Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/98362b34-e216-3a54-8502-145992c20e08.roa
File:                     98362b34-e216-3a54-8502-145992c20e08.roa (raw, json)
Hash identifier:          ybmuw5sm8PiCRp5TsqTPmoFP+X/6SShd7EtLxTuZ4Ys=
Subject key identifier:   64:7D:3C:25:87:5F:69:2A:83:68:AA:10:D6:23:B5:87:4F:4B:FB:A8
Certificate issuer:       /CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
Certificate serial:       010D0C9F4328584976A99333AABC21CB7B5DA0E0
Authority key identifier: 28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/98362b34-e216-3a54-8502-145992c20e08.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     7896
IP address blocks:        64.89.176.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:93:33:aa:bc:21:cb:7b:5d:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=0a2f6017-4a36-4db7-ba15-88052dd6b53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:77:f9:70:46:d3:5c:d0:eb:55:ec:a8:07:
                    86:2c:b0:9b:6d:55:f5:fe:79:b0:3e:57:b5:a0:31:
                    db:fa:a9:db:d2:9c:f8:2c:93:cd:8a:9f:42:65:6f:
                    0d:90:78:32:a3:ac:79:0e:77:df:7d:68:4a:ce:d2:
                    51:6a:d0:7f:11:75:03:5d:1a:17:b5:0d:2d:ce:9b:
                    93:cc:0a:cd:6b:04:0d:ea:46:aa:fc:38:69:8a:75:
                    62:9c:f3:12:24:ed:d6:1e:7f:96:5a:f2:7e:dc:dd:
                    b3:a6:85:36:32:24:a3:47:98:ac:b3:45:5a:a2:26:
                    ed:11:82:70:18:81:05:6d:29:26:f2:03:1e:b1:cd:
                    5c:eb:b1:4b:23:1d:e8:a5:20:ca:cb:48:2a:e6:ec:
                    65:8e:b6:e6:04:b1:fd:da:75:f8:20:26:7a:02:ff:
                    31:40:c3:b1:f8:1b:6e:75:f1:60:17:7e:5d:1d:c6:
                    e0:ba:35:17:41:ee:1d:91:50:02:63:c1:71:23:ef:
                    7a:09:0d:50:11:ce:9e:26:52:fa:8c:8f:35:d8:a6:
                    9c:64:12:80:5c:40:ca:9f:90:21:f4:f2:53:8e:b0:
                    a6:36:0a:bb:57:7e:7e:5e:00:28:5e:2a:0f:30:30:
                    f9:13:bf:4b:d9:f7:4f:2d:02:a8:a6:35:7d:3e:94:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7D:3C:25:87:5F:69:2A:83:68:AA:10:D6:23:B5:87:4F:4B:FB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/98362b34-e216-3a54-8502-145992c20e08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.crl

            X509v3 Authority Key Identifier:
                keyid:28:93:96:BA:2B:B0:3C:B9:26:0A:C9:E3:9B:7C:8E:CC:B4:88:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e14ebd5f-d72f-4ffe-aecd-ad2d2b1a8eff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:44:3a:af:bd:ce:c1:09:fe:0a:a0:3f:18:79:4e:b9:6d:70:
         35:97:01:c3:7f:45:7b:fa:d2:6d:c1:a3:0b:dd:d1:ed:1d:93:
         ce:e4:a6:af:e5:94:ca:97:48:a8:e2:9d:bf:ec:af:1f:1c:9a:
         2e:01:a5:c6:27:f2:e6:e0:f5:08:e5:e7:ad:67:22:43:a1:05:
         73:1d:83:4a:65:ba:f3:37:7c:2a:dd:44:b2:22:d1:e9:0a:38:
         f0:8c:d3:6a:4a:32:fc:6b:9b:72:56:1b:85:3a:e2:f1:05:1e:
         ec:ba:b5:73:0f:a7:c7:32:0e:cd:c5:b9:6e:8e:a7:24:82:f1:
         8d:97:50:bf:56:fe:32:9a:a2:a8:b4:d7:0a:6c:1d:43:78:e8:
         35:74:c0:b0:ef:18:80:55:f5:b9:df:53:e8:11:34:99:17:6c:
         b8:9b:91:13:7d:f4:be:e7:48:c1:0a:41:f8:02:a6:57:4b:53:
         59:2e:b2:95:45:8b:3c:a3:c0:d9:16:4e:b8:e0:7d:89:95:a4:
         45:89:e2:9d:86:ea:82:32:c3:a2:63:04:e2:a4:cf:f7:17:6e:
         69:e6:46:ef:2f:59:7a:d1:97:c1:4c:81:a6:7f:67:6a:3f:4a:
         d8:f3:d4:f4:c4:ff:0e:9f:78:66:a9:3c:77:d0:03:45:94:4c:
         3a:65:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net