Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/8f080387-0b99-360f-9a97-9916fa721c4e.roa
File:                     8f080387-0b99-360f-9a97-9916fa721c4e.roa (raw, json)
Hash identifier:          55h4vfa2EeIAy9Jh6tgvQsBRILNtb8YUhWIldf5gxis=
Subject key identifier:   7E:64:79:8D:BE:B4:36:96:8B:9D:CA:21:38:ED:10:DD:A4:53:9C:20
Certificate issuer:       /CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
Certificate serial:       010D0C9F43285849754451DFB948064B185B2060
Authority key identifier: 0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/8f080387-0b99-360f-9a97-9916fa721c4e.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     399743
IP address blocks:        216.126.65.0/24 maxlen: 24
                          216.126.66.0/23 maxlen: 24
                          216.126.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:51:df:b9:48:06:4b:18:5b:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57202e8d-d671-4fe3-bfa9-605e2ca32aa5
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=5244cc16-d7bb-4d13-8997-87d78f44b9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:5f:ec:92:29:df:02:11:fd:f8:12:20:23:
                    7b:be:db:53:0a:3c:c9:34:23:ea:67:1b:36:07:41:
                    e7:fe:02:a7:6d:3f:b7:d0:66:54:6f:d4:f9:f9:5e:
                    b5:54:06:a3:0a:de:c2:e8:2c:8d:f9:06:cf:12:04:
                    28:ca:b4:a4:31:34:8a:9a:00:18:41:25:e9:ad:54:
                    27:fc:f8:dc:f9:a5:f4:77:e7:27:a0:a4:bf:97:b4:
                    f2:fa:f0:9e:5e:da:8c:05:6b:3a:0d:7f:01:ce:ac:
                    9c:be:ea:f5:30:0d:f7:e8:c3:79:98:74:23:01:36:
                    89:37:48:2d:c2:4a:32:19:41:53:90:2d:bf:bf:f6:
                    3d:ff:f7:d4:40:54:a2:6e:ab:43:e9:c6:df:ad:76:
                    59:d1:eb:07:53:22:ae:f1:86:99:98:10:27:5e:e2:
                    9e:0c:72:61:19:97:b4:38:3c:d8:88:77:bb:1d:c6:
                    a6:3e:d8:05:7b:93:d8:36:4f:f9:74:22:8c:8c:73:
                    44:d0:8a:a9:d6:6f:35:07:a1:78:aa:5b:b4:da:fa:
                    ab:09:8a:0f:3e:e1:cf:81:37:ad:68:b7:c0:f6:6c:
                    12:13:5f:95:f3:17:70:f4:eb:dc:7f:c0:8d:a2:02:
                    94:1b:7e:59:41:23:e2:5e:80:db:c9:9b:10:0a:f4:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:79:8D:BE:B4:36:96:8B:9D:CA:21:38:ED:10:DD:A4:53:9C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/8f080387-0b99-360f-9a97-9916fa721c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.crl

            X509v3 Authority Key Identifier:
                keyid:0A:70:00:4A:1A:A0:5C:A6:C4:C7:35:57:D7:4D:96:DF:DD:09:4C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57202e8d-d671-4fe3-bfa9-605e2ca32aa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.65.0-216.126.67.255
                  216.126.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:23:77:a1:7a:f3:7b:0b:6f:b5:ee:a9:e8:78:74:1a:08:41:
         f3:6e:a5:8b:66:02:ba:e7:5b:a8:64:ae:71:f0:3e:e1:b6:30:
         fe:a4:b8:a9:ec:99:82:8f:c6:56:d4:7d:dc:85:12:7d:b1:56:
         68:3b:8b:97:e7:cf:d8:75:a8:54:a2:97:de:38:ea:cc:ac:ad:
         fd:0a:95:32:f1:a1:df:02:56:ff:8f:44:97:f3:81:f9:94:2a:
         27:fd:ae:f1:fe:cc:42:24:52:13:5a:6f:8c:da:f7:94:64:fa:
         44:f1:1d:cb:ef:ce:9f:3a:74:2d:ed:ec:3e:7f:ce:6f:f5:ce:
         c2:a3:a0:fe:fe:c1:f0:47:7e:4f:ba:b2:f5:78:3f:20:44:ea:
         47:70:7b:97:7e:f6:05:a8:41:aa:51:df:cc:db:c1:9e:7e:bf:
         dc:87:ed:40:14:13:d8:a0:2a:ed:d3:de:18:e7:1c:cf:13:74:
         c3:92:c8:ec:f5:d9:e8:d3:09:1c:a5:75:51:a8:94:fb:a0:3a:
         f4:8f:83:6d:de:4b:b8:e5:ae:5f:07:d8:a7:db:9c:3a:46:d3:
         2b:7f:c6:78:9d:27:b7:aa:b8:1b:e4:5e:94:c5:68:9c:40:63:
         4f:bb:b2:05:f8:f4:bc:a8:25:e5:c5:ca:a2:49:26:14:5a:04:
         90:09:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:54 2025 by rpki-client on console.sobornost.net