Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/70645c41-f07f-34cd-814f-8512ee7c5d31.roa
File:                     70645c41-f07f-34cd-814f-8512ee7c5d31.roa (raw, json)
Hash identifier:          XhpIkZVkZw5CScTajPGU9m5FIndSq/acX8tdtZ55ab8=
Subject key identifier:   2E:FD:EC:71:65:BE:8E:10:D5:E4:9D:D6:65:08:97:77:AC:97:64:FE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849605419E467B5096EDF676180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/70645c41-f07f-34cd-814f-8512ee7c5d31.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     17025
IP address blocks:        208.184.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:19:e4:67:b5:09:6e:df:67:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=56c43485-e42a-40cc-9a26-35781fa485c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:a4:1c:20:79:7e:6e:8b:c9:04:9b:ac:d9:
                    ea:a5:c1:db:46:7e:7a:f9:f6:b2:53:f4:db:a0:38:
                    6b:3c:da:35:14:8d:56:bb:1a:a2:2e:27:03:68:71:
                    38:9e:ef:93:e0:fc:b2:a5:ce:ad:a9:6f:1f:2e:2f:
                    c3:5b:9d:8f:8b:a3:95:4c:18:58:07:17:eb:ed:ec:
                    78:5b:17:33:04:09:e8:38:bf:4f:0a:74:e4:2e:5b:
                    77:91:cf:c1:6e:fd:53:53:2c:19:6c:1d:17:02:5b:
                    a8:f6:8c:a5:1a:a6:a6:65:9d:cd:6b:a7:e1:f6:72:
                    46:85:21:0a:02:54:87:1c:86:5e:54:53:0e:fe:ea:
                    27:5d:07:b2:b1:77:96:be:f6:19:9e:cf:c9:50:50:
                    f2:77:02:5f:0d:14:1e:d5:67:f7:5a:09:23:11:7b:
                    e1:df:84:e0:12:5c:aa:cf:86:3c:08:3b:7d:66:ac:
                    e7:17:91:5c:d0:ac:93:53:0a:72:e5:5c:cc:9d:a0:
                    b4:1c:92:fa:d9:1c:2d:a3:75:d4:08:0a:2e:d4:23:
                    29:55:63:53:11:39:bc:73:a5:28:f9:82:f4:8a:99:
                    7d:f4:83:07:1a:71:44:b1:77:44:ce:02:d9:9e:a2:
                    ca:4b:0c:62:8c:19:bb:a0:a2:9d:34:79:03:46:4b:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FD:EC:71:65:BE:8E:10:D5:E4:9D:D6:65:08:97:77:AC:97:64:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/70645c41-f07f-34cd-814f-8512ee7c5d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:3d:f0:b4:2b:67:1a:6b:1d:2f:64:b3:60:c6:27:58:ee:58:
         ef:0f:eb:a1:8e:a0:8c:4c:6f:ef:7c:06:1d:8c:d0:34:da:27:
         90:34:35:49:16:7e:23:4c:8c:3a:4b:dc:f7:04:80:fa:80:47:
         c5:e9:36:dd:a4:84:d9:71:ed:1d:e1:04:b5:5e:b0:3d:19:51:
         4c:2d:c2:77:0e:34:09:47:f8:ce:00:de:6b:3b:c2:9d:51:ff:
         c3:a0:b2:e8:63:bc:e2:a9:0a:e3:7a:ac:1d:b6:e1:9b:1e:7e:
         b0:d1:a9:00:46:3f:d6:d0:00:b2:cb:07:93:d7:00:e0:19:39:
         9f:26:ca:0b:60:3a:be:49:f9:f2:a9:74:cb:d4:b9:a3:90:8b:
         0c:e6:0e:f5:bc:c7:4f:41:e2:3f:7d:90:fd:95:0c:b4:1a:27:
         ef:25:41:ae:00:05:a2:57:89:1c:ff:ca:83:70:b5:c0:44:c4:
         5c:a9:6a:e7:cc:eb:a2:13:b0:75:c7:72:4b:bb:3f:a0:0b:77:
         d1:f7:89:d0:64:ae:ef:ba:d0:3d:f7:2b:74:d8:04:c2:73:a9:
         2f:37:6a:8c:c9:21:3d:1e:f3:6b:cd:eb:16:25:54:03:ec:4e:
         be:6f:02:be:55:6c:22:e8:6f:1d:0a:35:e8:56:6a:1c:cc:e0:
         49:5c:93:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:52 2025 by rpki-client on console.sobornost.net