Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa
File:                     8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa (raw, json)
Hash identifier:          htQJWhnPdxFbDt0pZvMwPMGoiBHUZ4s3j20+Yf3Grak=
Subject key identifier:   75:59:99:C0:9E:7C:E9:4F:6C:85:2D:59:85:EA:C8:93:83:2F:50:75
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F4328584858A0577C87236DED4766D680
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     18594
IP address blocks:        208.74.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:57:7c:87:23:6d:ed:47:66:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=826f6bfd-c6ff-4b27-a008-e7bdb9254c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:9e:ad:44:86:10:31:ab:37:b8:3e:60:e1:
                    8d:94:2b:9a:ed:81:8b:c6:d9:ad:61:d4:57:e7:a2:
                    d4:69:83:32:1f:f6:b3:77:e5:ef:4b:3c:67:6b:f0:
                    aa:25:31:75:3c:7e:8d:67:87:92:a5:3c:fb:9f:cd:
                    7d:ef:ab:44:e1:9d:2b:87:1a:ac:25:cf:a1:1b:f3:
                    9d:55:71:e1:35:f3:1a:47:8e:75:15:41:a9:98:6f:
                    15:81:3b:21:33:4d:08:ab:b3:f4:3e:d5:c7:26:f9:
                    f8:1c:63:04:eb:c9:db:bc:da:79:69:89:51:90:9b:
                    0e:34:bd:24:73:b7:43:d1:51:25:92:75:23:4b:be:
                    d5:15:b2:c0:5e:0c:fe:2a:b6:2d:12:b7:7f:2f:32:
                    f6:6b:d9:b5:82:c6:00:4e:e3:6a:9f:ea:9c:b5:25:
                    ed:35:37:f9:60:81:20:01:77:03:36:55:10:38:0b:
                    b6:8c:ab:b3:1f:2e:69:b1:9f:5b:46:34:65:85:08:
                    15:e4:f6:da:33:31:90:c2:0e:6e:8d:94:cf:7b:4f:
                    a2:7a:4b:60:39:92:21:f3:e2:e7:94:0d:62:e0:3d:
                    0f:1b:dc:cc:fd:ea:5b:f1:64:df:91:ec:4f:fe:75:
                    ff:e6:e9:59:b8:d1:81:9c:5d:68:e7:a8:9e:9c:82:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:99:C0:9E:7C:E9:4F:6C:85:2D:59:85:EA:C8:93:83:2F:50:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/8b1d96da-dccf-32b9-9d7a-f022dadc31bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:60:6c:63:27:6a:ff:56:26:da:87:34:ff:a8:8e:a7:71:ea:
         b1:39:dd:86:db:76:f9:6c:d0:ec:f0:b8:7b:b7:88:b7:12:3f:
         45:93:e2:05:d8:2a:63:39:48:04:0b:e2:5e:42:cb:43:4e:6c:
         5d:89:49:fb:37:f5:bb:02:0a:bb:86:62:b3:c8:30:d6:4c:a1:
         8e:d1:55:ff:2b:bb:ed:59:3a:fe:75:7d:d2:de:55:2e:03:87:
         56:2b:b2:ed:d2:4e:68:61:c4:3a:82:f7:bb:09:64:1c:5f:ac:
         21:9e:5a:b9:08:c0:91:08:e4:4a:5e:17:2b:df:c6:df:d8:4a:
         dc:27:9d:8a:4b:72:d5:f9:e5:3d:3b:28:cb:be:85:dd:41:d3:
         01:ec:d1:cb:f8:fb:64:c6:3b:91:f0:a9:8a:2c:5e:65:59:2f:
         79:bf:9b:04:0d:5c:24:28:93:1c:28:5d:13:a6:e6:a1:47:ce:
         b5:20:ec:16:4d:99:4e:3f:f2:e9:0b:cc:6e:18:b2:3e:13:64:
         8a:21:59:b2:e7:c0:c1:63:76:23:02:49:6c:ed:68:78:c5:81:
         33:6a:56:3a:08:68:da:80:ba:01:c4:ed:db:83:d9:57:9d:60:
         4d:c2:74:c2:b4:ee:53:97:94:7a:9e:18:8f:39:0e:14:20:1f:
         bf:11:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:14:42 2025 by rpki-client on console.sobornost.net