Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
File:                     75c9ae00-3895-385c-8913-67c442d2f4e6.roa (raw, json)
Hash identifier:          I3tIGSnesnA2y87e+bFIKrjtNPyyuWaf5EqvzbrBBBE=
Subject key identifier:   BA:21:24:E3:BD:DB:54:1E:BA:43:0E:8A:D3:9D:6E:72:FB:50:14:84
Certificate issuer:       /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial:       010D0C9F4328584965E97E10263FCE99DF9AAF80
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     32473
IP address blocks:        64.52.21.0/24 maxlen: 24
                          67.158.61.0/24 maxlen: 24
                          69.72.30.0/24 maxlen: 24
                          137.83.90.0/24 maxlen: 24
                          141.193.149.0/24 maxlen: 24
                          172.86.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7e:10:26:3f:ce:99:df:9a:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=75056f02-6084-4787-a307-0a8095ad95d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:61:49:67:8d:a3:4b:5f:e9:79:34:94:0c:
                    33:a3:5b:cb:cb:d1:f7:26:af:76:ef:e1:05:60:47:
                    08:82:06:77:e7:1e:0e:4a:23:64:97:21:d9:b3:1b:
                    73:b7:81:6a:73:6d:00:d6:dc:6b:d8:5a:94:de:1e:
                    dd:b7:47:b4:70:87:c1:fa:f4:c6:b8:43:a2:03:9d:
                    9b:4e:0b:ed:21:ce:d2:58:b3:ff:30:00:3b:0c:fa:
                    3d:bc:ae:a1:65:b5:66:d5:0d:9d:aa:21:eb:36:9c:
                    35:39:37:27:b1:85:7c:85:1d:5c:1f:5e:90:11:94:
                    ab:b2:d1:66:5f:53:05:8a:31:58:5d:3a:f1:4b:a7:
                    97:84:20:47:12:ae:87:2d:68:22:13:de:70:0a:6d:
                    f8:17:72:91:4b:5e:f5:6c:be:e7:26:d3:8b:a1:b3:
                    95:1a:59:1b:d3:8a:68:3b:76:89:d1:c4:60:02:75:
                    fd:4a:38:35:ee:03:43:43:de:58:ca:f9:00:8a:6f:
                    17:27:07:13:cd:20:46:fc:88:b2:b7:9c:64:58:e4:
                    2c:a2:74:bc:5f:24:a8:7b:68:e7:ce:de:d3:a4:01:
                    87:00:2b:90:d8:7e:5f:08:77:5a:06:a1:d9:f1:75:
                    22:9c:f0:71:13:20:31:8c:2f:62:8a:a2:c2:19:d7:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:24:E3:BD:DB:54:1E:BA:43:0E:8A:D3:9D:6E:72:FB:50:14:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl

            X509v3 Authority Key Identifier:
                keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.21.0/24
                  67.158.61.0/24
                  69.72.30.0/24
                  137.83.90.0/24
                  141.193.149.0/24
                  172.86.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:f9:00:2e:db:b6:00:7b:dd:47:3d:74:72:6a:df:77:56:
         c8:4e:47:37:ba:71:53:d1:3b:a2:8f:1b:e8:10:82:45:f4:22:
         17:49:13:61:b6:ae:55:f6:75:18:7f:96:db:74:7a:04:9b:a9:
         cc:86:fe:df:bf:a7:2c:f0:fc:a3:c4:64:e2:bd:03:a6:36:b5:
         ca:a9:2c:b8:6c:0e:e5:a9:f5:78:81:e1:64:1d:41:32:8c:f8:
         69:cc:af:0b:01:1f:e3:56:18:7f:c1:55:54:d2:93:c4:0f:82:
         ae:35:42:e1:1e:89:9f:bf:b9:f6:66:96:68:3b:a5:45:38:23:
         0f:eb:fc:9a:70:8f:ee:d7:4b:7a:23:e6:fd:e2:45:26:65:67:
         bb:bd:57:09:5a:de:d4:55:bc:bf:79:ff:24:24:34:e2:c2:f9:
         c0:93:5f:46:97:ed:1d:fc:5b:bd:50:a9:b3:e9:1d:1d:b8:1c:
         ea:cc:91:e3:33:44:ef:c6:f6:ac:79:cd:cb:e5:ea:6c:e8:8f:
         3a:d4:24:0a:4c:b4:68:65:a7:a1:35:69:f3:04:83:d5:9d:af:
         35:6b:10:39:45:8e:35:62:57:31:03:b2:66:cb:4d:65:f8:6f:
         3e:4f:73:c1:b9:43:55:11:07:ac:01:73:f9:c5:68:49:40:69:
         93:01:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net