Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
File:                     e4783078-87cc-3032-b18d-3b5526db50f6.roa (raw, json)
Hash identifier:          pwlvxIU+hLwIyMWwZ0VivoRsCZygyjHratwbhHLz5ww=
Subject key identifier:   C5:8E:AB:86:96:7B:D8:E8:09:7C:8B:E6:10:5B:B4:23:DB:84:CD:C0
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F432858490B4C235C34D61E6A09B7CA00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        206.146.135.0/24 maxlen: 24
                          206.146.136.0/24 maxlen: 24
                          206.146.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:23:5c:34:d6:1e:6a:09:b7:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=528ee76a-b946-4dc6-835b-ff3d58692701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:e3:2b:d9:ed:a2:7e:94:de:9d:64:6e:91:
                    b5:2f:dd:f5:47:28:fb:80:bd:54:04:76:ac:97:b5:
                    3a:4d:98:82:79:e6:4d:d0:7c:48:8f:28:95:f6:82:
                    61:ea:71:71:05:6e:24:f2:08:cd:93:4d:9e:9d:1c:
                    ec:2e:94:31:7d:db:83:a0:d5:04:a3:ee:0e:71:41:
                    69:01:c8:02:d8:a1:8e:da:f0:9f:8e:51:84:1e:b7:
                    28:5f:0a:3f:24:ec:61:87:b0:f5:3a:a2:0b:ba:46:
                    ef:00:e3:1d:9f:b5:f0:3e:fa:df:4a:a0:cf:73:e8:
                    dd:71:c4:f0:a5:cd:1e:a8:21:48:a4:72:7d:9b:5f:
                    4e:c4:e6:bf:d9:29:8e:f2:e2:90:a6:2e:a7:9f:52:
                    f6:7e:5c:06:71:88:f7:5d:94:3a:d3:0b:36:a5:ad:
                    11:31:37:3c:08:2b:e2:71:89:a9:27:61:7a:ae:a2:
                    da:dc:95:6d:b6:44:59:09:55:5d:03:49:56:49:fc:
                    4e:87:96:a7:6a:0c:25:df:5e:97:fd:5c:09:80:c8:
                    82:61:c4:b9:3d:de:21:9d:2c:e8:24:04:01:24:07:
                    97:c3:79:b6:b5:5b:59:4c:60:e6:95:cc:aa:14:0a:
                    f2:de:5a:ed:9d:f5:59:f5:bf:37:79:35:64:36:57:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8E:AB:86:96:7B:D8:E8:09:7C:8B:E6:10:5B:B4:23:DB:84:CD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/e4783078-87cc-3032-b18d-3b5526db50f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.135.0-206.146.137.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:88:d0:fb:d8:55:af:43:6c:64:50:f2:70:ba:6e:af:f2:
         97:f0:db:c7:59:f3:8f:d1:2c:50:bf:f8:a7:0f:11:fe:9a:88:
         4f:d5:b2:be:da:dd:ab:54:c8:86:91:c9:94:86:71:35:d5:2c:
         3b:42:b5:55:73:0a:88:2c:a1:50:7e:4c:b7:24:60:31:17:91:
         f5:8b:07:2f:eb:d6:bd:1b:8d:97:1b:bd:ff:64:c1:f9:19:fe:
         e3:90:e7:73:15:af:e7:39:de:61:07:c7:1b:45:08:9a:bd:39:
         7e:4d:bc:05:51:70:b9:f6:9f:9d:50:0c:e0:f2:6a:41:05:d7:
         98:d4:a9:5b:62:e0:83:f9:9a:2d:58:94:22:47:95:64:d9:11:
         29:18:96:ee:9a:84:63:96:57:dc:0c:21:a1:b2:22:c7:d2:6d:
         76:a4:12:56:7e:1f:d6:93:a9:43:3f:5c:ed:2e:00:29:72:65:
         5b:b7:64:57:77:63:62:ed:4c:31:61:ef:0b:11:84:7b:2f:8d:
         c2:0e:b8:bf:26:6e:22:eb:28:0a:ef:07:ec:78:a6:6b:43:74:
         7c:4c:43:4c:2e:44:2f:03:43:1d:5d:15:b8:fc:ee:d7:a9:31:
         5f:cb:3b:02:6f:aa:a0:5d:84:d9:1a:7c:63:ea:ed:77:42:68:
         58:c2:eb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:38 2025 by rpki-client on console.sobornost.net