Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa
File:                     b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa (raw, json)
Hash identifier:          h7WmMhMZy8H/sj5n3cMp2QJkCgE3uB6pQtxYsb6zvko=
Subject key identifier:   C1:79:E5:CC:42:5D:9A:AD:F5:79:FB:4A:5D:D2:67:AA:BC:D2:16:C6
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F43285849797445B681D41B5224004610
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     398420
IP address blocks:        74.126.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:45:b6:81:d4:1b:52:24:00:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=a31efb59-6160-4535-9945-45fcef51125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:f3:e1:13:94:f4:2d:c6:a6:1a:68:92:70:
                    03:c3:6a:b8:f7:23:62:fa:f9:a2:b1:fa:f4:7e:a9:
                    92:3d:b1:6d:79:ff:96:00:1e:f4:be:ca:3b:16:56:
                    24:8b:34:6b:ed:e7:54:59:e4:85:ec:7b:04:00:23:
                    c4:7b:34:81:1c:11:85:82:f7:bd:55:17:73:3f:bf:
                    98:ad:5a:ec:ac:d3:c6:3a:1b:55:20:e6:3d:d3:68:
                    ff:27:0d:9a:0c:53:04:62:e2:c8:2e:f5:dc:8a:79:
                    b6:b4:84:89:4a:7e:7c:cb:53:3c:1c:98:72:1b:1f:
                    23:2a:6a:45:2c:f8:21:b6:92:74:91:af:5f:e9:00:
                    e1:85:c6:e0:6a:30:a9:a5:14:0f:8e:ac:ac:99:2d:
                    e7:2a:9c:b7:87:2f:74:86:77:45:1b:8a:dd:39:4e:
                    85:65:81:e5:64:b8:68:77:23:6f:39:49:e8:21:07:
                    ca:4c:7a:1d:04:c3:20:da:74:4d:5f:37:c5:3a:03:
                    5d:91:17:58:f2:4f:7d:1f:ee:30:b9:92:e9:ba:c3:
                    e6:ce:86:46:21:6e:b4:91:e8:c0:a2:26:4d:01:db:
                    4f:57:c1:7f:d5:a7:ff:5b:d5:9b:ed:75:b3:bd:5e:
                    36:2c:11:d4:3f:13:d9:29:2a:47:3d:f2:6b:05:12:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:79:E5:CC:42:5D:9A:AD:F5:79:FB:4A:5D:D2:67:AA:BC:D2:16:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/b23fd0b4-c7c9-33af-8ebf-03cbc021ad17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.126.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:57:66:5f:98:43:63:e9:a3:63:ea:df:8a:a7:e2:0c:3e:d2:
         e3:df:9d:00:27:9e:ae:24:75:9c:04:e6:a9:b0:15:a4:b0:47:
         dc:98:e1:36:d2:e5:88:4e:c4:60:98:84:c1:fd:4f:b0:64:09:
         34:d7:b1:7b:83:a0:52:f7:a0:a5:88:3d:56:5e:bb:3e:a5:c0:
         03:bd:b0:58:62:31:bd:2f:15:83:45:c0:e9:39:d8:b8:ad:a3:
         3c:36:e2:ef:8b:0b:6b:6d:38:9b:39:c6:a9:22:88:76:42:59:
         e5:80:a2:1c:89:6a:b6:f3:be:bf:b4:35:16:35:80:80:a2:05:
         94:b9:a8:55:e8:a5:a9:cd:71:86:5b:be:93:71:ce:35:2c:6a:
         69:dc:e3:82:ab:8e:df:99:b6:c9:8a:40:80:e3:25:94:2a:7f:
         1f:1f:5c:1d:c5:4d:42:97:3e:1d:f5:26:aa:ca:b6:55:43:70:
         4c:8c:5f:b8:b1:cd:14:43:a4:5f:27:bc:7c:8a:2e:81:95:26:
         29:1d:ce:7f:8c:34:bc:eb:95:f7:4b:36:6d:50:68:4a:51:91:
         42:46:fc:b1:18:94:17:c7:4f:99:6d:7b:19:a0:f1:86:48:ec:
         4f:32:bd:0a:08:e8:4a:a4:1e:fb:da:ba:f4:87:4e:57:1e:1f:
         29:52:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:51 2025 by rpki-client on console.sobornost.net