Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa
File:                     60042d83-8d8e-305f-a888-cb71b604274e.roa (raw, json)
Hash identifier:          4SyD6GFvhE9iNjbwe+tesh2NYTWIJFW6KYKRqGA+U7s=
Subject key identifier:   9D:47:23:C5:E5:72:C7:AF:65:A7:98:FD:4D:08:01:A5:44:41:49:50
Certificate issuer:       /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
Certificate serial:       010D0C9F43285849674EF5255198A989367A8B00
Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     20283
IP address blocks:        209.73.80.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f5:25:51:98:a9:89:36:7a:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=e7dd49bb-e9f9-41ff-95c3-b83ec47267c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:5e:44:62:ee:e0:44:e6:86:98:59:c7:4f:
                    13:c8:4b:2a:f5:ba:6b:bd:2d:99:40:aa:92:92:38:
                    bc:bc:35:80:dc:58:b7:b9:f2:21:d8:97:f9:68:e9:
                    7a:84:da:6b:58:59:70:a4:a0:11:e1:5d:d6:e2:8b:
                    12:e3:b9:70:9a:25:c4:f8:a5:2e:93:37:58:55:3d:
                    80:dd:47:86:64:8b:58:80:a3:88:55:e8:ce:55:bd:
                    fa:e7:42:24:d4:67:f4:89:f9:5d:18:c1:9c:94:5b:
                    29:53:5a:65:15:0c:da:6a:4a:ce:27:b3:98:3a:5d:
                    32:bd:5c:d5:b6:da:48:c0:9c:9b:ad:19:06:93:61:
                    21:8e:b7:c5:ed:e8:93:42:4f:49:b5:52:cf:b7:65:
                    c4:37:fb:74:84:f6:71:83:39:d1:dd:ce:16:e2:91:
                    72:62:8f:d3:71:d0:0e:53:7f:53:ea:e0:c4:c9:fc:
                    9c:c6:07:ad:f8:04:89:22:09:23:4b:84:0b:d3:cd:
                    5e:5d:80:ef:fe:ea:63:6d:44:21:4a:a4:f3:74:76:
                    ff:ba:38:dc:c9:da:a3:83:52:3e:8c:40:82:3a:0b:
                    81:55:74:be:29:2a:5a:b3:b1:39:4e:a6:46:c5:f8:
                    2e:55:91:cb:0f:90:bd:53:c3:67:51:be:07:e9:d5:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:47:23:C5:E5:72:C7:AF:65:A7:98:FD:4D:08:01:A5:44:41:49:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/60042d83-8d8e-305f-a888-cb71b604274e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl

            X509v3 Authority Key Identifier:
                keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.73.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6d:54:b8:12:a6:45:85:25:2f:90:d8:53:dc:63:89:7f:31:
         4d:a2:bd:c5:99:c4:fa:55:42:4f:28:d1:60:d4:e7:16:c2:26:
         0c:0c:04:75:36:77:c0:48:68:74:9a:4e:99:95:b7:73:be:4f:
         a5:57:61:cc:41:83:93:d3:70:45:0b:9a:c0:c5:b8:72:97:0a:
         15:8d:e1:6c:53:98:c6:00:f0:b1:de:af:f6:b9:c7:b8:59:df:
         1b:ad:42:66:e7:8b:86:cd:6b:4b:f9:d3:c3:b5:52:1d:18:10:
         c2:6d:99:bd:53:9a:11:65:0f:ec:52:d1:54:cb:36:f0:32:5f:
         2c:50:d9:59:aa:59:b8:74:6b:2e:32:27:95:83:78:33:02:e4:
         37:2b:7f:6f:c3:9e:5c:2b:08:7f:5a:95:44:b6:fb:3b:39:ac:
         b0:82:53:dc:d8:30:d7:37:3a:04:a8:91:17:02:a0:24:ab:12:
         f8:9c:b3:2a:16:e7:ab:0d:2a:b8:3b:bc:2c:bf:d7:b8:d6:17:
         0c:47:cd:36:e8:74:1c:e0:e2:76:26:b2:33:89:42:1f:48:f7:
         56:64:8f:81:13:d0:7c:e6:ea:f4:16:7a:8e:16:53:4d:8e:33:
         a5:0f:ab:11:ae:a8:bb:98:af:68:da:3e:8c:5c:0c:51:67:bb:
         a4:73:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:39 2025 by rpki-client on console.sobornost.net