Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ead967d3-a47d-3fe6-954a-be219be8d76e.roa
File:                     ead967d3-a47d-3fe6-954a-be219be8d76e.roa (raw, json)
Hash identifier:          AZ2s0LXjERPeZ3MvGepWOr5cJOivUf0GfmYYvpeY/3Y=
Subject key identifier:   F9:78:20:E1:9F:55:44:5E:C7:FB:65:7C:7E:78:0E:A9:2C:7F:B7:BA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848FF9D607AAD40E03DD182A600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ead967d3-a47d-3fe6-954a-be219be8d76e.roa
Signing time:             Tue 25 Feb 2025 09:35:07 +0000
ROA not before:           Tue 25 Feb 2025 09:35:07 +0000
ROA not after:            Mon 26 May 2025 08:35:07 +0000
asID:                     329007
IP address blocks:        172.111.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:9d:60:7a:ad:40:e0:3d:d1:82:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 25 09:35:07 2025 GMT
            Not After : May 26 08:35:07 2025 GMT
        Subject: CN=85f46827-8a97-4a5b-b79d-64b88de00d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:2d:66:16:76:e7:c8:e6:50:5f:47:9d:c8:
                    a2:0a:8f:7c:4b:39:ea:ac:2b:27:88:df:74:9f:a5:
                    1a:aa:be:cc:97:16:d3:26:2a:f6:96:fb:d2:5a:0e:
                    76:27:d7:af:d3:0e:65:8f:6e:65:92:83:2e:41:01:
                    ce:83:c4:73:8c:19:5f:16:3f:f0:b5:6d:d2:99:95:
                    28:a1:e7:7a:98:a4:8c:38:82:23:33:0c:64:a6:c9:
                    24:4b:39:66:49:79:b9:dc:34:c8:e3:8e:a6:0f:3e:
                    83:79:c8:f1:90:a5:52:9c:42:b1:b5:6b:a1:71:2d:
                    5a:db:1b:15:02:59:db:38:55:06:33:81:a3:29:59:
                    bb:0c:d2:02:f0:53:f7:71:e5:69:46:36:e4:77:69:
                    cb:cf:8f:d9:31:2e:4b:45:8a:12:ec:bf:c4:52:e7:
                    ef:3e:8a:fb:04:a8:b0:49:a9:9b:82:5a:2c:dc:5a:
                    ba:10:09:ef:04:bb:28:26:74:b5:a5:f0:78:52:81:
                    e6:06:f0:08:5b:db:50:2a:6e:6e:e9:58:25:d5:fa:
                    51:76:77:7b:13:5f:5d:85:7d:52:9e:60:82:af:7c:
                    5a:65:86:5b:f2:ed:9a:bc:a2:48:df:71:44:56:19:
                    d1:ae:f6:c4:9c:1f:1b:91:8a:d5:19:92:af:5a:6c:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:78:20:E1:9F:55:44:5E:C7:FB:65:7C:7E:78:0E:A9:2C:7F:B7:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ead967d3-a47d-3fe6-954a-be219be8d76e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:47:08:b4:f1:52:ab:78:6d:10:c0:25:91:71:cc:04:15:6e:
         d9:e3:54:78:94:e6:f9:64:13:66:42:ed:c9:b4:f8:76:c4:a6:
         10:51:11:0d:5d:0c:21:60:e9:fc:76:41:0e:e4:3c:bf:83:a7:
         a9:88:ea:a9:00:73:b6:e7:38:b8:22:72:9f:b9:a1:e1:41:7c:
         6e:2b:00:a3:b6:ff:ee:b7:48:cc:67:19:f5:79:68:fa:b5:f0:
         7a:24:42:c1:24:9e:58:c4:bb:b1:4a:23:7e:19:b2:3a:8a:fc:
         ed:03:54:b4:d7:7d:b3:c0:5b:1e:b0:b5:22:8e:35:71:71:c6:
         3b:9b:a4:37:f8:86:2a:bd:43:bb:7d:91:03:e9:8a:d4:ac:87:
         e8:b1:51:56:85:55:3e:e3:9b:66:16:07:4d:63:f0:d0:dc:18:
         44:71:6a:f4:cc:54:18:ac:fb:2e:6c:6e:fb:b3:c2:04:22:ae:
         43:02:bc:ce:8b:fc:0b:07:8e:2e:60:1a:8d:6d:91:88:15:93:
         65:d4:1c:7d:db:0e:78:59:f9:3f:ff:f1:f5:c5:80:27:2a:a1:
         0e:df:b0:28:40:bf:c5:3f:f1:08:9c:62:53:11:07:f0:d6:7e:
         1c:35:70:c8:ac:37:45:5e:cf:46:ae:41:7a:e2:78:62:7c:c2:
         13:e9:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:16:51 2025 by rpki-client on console.sobornost.net