Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
File:                     20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa (raw, json)
Hash identifier:          16O1HnMjzH2s+tjap7RboNqikF2QulHeKK5gibImOak=
Subject key identifier:   70:54:AC:8E:1F:BC:B3:ED:0B:04:CB:04:01:D2:38:B9:A9:9E:49:6C
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584921840BB3B9ABD365A7D45CC0
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     1640
IP address blocks:        69.57.96.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0b:b3:b9:ab:d3:65:a7:d4:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2856547a-f9c4-4777-91fb-b713d458a1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:84:6a:0c:a2:e5:e0:ef:85:eb:72:47:d7:f9:
                    fc:29:89:f2:d4:23:ca:7c:0c:57:d1:a0:ee:cb:f6:
                    10:c6:a7:ca:2b:1f:15:d2:d2:61:d1:95:1c:c8:e9:
                    f9:fd:b6:e6:64:e1:c2:75:27:15:63:57:64:c7:90:
                    59:1e:5b:f6:ad:00:91:17:fe:98:b4:c1:3a:eb:e0:
                    a9:73:1e:88:1a:ce:62:54:38:be:18:e6:88:7d:f3:
                    ce:26:d5:04:10:3b:86:4b:d6:db:1c:36:9c:79:f3:
                    70:92:7f:09:b2:d4:de:b3:3a:94:67:44:dc:38:08:
                    38:5c:c5:63:a1:de:a7:0c:81:a6:d0:30:fb:14:72:
                    c8:4f:b6:17:d2:89:8f:a5:12:a1:8f:4b:fc:f8:02:
                    cb:9c:0f:d0:a2:44:f6:f0:a9:d5:b2:79:d3:78:16:
                    c1:d6:ba:fb:8d:21:9a:39:d0:e0:78:dc:f1:ff:e6:
                    43:e6:ce:28:45:2b:e3:a2:34:ea:6d:34:65:2e:53:
                    c7:9d:16:25:04:c1:2c:b2:0f:9d:6c:7e:42:80:da:
                    38:71:42:c8:77:6d:77:7c:4a:77:22:a1:5c:15:4c:
                    1a:a9:d3:85:d3:0a:0f:fd:a6:a2:45:fe:6a:ba:22:
                    fb:d1:71:d6:5c:f5:0b:0f:40:ce:ef:7c:a9:68:15:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:54:AC:8E:1F:BC:B3:ED:0B:04:CB:04:01:D2:38:B9:A9:9E:49:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/20fbb1c0-414b-3430-ae86-de61e4f95c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:ca:ee:0b:fc:48:69:6e:a3:c3:14:aa:d2:a0:61:8b:50:
         74:80:a6:58:4f:07:5b:ac:a2:45:01:16:fe:86:4f:8f:50:c6:
         94:b3:2d:f7:ae:df:41:35:99:59:86:73:84:63:e7:0a:9d:b1:
         ba:be:1d:37:16:61:ed:67:4e:f0:95:3d:94:ee:fa:39:f7:f4:
         94:90:69:a3:28:99:37:b1:98:db:52:ab:90:4a:4f:f1:c4:26:
         bf:18:da:0a:de:db:1b:92:11:07:a0:fe:d8:ac:59:40:fe:40:
         74:47:e3:da:bb:2f:bb:75:d1:f1:be:e6:e0:29:3b:85:cf:c6:
         cf:0b:a0:36:72:a1:67:83:f3:74:12:b3:d9:50:8d:24:be:73:
         bc:3e:b5:ec:31:87:bb:c0:cf:34:0a:28:2a:23:ef:57:cf:e4:
         f2:c3:7b:3f:73:bc:7e:14:59:6e:65:ce:a9:bd:3f:b6:8b:6c:
         3f:e0:91:2f:a6:26:bc:af:31:2d:7c:62:3d:16:7b:22:18:f1:
         96:6c:35:e6:04:1b:cb:a3:39:dc:45:dc:c0:c8:49:f2:9d:17:
         f4:de:1e:4f:75:2a:08:95:5a:26:f3:53:ab:2f:e2:53:9d:5f:
         d3:fe:4f:ff:06:5e:c3:14:a3:e9:81:4c:62:fe:c4:6c:c5:2e:
         0a:ca:8e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net