Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/41ba415e-81c9-33b4-b318-27aafcbd6953.roa
File:                     41ba415e-81c9-33b4-b318-27aafcbd6953.roa (raw, json)
Hash identifier:          cgHDdHJMWlIDslkZtec1vLxP389J3HOYmDT53IyfYpY=
Subject key identifier:   FA:FA:BD:CB:10:6E:11:7E:89:C0:2F:73:6D:30:6F:72:CC:42:ED:84
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858495D896C6059C26F1BD9849280
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/41ba415e-81c9-33b4-b318-27aafcbd6953.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     64282
IP address blocks:        162.216.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:6c:60:59:c2:6f:1b:d9:84:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=06150dd9-67c6-4f94-b86c-516d022ccfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:19:ec:aa:50:c0:11:e1:5b:a6:52:2b:da:dd:
                    ba:46:c5:ad:17:d9:a7:de:47:fa:35:ce:0f:72:59:
                    67:a1:ab:f9:92:6d:d6:e2:73:36:a7:20:9f:97:e7:
                    07:c8:f4:38:fa:f0:2c:73:d8:00:27:f4:43:ec:c5:
                    6e:a5:70:5a:38:4e:15:6b:9b:ce:fd:b9:31:e8:74:
                    44:33:d0:9f:11:ae:dd:97:56:7b:2c:44:a7:67:29:
                    a9:28:84:12:d8:08:4b:47:73:9f:b7:cb:40:68:72:
                    19:6d:d2:42:1a:8a:2b:f8:f9:8e:a5:8d:31:40:ed:
                    2d:c2:be:6c:e2:29:1a:05:1e:ef:eb:f8:80:b0:ff:
                    d9:b8:81:dc:88:d0:75:b9:5c:c5:74:b0:aa:5f:5a:
                    a1:83:a0:2b:f6:9a:ac:d4:38:de:29:e0:22:71:fb:
                    9b:64:c4:f8:6a:e5:92:6a:b3:93:23:cc:92:34:4b:
                    1b:a2:72:54:05:bb:87:f8:06:56:e1:4b:e4:6d:6c:
                    f0:01:61:d9:bd:f1:bb:f6:38:94:d7:9f:a2:d1:de:
                    97:f7:8a:5e:1f:00:28:41:8a:9e:c6:f5:3b:20:28:
                    bc:d9:41:6f:94:a4:df:44:3e:7d:80:cc:7e:55:6f:
                    19:48:96:8c:8b:fe:61:e9:64:88:6c:bd:ee:7f:fb:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FA:BD:CB:10:6E:11:7E:89:C0:2F:73:6D:30:6F:72:CC:42:ED:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/41ba415e-81c9-33b4-b318-27aafcbd6953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:e7:b0:0e:10:3f:43:bf:b5:50:eb:38:d6:6c:83:29:31:
         20:a5:24:d3:aa:22:c9:a0:5e:c5:25:75:35:6a:d6:d6:67:19:
         63:b3:f5:38:c2:e1:32:2e:47:82:d3:24:37:53:89:1d:3f:42:
         8d:03:d1:44:8b:8f:aa:94:0f:25:27:12:79:68:e3:f2:9d:68:
         a9:ee:8f:fb:76:c9:1c:9d:6b:ee:57:fc:04:78:ff:ab:b0:27:
         e0:be:52:1d:91:0f:66:a2:9d:a2:ff:f0:b9:ea:db:c5:5a:f2:
         b0:0c:76:33:d6:14:37:b0:43:b7:be:15:3e:12:f0:5c:cf:19:
         2d:6f:33:9b:ef:ef:cb:f3:85:63:46:56:b8:11:5f:c6:5c:38:
         65:e3:8c:a1:8b:47:14:ce:81:6b:bb:ad:87:1e:55:3e:be:51:
         49:5b:2c:35:c0:5c:d3:45:8b:9f:45:dd:91:e3:fd:a4:17:90:
         ea:b7:62:21:51:11:18:82:85:e4:33:b5:d6:b2:0e:02:ba:78:
         ee:63:2d:63:be:1a:dd:a0:b9:36:14:b6:10:b6:6c:3a:1e:5b:
         48:bd:22:cc:91:d5:6e:f4:57:bd:68:ed:b4:79:cd:2c:b3:43:
         c9:ea:01:58:6c:cc:2a:f8:ba:6a:db:e2:10:b8:ea:88:8e:86:
         24:e5:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net