Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          2UVG7lAsv6q7cw9Mq9vihfS+1c6XJX5+eM8pXN38be8=
Subject key identifier:   E9:52:42:5A:25:AA:C2:AA:97:B2:E4:2E:37:AF:FB:92:C4:71:23:A0
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F4328584979743E391C1DF58D08D35080
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3e:39:1c:1d:f5:8d:08:d3:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=4e271fa5-4fcb-468d-814c-a8966cfb642f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:cd:f4:0d:05:8c:de:08:5f:96:d5:a6:07:
                    96:11:33:9c:23:c7:b6:d1:5c:4d:1f:df:8e:c4:90:
                    14:d8:84:22:e3:f7:0f:cd:25:bc:db:99:03:bd:6e:
                    5f:b2:25:26:35:84:1e:00:f8:b4:da:2b:5b:de:f6:
                    67:30:27:25:89:05:31:76:71:a1:47:73:73:d1:fa:
                    41:2a:d9:cc:8e:eb:fc:13:a0:0a:6d:3a:3d:5a:6b:
                    e4:22:77:52:fd:05:27:1f:5e:0e:9c:13:df:5e:0f:
                    9d:ff:53:ac:e1:5f:df:35:d6:31:6e:67:56:66:05:
                    f6:6e:b7:63:7b:c9:dd:08:ac:ef:6d:33:e9:ce:c9:
                    d9:c6:89:5f:08:25:62:9e:89:ae:12:5c:e2:8c:51:
                    f7:d5:af:10:63:f1:97:09:55:d8:f7:5b:f4:28:85:
                    92:db:2b:6e:12:7c:84:3f:c1:19:b9:da:e7:db:2d:
                    31:73:21:5b:7f:4e:b3:6c:fd:99:6e:dd:46:19:d9:
                    4d:62:53:f0:ad:d1:92:a7:e1:a0:cb:df:37:4d:fa:
                    4e:7c:9f:2b:d6:b5:d6:37:fc:4f:cb:e9:90:4a:c5:
                    42:78:19:b5:16:46:03:be:94:fe:dc:96:b8:34:4a:
                    e3:33:c7:3b:d1:4d:07:a6:5a:97:25:f4:6b:51:03:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:52:42:5A:25:AA:C2:AA:97:B2:E4:2E:37:AF:FB:92:C4:71:23:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4a:78:05:88:35:d8:85:ae:b3:74:49:65:3b:e8:6c:b4:30:
         5f:95:ad:5c:65:08:a0:95:76:4d:ad:6a:b8:63:6e:20:41:59:
         49:8d:a8:51:fa:15:c2:50:2f:25:d2:9d:4c:3f:63:94:85:f0:
         90:39:da:9a:86:fe:11:7b:12:b3:bc:aa:3f:dc:a5:ec:99:d3:
         4e:3f:d2:19:45:3b:c3:26:a8:9d:4d:8b:97:60:ea:78:d8:e9:
         3a:fd:41:39:22:d1:6d:c5:da:3a:bb:ec:48:7f:ea:d9:9a:4f:
         35:9a:18:66:14:d0:1b:f2:6c:54:09:76:df:c7:63:ef:cd:18:
         ca:60:65:d9:94:0c:15:c5:b9:cb:67:0e:d1:70:8c:1a:e3:ab:
         90:e7:bc:20:bf:56:4c:d3:be:13:47:cf:89:48:15:ea:93:ff:
         6d:e2:30:88:aa:f8:1e:88:ba:80:24:91:dc:83:dd:a6:50:8d:
         43:6d:bf:67:88:31:5b:48:64:97:d3:5f:f9:87:00:2b:d8:28:
         76:c6:72:5b:ef:8d:9e:b1:aa:14:0b:34:0d:88:1d:1c:3d:b2:
         05:ac:6c:a3:a2:63:d9:ea:a7:d7:2d:d5:d9:6c:cc:bb:60:5d:
         f2:dc:16:e4:b1:70:76:65:f6:f2:a2:e2:ad:2c:51:f6:c9:be:
         e9:76:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net