9F432858496A19AC3A07551280758E4D00
Authority key identifier: 8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     25813
IP address blocks:        192.252.0.0/21 maxlen: 24
                          207.231.176.0/20 maxlen: 24
                          208.65.4.0/22 maxlen: 24
                          216.9.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ac:3a:07:55:12:80:75:8e:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c94592-73e9-452e-ad88-aafc8e3ee7a5
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=51582c60-21c7-4d10-9df7-694ecda7dc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:dc:83:cc:70:62:50:88:c4:b8:36:4d:74:82:
                    35:d1:ab:3e:c3:47:38:43:b6:b5:c5:6b:96:d4:49:
                    6c:ef:66:7e:03:1e:5b:91:e4:56:d9:62:a4:3a:e5:
                    52:b5:33:ac:4a:a5:ef:1e:2e:b8:61:b4:74:6b:95:
                    98:94:7a:c6:e8:20:37:65:28:e1:96:77:43:c7:28:
                    2e:3a:0e:4d:d9:86:36:7a:62:4c:ba:d5:de:9f:bf:
                    29:73:f7:14:45:ee:cd:7e:28:ec:cc:55:aa:6f:be:
                    84:f4:72:f1:86:78:7c:0b:4d:8f:5a:e1:de:7b:e0:
                    29:bf:b7:42:19:4b:a2:06:ed:d0:4c:79:65:6b:78:
                    1e:db:75:05:4a:2f:0e:98:c3:6c:08:8f:fd:16:b5:
                    a7:41:da:d5:9a:3f:56:0f:31:3f:31:0c:a4:95:90:
                    db:6a:8f:94:09:29:c6:f2:27:6b:22:5d:86:72:3f:
                    fc:98:fc:81:87:8f:ab:15:01:9a:bc:82:26:a2:17:
                    bc:25:1b:8e:66:83:ef:bd:4f:51:60:c7:2c:8d:ad:
                    a7:49:6e:44:91:f1:b8:6c:71:18:de:a0:af:b2:93:
                    33:24:10:1c:55:96:c6:5d:86:fa:9c:15:dc:4b:21:
                    e5:ae:ac:32:98:f9:3e:a7:3d:79:5b:63:14:36:f0:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:F5:26:6D:7C:C7:23:14:68:CE:F9:6E:A3:7F:9D:44:F8:3B:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/92ee6ad9-11ab-3136-81a2-8204d42c0e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.crl

            X509v3 Authority Key Identifier:
                keyid:8B:58:B3:9B:84:26:F0:75:EC:39:8B:C0:F1:3D:40:1E:FD:77:4F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2c94592-73e9-452e-ad88-aafc8e3ee7a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.252.0.0/21
                  207.231.176.0/20
                  208.65.4.0/22
                  216.9.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:c7:6a:76:c1:33:2b:8b:b5:a1:8f:62:cd:a8:4a:99:26:
         e9:8d:2d:e1:72:0b:f9:40:da:ba:88:86:d2:ae:4a:71:75:c2:
         98:26:87:77:aa:a0:af:9f:e6:de:08:53:b5:6e:e9:9a:38:13:
         00:6f:31:05:5c:11:77:a6:81:5f:9c:af:b0:d7:05:5e:8a:1d:
         2b:0b:a7:5f:a9:dc:ad:df:36:79:c9:05:57:5a:d6:32:47:5b:
         4b:43:03:1a:38:a3:3f:e9:17:be:75:92:33:06:42:2a:67:9b:
         b5:41:41:db:a1:e5:54:13:86:a0:bb:66:e4:e9:23:49:07:54:
         b0:d4:25:9a:ac:a6:0e:02:70:d6:59:6a:96:ca:2a:66:19:34:
         1d:9b:54:ed:32:82:2b:c1:02:0c:43:1a:dd:14:6d:2d:90:49:
         b7:1e:24:ae:32:6c:09:e6:ec:0a:28:a5:9c:33:67:c7:77:07:
         64:01:49:5e:45:55:04:c0:7d:b1:98:88:94:18:85:0d:0f:de:
         2b:1c:87:ec:81:5a:8f:d1:bc:76:97:93:f9:e3:43:3f:da:3e:
         b3:a0:a5:04:76:7e:05:84:e2:54:55:d7:e5:9b:3d:07:bc:09:
         a6:5f:fa:5a:4b:95:ce:7f:7b:89:83:7f:51:02:04:55:8c:5a:
         a4:a5:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:33 2025 by rpki-client on console.sobornost.net