Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa
File:                     e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa (raw, json)
Hash identifier:          loblgCQoz3lyuB76RMEyfr8yhl2Prhr70vjg9moX2to=
Subject key identifier:   18:51:B2:06:DE:76:D5:3A:B3:99:F7:1B:6B:95:32:A8:AC:CA:F6:B7
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F43285848B2D445C57AE4732F36743700
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa
Signing time:             Tue 28 Jan 2025 21:28:29 +0000
ROA not before:           Tue 28 Jan 2025 21:28:29 +0000
ROA not after:            Mon 28 Apr 2025 20:28:29 +0000
asID:                     399660
IP address blocks:        209.51.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:d4:45:c5:7a:e4:73:2f:36:74:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jan 28 21:28:29 2025 GMT
            Not After : Apr 28 20:28:29 2025 GMT
        Subject: CN=f046b4fc-aed5-4260-80a2-0f0cd87e695b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:cb:fc:0f:e3:1e:b5:97:6b:82:52:8f:53:
                    df:25:80:a4:c2:46:e9:e0:82:77:c6:9f:bf:0e:4f:
                    e3:4c:59:1f:48:9e:1d:d2:e5:bb:22:0e:92:a7:6d:
                    d6:24:c0:51:96:38:52:c7:92:8a:da:7f:e4:a1:f7:
                    92:e6:a9:cc:cf:20:e0:4f:12:cc:bc:bd:12:f7:79:
                    bd:d7:5a:7b:41:5c:d2:83:0d:7c:bc:a6:d1:31:87:
                    39:08:4c:59:e3:c1:94:5b:13:9f:18:81:a7:79:a2:
                    05:c2:21:c7:8b:27:7c:0c:fc:1a:13:8b:87:bd:75:
                    67:63:99:a5:ed:05:f2:19:3c:76:73:a9:4b:0f:a9:
                    01:07:52:22:08:6c:f1:35:92:0c:88:66:e1:02:dd:
                    36:f7:f6:18:2c:3e:31:ca:c0:4a:42:fa:5c:f5:5e:
                    7a:c4:77:63:e5:5d:09:dd:34:0a:99:92:2a:57:4a:
                    a6:90:16:f1:a4:fa:fc:7c:42:96:10:95:20:2f:5e:
                    3d:a8:d6:bb:07:cf:47:dd:14:e3:51:3f:79:2b:83:
                    08:c2:39:6c:df:a1:0c:a9:a2:4e:cc:41:2d:8c:29:
                    b0:e5:b0:c6:3e:88:2e:c7:93:31:f7:87:b5:64:51:
                    8a:e6:ca:e1:46:3a:43:d0:3d:20:8b:e2:dd:1e:b8:
                    53:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:B2:06:DE:76:D5:3A:B3:99:F7:1B:6B:95:32:A8:AC:CA:F6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e5e396c2-371d-38f8-ad50-a8fdbf86bdc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:94:25:65:49:a4:65:50:7a:80:46:4a:db:a8:10:06:fc:13:
         ab:70:82:7a:bd:3e:59:d8:3f:d5:d9:24:bf:82:86:42:e4:7a:
         30:1e:76:51:ac:78:67:bb:3f:f0:63:d9:fe:85:82:17:0d:2b:
         a1:c1:2e:47:97:8f:d4:3f:ab:39:59:0b:3c:55:4c:bb:43:22:
         f7:ec:06:e8:6c:96:75:99:a7:89:4c:1e:57:b9:69:25:ad:d1:
         49:39:da:d3:4b:57:25:d9:b3:f3:57:8e:55:94:a4:ab:31:36:
         cf:9e:74:a5:ab:63:b3:23:0c:81:c0:f9:e1:97:08:8c:57:d7:
         33:23:26:43:80:2d:04:dc:6d:b7:a3:14:8b:88:d6:96:c1:f6:
         de:e1:36:f5:24:fe:e1:03:a9:da:d4:76:cf:fb:aa:20:fe:4d:
         59:41:a6:e1:de:d8:66:0a:c3:bf:08:bd:5c:09:3b:09:f1:ae:
         af:27:db:20:73:4b:29:ce:f6:81:61:49:bd:5c:a1:c6:a8:d2:
         f4:b5:e6:74:3f:e7:ec:11:65:49:7f:3f:bb:6b:11:d9:21:d0:
         ec:b1:04:27:96:5c:35:79:1d:00:7d:2b:da:8d:e0:f1:d7:1e:
         6d:b4:b1:ff:56:4e:96:18:2a:99:5a:7b:b6:72:ef:09:78:00:
         6c:b6:52:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net