Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
File:                     d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa (raw, json)
Hash identifier:          ZZcqg1teTngBrXODf+HfLWZV/k2PeZxW+t/3aD4PYTo=
Subject key identifier:   EC:43:1F:8D:7B:E4:57:EE:FB:13:A5:C1:C4:64:9F:65:09:CE:7D:0A
Certificate issuer:       /CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
Certificate serial:       010D0C9F432858495ABECB2CA643D4156FA33680
Authority key identifier: 8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     396504
IP address blocks:        199.175.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cb:2c:a6:43:d4:15:6f:a3:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=ea8a5611-e2a3-483a-9ddb-ac333f5a0895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:0b:e4:63:37:3c:3e:e7:19:5d:c8:df:8c:
                    c0:a5:de:b1:25:a6:12:6c:e4:ea:a5:e4:6e:0b:cd:
                    14:d2:53:8e:f3:f6:ab:db:3f:35:f0:4f:30:22:4b:
                    1b:51:c8:e0:85:a3:84:8e:8a:9b:72:5a:45:f3:df:
                    66:64:f7:65:1d:29:e3:22:0c:9d:0c:2e:26:83:f7:
                    42:29:eb:93:2d:04:26:5f:8b:70:74:70:ec:a5:b2:
                    44:e4:4b:bf:73:8e:4a:49:db:ea:44:00:9c:a4:7a:
                    97:4a:99:a3:d7:ac:a6:92:49:63:70:d2:b3:d9:a4:
                    41:71:db:ec:e8:25:8a:90:0e:df:36:0f:1d:d1:e5:
                    57:39:ce:4d:ae:b5:68:a4:87:41:c2:9f:3d:c0:ed:
                    71:0e:bc:65:98:8c:29:30:e3:52:9c:00:ca:1f:be:
                    e7:4c:5c:22:04:6e:ba:c4:fb:9f:59:7e:3b:e2:3a:
                    5d:56:04:90:3f:fc:9d:6b:ab:73:53:db:2d:1b:de:
                    85:76:30:fc:62:7a:fa:82:f4:62:89:2b:b1:99:96:
                    71:07:7c:96:cf:11:60:c2:40:55:b0:6a:7e:aa:74:
                    49:4b:c6:cd:82:92:df:be:a9:99:ef:bf:87:8f:62:
                    29:a1:07:d5:75:4e:76:9c:a9:55:88:d8:2c:36:56:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:43:1F:8D:7B:E4:57:EE:FB:13:A5:C1:C4:64:9F:65:09:CE:7D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/d8ffe295-eba3-3fc4-b6e3-632bb2fd0dbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:29:3D:2E:77:CE:0D:E4:95:7E:AB:B8:73:87:1E:31:C0:32:FC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d0e68e5-0c0e-4ff2-829f-6f5cdc77a39c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.175.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:61:7d:26:ae:8c:8d:77:84:6c:69:04:8c:cd:92:26:c0:9d:
         f1:34:80:27:d4:10:58:07:81:c4:1e:28:5f:1f:b7:3f:ee:9e:
         9a:a8:46:b6:c3:b0:66:a8:be:c3:b2:d9:6e:c7:01:ad:f7:3d:
         46:b9:7d:6e:d4:7c:ee:f5:fc:e0:01:45:b1:9f:c7:81:12:c7:
         09:61:f8:bf:50:39:91:43:9a:be:6b:7b:2c:70:65:f1:fd:dd:
         5d:cd:7e:6e:28:b7:ff:9e:68:83:1f:1f:67:e4:3a:6d:e9:78:
         c7:a7:47:fe:c1:c7:65:c5:41:85:e8:d1:87:85:98:df:5b:4b:
         18:5e:a6:0b:e1:36:76:d5:89:36:a8:a1:c5:19:f0:b0:8f:e4:
         fa:1c:23:16:db:83:71:4d:cb:be:30:db:ce:03:25:fe:74:86:
         6d:09:53:f8:80:2a:f4:19:df:9d:aa:d6:62:39:c1:04:40:1e:
         9d:6e:f4:f7:22:cb:21:bc:9a:82:3e:a8:35:59:3b:bd:3f:18:
         1b:88:96:1c:0b:94:93:f2:d1:96:27:b3:8d:04:b0:07:35:7a:
         32:48:56:7c:1f:4d:1e:cf:35:86:0b:28:10:4c:41:0c:bf:32:
         90:2d:09:a9:71:49:17:6b:24:39:02:05:68:38:ac:83:9f:26:
         b5:3a:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net