Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa
File:                     d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa (raw, json)
Hash identifier:          DAnD8y1pW5YCALkOu9m2bxd2mb5J4XNX7+g2uJZCfjQ=
Subject key identifier:   17:D5:D1:D1:9A:E7:4B:02:AA:DA:36:4B:5A:E6:0C:7E:4A:88:DA:82
Certificate issuer:       /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial:       010D0C9F432858493ED3D875F8DBEDC9B0F46780
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     65
IP address blocks:        129.19.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d8:75:f8:db:ed:c9:b0:f4:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=13772ab5-b0cb-485c-b404-a51c133052a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bd:90:c5:c2:db:6f:ea:f7:26:84:2b:65:e4:
                    32:94:7d:1d:3a:1f:d6:85:c5:cf:53:47:9e:21:48:
                    5b:d3:d2:40:f7:07:28:51:5c:b2:72:e1:de:80:f2:
                    e9:ad:ab:d8:3a:3b:8b:41:be:85:9e:17:34:87:68:
                    1b:69:06:ca:a3:5c:29:62:79:4b:8b:4e:76:51:24:
                    1e:9b:08:3b:e2:01:dd:c3:7b:71:34:29:58:0c:41:
                    f0:9b:7c:5f:67:17:6c:76:64:1d:73:33:1c:40:74:
                    9e:3f:24:13:3c:b3:ca:af:86:f0:e5:2f:d6:1b:19:
                    74:71:9c:3e:53:09:a9:61:36:99:61:c9:2f:19:f0:
                    85:1f:60:79:f0:e1:02:37:ed:b1:c0:65:9c:33:2e:
                    3f:cf:54:be:49:f8:97:dd:94:72:bd:2c:15:42:f1:
                    2a:ca:4d:39:e5:de:b9:ac:b0:2b:22:ec:dd:af:bb:
                    a8:ad:79:c3:83:b0:75:7b:5e:7c:66:1c:d7:46:b3:
                    e9:24:b5:ea:8e:cf:aa:39:3a:aa:ae:21:a6:b5:92:
                    af:3b:c5:6f:7e:47:aa:82:07:61:cc:ea:5a:e7:f1:
                    57:e4:57:11:7d:aa:9f:4b:85:b8:7e:de:23:e9:38:
                    e9:9c:b2:ca:fb:2f:43:5c:09:9f:6f:d2:a1:49:ff:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D5:D1:D1:9A:E7:4B:02:AA:DA:36:4B:5A:E6:0C:7E:4A:88:DA:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/d124a5d7-21cf-304a-9d2b-731e93bcdf7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.19.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:65:bd:d7:57:6b:f1:1f:20:7b:a3:50:d0:ec:7b:f2:cd:f5:
         3f:9e:c2:ac:65:73:c5:2f:ae:5c:cf:ff:7d:56:d5:3e:7e:7d:
         8b:fe:ea:d0:e1:c0:06:19:3d:fa:2e:cc:28:2d:7c:05:e8:3a:
         55:b1:ab:eb:52:dd:8e:8d:53:a5:30:89:3a:1f:ae:d1:5a:cb:
         e1:c5:11:25:56:02:65:b4:d8:23:38:d1:dc:60:22:97:9c:46:
         f7:ab:be:a1:e4:7a:66:88:4c:27:7d:8f:3d:08:74:03:4b:66:
         94:6c:74:92:39:1f:ff:1b:15:fd:c7:1c:02:6b:11:af:1a:d7:
         40:83:b7:27:b6:68:54:02:b0:65:48:b1:c9:37:40:11:48:35:
         45:03:25:be:c3:2c:39:4e:7a:74:d6:76:b2:70:ef:b9:cb:ae:
         20:b0:b7:8b:0e:44:a3:46:59:ec:ca:e5:87:9b:8d:52:d1:07:
         db:37:9f:0e:e7:85:1d:68:d9:05:13:52:3e:e2:88:41:db:57:
         35:c6:14:fc:93:da:09:7b:b7:94:be:98:dc:25:58:89:80:cb:
         c1:f0:bb:fa:27:8c:2c:de:b4:43:a6:9c:0b:04:fd:b3:64:80:
         cb:9b:bd:42:6c:81:2c:4d:6e:04:21:5a:6b:93:d1:bf:9f:2b:
         2a:fc:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net