Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/81bd1d45-3916-33b2-8295-b3ac771c7690.roa
File:                     81bd1d45-3916-33b2-8295-b3ac771c7690.roa (raw, json)
Hash identifier:          t/iu8+QP5nGg+eUv1T8XTOJBIRJidnoz5nu8puIQpfk=
Subject key identifier:   99:75:FB:DB:34:AD:B3:B2:B7:DB:F5:F1:12:FD:29:E2:A1:39:8A:80
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F432858492184110A5815EA73ACA49214
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/81bd1d45-3916-33b2-8295-b3ac771c7690.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     26744
IP address blocks:        199.166.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:11:0a:58:15:ea:73:ac:a4:92:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ad64e6f0-577c-46e0-a49f-7c6e61011323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:94:a1:17:cf:99:af:69:0e:1c:1e:a4:d7:8c:
                    36:2b:a1:1f:0d:f5:1f:bd:a8:fa:7f:51:95:fe:15:
                    0b:e2:57:ce:b5:8c:1d:9c:2d:9c:35:c6:80:6c:9d:
                    9c:cd:bf:8a:1d:8e:76:45:9f:00:89:81:49:05:14:
                    21:df:91:4e:b6:f0:75:6a:8f:81:8e:e4:2f:0b:91:
                    64:f5:77:b1:78:b6:cc:13:e8:cc:f3:03:2e:f2:2d:
                    b1:88:85:fd:60:06:51:a4:ac:eb:af:83:6b:0a:d6:
                    26:99:78:67:e5:e3:75:63:a2:81:a3:b4:bc:d2:3d:
                    d2:e1:ae:84:b1:5f:aa:07:c5:83:2e:ed:4a:8b:ca:
                    9b:f4:e8:ab:23:d1:17:6b:3b:ee:c2:ea:9b:e7:e2:
                    5b:0f:30:27:60:d1:be:e4:f7:b6:98:6f:99:6f:30:
                    67:60:06:4d:9c:c5:a5:e2:07:4f:55:2c:ee:0c:98:
                    e0:13:e9:04:aa:fc:23:40:58:9e:3f:99:5e:ba:bd:
                    60:e9:a3:90:36:74:06:69:11:65:b8:8c:bc:57:9c:
                    3f:01:fe:34:b7:2c:a3:fc:61:98:73:6a:25:d4:c7:
                    65:43:08:e4:5d:88:01:95:3e:a3:04:e9:0b:16:c9:
                    f5:46:a2:a7:39:7d:ba:fb:16:f3:7c:7a:55:a4:6d:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:75:FB:DB:34:AD:B3:B2:B7:DB:F5:F1:12:FD:29:E2:A1:39:8A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/81bd1d45-3916-33b2-8295-b3ac771c7690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:9a:b4:9e:86:33:9e:62:23:35:d9:05:66:7a:23:6b:e7:
         1d:8f:28:29:63:25:bc:e9:c8:fa:45:42:b5:7f:da:ef:53:ff:
         47:5f:e4:01:fe:7f:df:36:f4:1b:cd:00:45:6e:d6:8b:ae:44:
         65:15:66:55:4d:9c:0d:7f:ec:c7:ea:2d:06:59:d7:aa:81:92:
         dd:f0:c8:5c:28:92:61:1f:23:dc:d5:3b:30:37:5f:92:a9:53:
         4f:e1:af:6d:67:78:2d:5a:27:e3:2d:69:d2:01:95:1e:03:12:
         49:5d:4b:2d:fb:f7:fe:6a:8d:62:8b:e8:9f:d9:3a:fc:df:2e:
         27:4b:0b:ad:c4:f2:9a:e0:5a:0d:86:b6:8f:4f:20:20:bb:2e:
         94:aa:a8:76:47:1e:6c:a3:fa:7a:f3:bd:8f:46:c5:80:b7:9d:
         1d:f2:0a:c7:23:71:2c:23:42:e6:f2:f2:3f:7f:01:44:da:37:
         3d:a1:69:c8:34:47:7c:11:e6:5e:b5:26:37:4e:92:64:0b:03:
         d4:f1:d2:28:32:e1:8b:47:d2:96:65:86:34:bd:47:34:ff:7e:
         57:63:1d:b8:a9:b8:78:e1:da:39:75:6e:ef:eb:b4:24:4e:a7:
         9e:0d:50:b8:78:67:ea:0a:a2:cb:95:c0:88:7f:05:32:89:83:
         94:bd:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:57 2025 by rpki-client on console.sobornost.net