Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8eee5a8d-3488-3e2f-b6d7-20dc80cbb063.roa
File:                     8eee5a8d-3488-3e2f-b6d7-20dc80cbb063.roa (raw, json)
Hash identifier:          ermqQcvtUnMIfB80xt9dklVbvCcuPKv0jolUWleo5wo=
Subject key identifier:   23:E9:07:07:7A:07:18:6E:B5:EB:6C:29:1C:16:85:E2:3B:2D:B8:8E
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584975444E307B1FE5720100EA00
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8eee5a8d-3488-3e2f-b6d7-20dc80cbb063.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     23059
IP address blocks:        208.69.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:4e:30:7b:1f:e5:72:01:00:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=deaaa793-075c-4b9a-8b51-2f4bb58b5841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:7b:aa:81:00:e4:7f:69:9f:f3:83:c9:cb:
                    bc:9c:05:66:8a:2b:fc:73:fe:0c:dc:b5:5c:e5:38:
                    d0:4d:d5:97:02:88:76:83:b1:b2:37:44:d3:1d:79:
                    1d:1c:a0:c0:dd:a7:8e:f9:f6:83:96:08:a6:bf:36:
                    e1:8f:92:05:16:cc:67:c1:6e:35:49:dc:e3:e8:bc:
                    38:51:9e:a9:74:df:f1:b1:12:ee:5b:69:b9:68:00:
                    8f:d4:19:28:89:50:10:fb:47:e6:41:f0:c1:cd:c9:
                    1b:2d:2c:e1:07:48:db:be:13:88:bc:6f:ff:3d:e6:
                    b5:b3:da:b3:e2:ab:45:21:29:89:a3:98:5e:b2:bc:
                    ab:27:11:c6:67:82:42:80:2d:93:83:a2:ef:d6:ba:
                    7c:61:be:12:db:1a:d2:2c:db:ad:03:50:28:92:4f:
                    a5:d6:b3:b0:9c:38:80:49:5d:2b:9f:e6:01:b7:8c:
                    13:ad:0d:61:2b:7d:0f:05:b4:23:85:5b:f9:cb:52:
                    a5:ef:06:43:79:71:f4:69:40:23:70:7a:4c:ea:70:
                    45:57:14:8a:ea:d5:aa:04:8c:37:51:09:bf:a1:75:
                    31:14:5f:fc:f4:c5:6c:32:cf:57:27:38:f4:02:29:
                    79:0e:70:8d:fc:7e:34:57:f8:f1:32:13:84:18:1f:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E9:07:07:7A:07:18:6E:B5:EB:6C:29:1C:16:85:E2:3B:2D:B8:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/8eee5a8d-3488-3e2f-b6d7-20dc80cbb063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:7e:cb:ae:35:c6:14:0d:23:cb:46:a2:08:bc:14:64:08:
         5e:f5:2b:d7:a0:5c:56:0d:86:1a:c8:e5:82:c6:89:f5:b8:51:
         5a:2a:d8:89:19:3e:31:6d:07:c9:e6:22:79:23:fc:ea:df:15:
         b2:bd:54:61:7c:32:2d:08:a3:3f:7d:bb:91:9e:f3:78:d9:70:
         72:38:91:9f:ca:b6:e3:24:b6:10:53:5a:a7:a3:01:01:47:ee:
         e4:7a:92:bc:b0:98:6b:e9:3a:23:4c:de:f5:8b:3e:84:60:cd:
         c8:b5:8c:44:20:a7:58:03:5d:11:e6:22:b4:57:cc:12:8e:79:
         d7:f1:6e:98:fe:bd:28:a0:b6:5c:02:15:08:83:a9:35:4d:df:
         57:7f:66:03:a8:dc:a8:9d:ba:4c:98:47:c1:9d:c0:11:bf:0b:
         1d:c1:e4:a3:dd:29:08:b7:82:45:cb:dd:05:2b:1d:f3:30:fa:
         32:04:4f:98:09:0b:d1:1d:39:02:7d:77:d6:2e:9f:25:bf:0d:
         fc:59:c4:cf:f2:88:6d:99:a3:71:a7:0c:e7:2c:8c:34:91:c5:
         db:06:f6:b7:21:b8:44:82:7e:c1:d2:dd:44:92:31:c1:38:e0:
         fa:fd:73:d4:78:34:34:aa:4d:1f:45:29:c7:0b:cf:ca:20:30:
         f4:fe:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:25 2025 by rpki-client on console.sobornost.net