Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
File:                     0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa (raw, json)
Hash identifier:          /hVws9FAUAl+kcqCEVxPfWTsWrHyadPCNJbpXJmA5vA=
Subject key identifier:   D2:00:0E:05:6A:45:5A:57:56:F0:A4:C6:CD:28:3B:4F:77:33:96:46
Certificate issuer:       /CN=4ed81831-d382-493b-b622-f4fb0157e101
Certificate serial:       010D0C9F432858494B6413E43EB9E36B5A4EF480
Authority key identifier: 2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     53871
IP address blocks:        199.188.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:13:e4:3e:b9:e3:6b:5a:4e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed81831-d382-493b-b622-f4fb0157e101
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=8c939e34-4af4-4380-b6e4-97c870e349e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:40:3a:d1:7b:34:cc:26:f5:92:ce:e2:bd:
                    7f:aa:6d:7e:f7:55:90:d2:33:9a:16:02:2c:88:29:
                    27:dc:bc:38:11:e8:f8:db:95:fd:bf:a2:81:e2:c4:
                    ee:07:bc:7e:40:c0:8d:a2:5e:6a:fc:26:f9:ba:0f:
                    1f:85:97:2b:18:16:2c:25:7e:d8:84:75:14:7f:77:
                    b7:ad:fb:a8:0d:eb:a6:a1:07:49:f7:6f:75:49:9c:
                    66:22:ea:83:e1:5d:b8:9d:2d:5a:2a:13:3c:8a:71:
                    bd:80:50:6e:be:13:65:86:e3:c8:df:5f:3f:f2:80:
                    cc:9d:fa:9c:93:52:bb:ae:40:1d:c3:2d:76:8c:47:
                    3b:7a:d9:1c:4e:0b:94:e1:23:b2:a0:bb:29:c7:6e:
                    6b:62:df:4d:e7:93:43:da:af:a2:47:1c:54:61:89:
                    38:84:e9:ed:18:6d:00:82:05:37:ef:59:d3:f4:7f:
                    78:e3:f6:c4:d4:46:a0:1f:76:3b:78:0d:b2:1c:44:
                    e0:13:9f:ce:b8:4e:b0:35:e9:1a:97:2e:ec:40:7e:
                    96:1e:d7:89:2b:77:07:f6:1e:cb:74:c8:99:03:e0:
                    bf:8b:60:79:39:49:10:98:9b:fd:ce:68:6d:8b:9f:
                    09:a6:b8:39:73:f8:eb:3e:67:5d:38:b2:f3:20:55:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:0E:05:6A:45:5A:57:56:F0:A4:C6:CD:28:3B:4F:77:33:96:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/0e30f86d-e5b6-318d-8855-b6fa2cdb548d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101/4ed81831-d382-493b-b622-f4fb0157e101.crl

            X509v3 Authority Key Identifier:
                keyid:2F:E1:5E:47:8D:8C:6C:AF:87:A0:D3:19:00:87:BD:37:DA:B7:CC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ed81831-d382-493b-b622-f4fb0157e101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e7:74:ff:6b:ab:ba:f8:8f:2a:2d:24:7a:cc:2d:32:b2:99:
         45:57:b2:ed:f0:eb:e8:f2:8b:d1:84:38:da:da:34:80:af:c9:
         1f:79:24:e4:73:7d:ca:60:99:87:93:27:34:3d:e8:be:cd:a3:
         20:6e:bd:c5:81:05:00:a4:81:20:6a:bf:fb:09:81:44:b7:91:
         2a:37:9f:31:f7:d5:7f:95:de:3a:47:d3:64:63:76:a6:a2:a6:
         44:5b:38:5b:dd:cc:f0:f7:01:a9:3d:89:c0:5c:71:19:f6:68:
         ef:c2:14:46:14:87:57:1b:d9:f3:c4:41:fd:b5:b5:c4:de:46:
         13:32:01:ee:ef:f8:08:40:e8:34:5b:79:d5:84:4e:b8:02:f7:
         62:cc:6c:a2:f2:aa:7d:31:1f:b3:90:8d:cf:62:55:85:09:0d:
         04:04:e1:b7:04:cb:ae:bc:08:b9:d3:94:21:46:3c:7d:9a:77:
         a4:57:78:e6:ef:bb:58:3f:1d:bf:1b:04:01:00:26:1b:0f:22:
         13:9f:52:d6:7a:e0:b9:ba:7d:f9:d0:30:f2:5f:b2:b1:1d:49:
         2a:e5:d4:1f:53:99:20:e6:cd:e2:2e:04:de:fc:2c:ae:41:5f:
         f4:dd:5b:56:2c:ec:61:3b:d6:e1:ad:ee:20:c6:b9:e3:b6:f9:
         de:95:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net