Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa
File:                     d89dc6bf-f760-34a0-9822-7f13629e97e6.roa (raw, json)
Hash identifier:          zsJKsLTIilNmZieKf8LA42Rta9AVgAQPF99EhYpW8As=
Subject key identifier:   B8:7C:8F:A9:81:4E:59:42:67:89:B9:AA:A1:E6:CC:9E:58:2E:36:42
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F43285848AFB8F8C7901EC396E5A44540
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa
Signing time:             Mon 27 Jan 2025 18:46:03 +0000
ROA not before:           Mon 27 Jan 2025 18:46:03 +0000
ROA not after:            Sun 27 Apr 2025 17:46:03 +0000
asID:                     15164
IP address blocks:        173.244.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:b8:f8:c7:90:1e:c3:96:e5:a4:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Jan 27 18:46:03 2025 GMT
            Not After : Apr 27 17:46:03 2025 GMT
        Subject: CN=dc595bd0-e009-400d-916b-fc0e4b7c85fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c2:1c:0c:ba:71:6e:f0:a3:f2:86:ab:15:a8:
                    84:96:cc:b2:20:b3:92:47:04:61:62:e1:32:be:67:
                    40:f1:73:ef:dd:b2:3e:22:4a:67:5e:be:f9:79:c0:
                    d2:4a:18:90:cd:a6:f3:f1:f8:a4:aa:0b:bd:9d:03:
                    50:ae:5c:a8:e6:11:a2:dc:cb:03:1e:68:a4:49:01:
                    d3:54:08:9a:8f:53:24:14:e3:91:85:4d:f1:e5:a1:
                    8d:f9:56:a8:ea:b7:09:f9:ff:4c:5f:56:29:8e:5f:
                    71:e9:7f:7c:72:65:d8:4f:7d:6e:c8:63:93:67:45:
                    dd:3f:c7:0e:f5:69:20:ce:e6:96:0d:16:be:1b:19:
                    ab:48:67:4b:a7:7a:44:5a:be:6f:01:3d:7a:28:fb:
                    0f:11:7d:f8:48:17:a6:ff:a7:57:39:45:1a:a0:44:
                    98:a0:f9:a1:02:d5:95:7c:01:4f:3e:a2:94:a5:ca:
                    2b:ae:dd:df:76:f3:f7:7e:6d:4a:bf:1a:25:d8:d3:
                    a6:dc:37:6b:e7:f3:93:90:25:38:a0:e3:41:e1:55:
                    88:c9:dc:7b:19:d6:78:05:01:ff:18:a4:fb:c8:d7:
                    f3:be:3d:d8:06:e8:b1:aa:21:0f:e4:ae:de:0d:54:
                    ad:ed:19:3d:da:a8:35:b8:2c:55:26:f1:a0:c2:cc:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7C:8F:A9:81:4E:59:42:67:89:B9:AA:A1:E6:CC:9E:58:2E:36:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/d89dc6bf-f760-34a0-9822-7f13629e97e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:1a:45:5a:73:5f:5e:4e:96:47:f6:1e:cd:23:4b:3b:2f:
         7b:74:af:ce:18:0a:b5:86:d8:34:f4:f3:61:84:13:0f:96:18:
         df:50:5a:97:ca:d3:a4:82:1f:ab:82:54:cf:9c:62:84:ba:71:
         0f:d6:fa:31:e8:11:0c:36:9f:dc:b1:1c:92:3c:e9:e6:ff:a4:
         5d:0a:62:ed:7b:10:3c:4f:12:c5:78:45:50:9d:2d:c9:e1:e3:
         ba:bf:e5:8d:2f:16:53:3e:4b:48:bc:d1:27:46:ae:38:1d:f3:
         13:55:bf:7b:5f:46:b0:9a:87:c0:bf:af:38:2a:a9:70:1c:1c:
         61:0e:07:fa:aa:16:b1:9c:dd:3e:cc:ab:37:2e:02:64:b1:49:
         08:91:12:6b:84:5d:cf:e2:e9:b3:f7:e0:fb:2d:76:68:2f:94:
         7a:90:31:83:b9:6b:41:c4:6b:d2:42:90:31:3c:9d:4a:92:06:
         81:fa:c7:1e:31:35:f3:14:1c:f6:29:a1:dd:66:cb:ae:1e:5e:
         20:ab:ea:75:68:32:12:29:45:57:a6:f7:63:f7:dc:cd:26:79:
         05:6c:16:60:af:f4:2b:cd:fd:69:d9:5e:d1:44:5b:ae:59:f2:
         61:3b:4d:d4:0f:cb:11:72:6e:a6:4f:5e:3c:12:90:1f:76:7a:
         fa:9c:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net