Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa
File:                     6dbd232f-690e-3215-b880-148975cd85db.roa (raw, json)
Hash identifier:          vkJkveDvJZUvvI37fituqkM0PbNwo7ptsdCk2j81UrY=
Subject key identifier:   7B:EC:2C:97:25:D2:BA:DA:8A:F6:3F:44:5B:48:D4:B0:89:28:B6:9F
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584858A0523B87E63902ECA30198
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     18594
IP address blocks:        64.57.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:52:3b:87:e6:39:02:ec:a3:01:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=5aa222a6-b25b-4e95-8165-aa0d83cb448c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:21:59:8f:cb:0e:47:68:20:fa:15:95:be:ba:
                    d3:a9:ba:65:ba:e4:44:28:e8:89:8b:9b:de:84:2a:
                    e4:81:60:76:5c:56:df:c9:c7:c9:98:c5:cf:a3:db:
                    f5:75:ce:81:67:49:cb:c2:45:83:27:3f:61:e4:11:
                    fe:d3:69:d1:91:2b:5e:7c:cf:5a:63:fb:36:55:78:
                    b8:2b:d3:0b:c7:68:c0:9e:23:c9:68:f0:c9:5a:b9:
                    7a:c5:7e:bf:97:e1:37:3f:5a:87:be:98:a3:bb:87:
                    de:f6:a6:c5:83:51:d0:73:f5:89:ed:c5:0b:f6:eb:
                    e3:0a:76:c5:f6:b5:7d:01:de:6f:06:c7:68:c1:e1:
                    cd:67:b5:69:a8:01:d1:5a:4d:c8:7d:bc:43:b4:21:
                    1d:9b:a0:12:c4:59:8c:39:71:a8:1d:6e:a4:78:c2:
                    4d:df:eb:13:c0:7f:e2:65:ba:98:29:50:aa:e1:ae:
                    25:bc:a8:05:88:60:2e:d7:81:f5:9a:5b:e2:18:b0:
                    83:29:18:1a:ba:cc:aa:d4:01:96:a9:32:6f:07:f4:
                    66:1f:63:20:f6:90:bb:42:c2:df:84:72:5a:e1:6c:
                    ae:23:ee:3f:f2:1d:a5:d0:83:40:71:48:2c:3c:e5:
                    aa:0b:3c:3f:90:63:a5:b9:74:a4:49:30:e2:21:1f:
                    92:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:2C:97:25:D2:BA:DA:8A:F6:3F:44:5B:48:D4:B0:89:28:B6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/6dbd232f-690e-3215-b880-148975cd85db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ef:e5:24:e6:6a:68:8b:d6:8e:54:86:bc:ec:c1:34:1c:14:
         31:e0:1e:46:c3:e8:65:42:0f:57:a6:6e:33:ac:81:7f:1a:30:
         84:5a:ae:67:8f:04:e3:e2:1d:16:60:d8:6b:27:a7:78:89:e5:
         83:52:4b:fc:13:e4:00:28:f8:1d:a3:0f:f9:a6:11:b7:97:6a:
         bd:99:02:1a:ac:f5:98:ae:86:fb:95:c0:f9:ec:be:2f:b3:00:
         71:f3:59:b2:69:a9:c5:c0:f2:4e:b5:44:15:ca:32:e9:3b:27:
         04:c0:0c:f3:6b:ad:a5:36:73:4a:ad:f1:89:a0:7d:a1:8b:f6:
         dd:55:c6:9e:d9:0f:05:a8:60:1d:a6:d2:ec:7a:96:ba:cc:fb:
         bd:27:44:81:2b:16:30:f4:ac:c1:a3:5b:dd:30:61:00:6e:09:
         25:69:53:44:d6:a0:77:1f:93:a6:d8:c7:57:11:3e:37:3f:ea:
         3a:30:5f:c2:99:f2:cb:2d:1a:1d:2b:bd:2b:75:ae:6f:ab:1b:
         fd:a4:37:5b:c4:21:aa:63:94:42:28:c3:0e:5d:cb:ec:5d:1a:
         c4:fd:01:fc:05:84:b0:33:37:d6:94:78:3f:82:17:3a:c5:d5:
         46:66:f8:6b:84:38:1f:05:75:67:16:18:2e:ea:67:e5:05:3e:
         c8:15:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:14:41 2025 by rpki-client on console.sobornost.net