Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa
File:                     3090b810-4dac-3695-a43e-d330ef2f7fcc.roa (raw, json)
Hash identifier:          Y1cR7bivMry3LIpYUJDisSj7hyh/wOZuO/S9kgn3dww=
Subject key identifier:   13:5D:8C:C6:26:17:BE:45:47:80:8B:E2:D9:8E:C8:C5:E3:FF:7A:30
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584973DEE524E2DDC4480B594080
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     264646
IP address blocks:        8.242.189.0/24 maxlen: 24
                          8.242.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e5:24:e2:dd:c4:48:0b:59:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=0f124d5d-e3be-42bc-823f-899f16fbec18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:7a:2d:0a:c4:f2:3b:63:45:39:a6:22:f4:
                    cb:0f:59:68:6f:82:90:25:12:14:45:9d:aa:fc:92:
                    53:55:58:3a:e2:a0:35:4d:e6:5d:a5:22:9a:2b:af:
                    80:5f:93:99:69:73:d2:d3:a4:67:da:84:2e:87:32:
                    3d:6c:df:8d:32:dd:23:89:e3:49:c8:24:05:23:90:
                    ca:25:8e:d1:da:75:24:39:52:06:23:8a:37:5a:2e:
                    cc:6c:c8:4a:3f:6f:35:a8:42:4b:e9:6c:8d:61:17:
                    71:f0:0c:82:5e:b2:58:af:91:a0:ab:9e:dc:a5:01:
                    7e:96:ee:9d:fe:fe:84:8b:1d:fd:17:3f:fe:1c:c6:
                    9f:af:b4:83:68:55:ca:d5:8a:be:48:bf:95:6a:c4:
                    3b:11:21:37:69:32:b2:28:16:8e:70:76:c0:df:5a:
                    4e:bb:ac:35:66:4f:fa:21:a2:3f:29:ba:34:9d:e3:
                    c0:d7:b2:a6:31:76:af:7c:1a:72:97:ec:39:1e:13:
                    7b:ba:96:43:97:bc:e8:4e:b5:2e:25:f9:d4:d7:e6:
                    fd:d9:ff:ff:d3:b2:0e:40:0e:83:22:27:6e:89:01:
                    c5:4a:28:19:1c:0f:d3:52:e3:07:2c:8c:7b:37:73:
                    d9:95:d6:d0:6f:47:1d:37:c0:7d:05:93:22:54:e9:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5D:8C:C6:26:17:BE:45:47:80:8B:E2:D9:8E:C8:C5:E3:FF:7A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.242.189.0-8.242.190.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:1e:49:12:f9:96:53:d4:09:18:cd:14:75:ce:b3:25:09:
         3b:5d:b1:c1:0b:2a:9a:f8:50:89:d3:f1:5d:dd:0d:af:f3:d3:
         07:47:d6:48:24:a7:de:8b:88:bc:7a:37:96:11:54:6b:d7:61:
         ad:01:4c:47:71:04:68:5e:c4:a5:df:86:5c:18:49:27:70:70:
         9a:17:f7:6e:c0:8e:b2:2a:0b:3a:aa:e1:84:b5:2c:2c:f3:e2:
         80:3d:36:6e:8a:f2:c6:ed:24:bb:1a:57:1c:98:85:fb:e4:ca:
         28:0d:63:60:cd:90:54:51:5a:37:18:9a:de:72:7d:26:9c:cd:
         41:29:8d:42:7e:db:af:ec:75:21:e6:1f:13:a0:c6:bd:9b:17:
         fc:19:e0:41:d5:76:16:78:ce:e8:00:6d:9a:17:38:b1:ef:6d:
         7d:91:98:de:fe:31:bd:63:e1:ec:31:32:93:e7:e5:48:c6:6a:
         17:cc:a9:57:ce:b2:2c:f6:41:8e:b9:2a:e3:da:b6:91:65:74:
         8b:eb:3a:58:e8:7a:73:eb:19:98:24:92:67:9d:15:97:08:d7:
         25:c0:53:61:3b:fe:8d:08:f8:f1:c3:12:e8:1d:8a:f9:5b:28:
         cc:fa:08:1e:e6:31:37:e4:8c:10:14:78:a7:af:b5:e9:a4:1e:
         de:87:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:35 2025 by rpki-client on console.sobornost.net