Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa
File:                     1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa (raw, json)
Hash identifier:          dmh5+BRc3tzXmvlnBZFE32L9tFwbxandYLWj514Q5aA=
Subject key identifier:   3A:B9:58:5C:AF:6F:BF:5B:72:CA:93:6D:1F:F6:86:3B:14:CF:AE:2C
Certificate issuer:       /CN=77a1f652-62bb-4b22-ac07-0b2b88868297
Certificate serial:       010D0C9F432858496CE4541E3D0CCF8D6F9AA180
Authority key identifier: B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     6079
IP address blocks:        207.167.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:54:1e:3d:0c:cf:8d:6f:9a:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a1f652-62bb-4b22-ac07-0b2b88868297
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=8ffb6d8d-7867-41b5-b0cd-87534be90d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:79:6a:8d:ff:71:6b:83:f0:f6:14:2f:04:
                    e9:eb:6b:9a:b7:53:2a:57:af:f2:5f:30:ee:50:fb:
                    7b:c7:16:ea:16:b7:57:61:71:45:e7:a7:0d:53:e7:
                    eb:7c:9f:fe:ef:ab:98:8d:30:50:32:b1:01:98:25:
                    34:e7:97:01:37:bc:98:11:61:b8:12:30:c8:20:dc:
                    c1:9e:a1:ee:67:5e:13:37:d7:87:46:b4:8a:f1:ad:
                    b9:6d:e4:98:00:41:dc:1a:d7:f0:4e:7a:f0:bb:63:
                    e6:9e:89:05:ae:49:12:24:94:99:99:ec:bd:4d:42:
                    5c:b1:8b:1c:67:45:83:6a:9a:66:a5:3f:75:4b:f4:
                    2c:f9:e3:10:13:7a:9b:a0:db:1e:26:80:74:39:d1:
                    89:d5:94:18:9c:9d:74:17:9c:5b:a5:32:cd:20:46:
                    f0:1d:a6:9b:64:9b:d8:84:9f:a1:ce:bf:7c:6a:7d:
                    fc:83:9b:08:8b:80:83:17:73:61:f8:b0:2a:6a:4d:
                    5b:2f:8f:81:c5:e8:57:be:05:da:cb:54:df:74:0f:
                    b6:28:2b:dd:83:76:bc:4a:2c:29:5d:01:e3:7d:26:
                    61:74:90:c0:88:2b:ad:33:48:75:29:b4:44:ec:7a:
                    f7:9b:a9:6e:54:39:9b:5c:df:28:74:b1:5d:1d:46:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:58:5C:AF:6F:BF:5B:72:CA:93:6D:1F:F6:86:3B:14:CF:AE:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/1ef9bf1a-30a0-3bf5-b059-3f20161e7b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl

            X509v3 Authority Key Identifier:
                keyid:B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:05:8b:6d:30:5f:75:bc:c5:8f:01:3b:40:dc:0d:a8:d9:25:
         16:5e:19:4d:8d:34:bb:ff:49:98:31:59:f5:50:95:d4:77:ca:
         98:a5:57:18:94:fb:83:90:f7:67:1d:d4:ff:1b:0a:e4:fe:04:
         6e:47:86:0e:cf:92:7f:c5:a0:ce:31:a8:9c:1b:53:1c:c0:fa:
         0a:b0:22:95:ab:28:40:ed:7c:85:93:6f:8b:82:d2:f5:fd:34:
         b9:1e:c8:35:e1:54:da:e2:55:fa:a5:ca:da:3d:3b:73:8f:84:
         6a:91:96:f7:50:ac:b6:8c:1a:91:2e:3e:19:77:62:77:3f:13:
         c3:f0:9e:38:b3:7c:88:02:17:7c:47:5f:5c:55:80:e5:97:69:
         fb:c0:a0:8f:0f:de:22:de:89:5e:e4:49:c5:97:4f:95:dd:14:
         ad:7a:d5:56:4b:52:09:d8:1f:85:bf:be:69:be:74:c9:99:37:
         cf:77:ed:1a:1c:cc:32:a1:76:75:f8:6e:6b:1f:ed:3c:fb:ad:
         f0:6d:8e:f9:70:92:27:2d:70:9d:be:6b:ea:03:7c:85:9d:50:
         2b:e0:9e:5c:eb:79:ac:29:b2:74:08:e7:79:9e:d8:91:1a:8a:
         41:91:1f:73:9c:55:22:03:f9:91:32:fa:d6:3c:f9:1f:f9:55:
         e0:f5:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net