Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa
File:                     34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa (raw, json)
Hash identifier:          EHFotCqpBaHQuSVSMA4LFQddscifuzcCew5kpPNGiVI=
Subject key identifier:   65:5A:45:D1:78:B1:4A:84:93:C0:0D:8F:A9:F7:CF:B9:A4:58:79:A8
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F432858496E498763B629D83F319C2F00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     211373
IP address blocks:        69.176.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:87:63:b6:29:d8:3f:31:9c:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=d556f4ce-45a3-4178-afc4-9d9ea30f82a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:72:81:26:39:c3:c6:23:eb:9a:ec:86:d1:
                    a5:d8:35:07:89:dd:c5:0f:c7:65:0b:d1:6a:80:14:
                    50:fb:16:e1:e2:eb:9b:f4:7b:d2:d1:98:23:7a:79:
                    43:43:cd:5f:13:78:75:92:59:59:ff:22:04:83:22:
                    06:da:3f:0c:d7:3e:38:5e:0a:7b:1c:13:f9:42:43:
                    46:08:54:95:58:cc:2e:b1:dd:4a:9d:b4:e7:15:95:
                    31:22:60:37:c3:9f:ac:a6:bd:9d:2b:1a:06:cf:66:
                    7d:e8:c5:8c:54:75:c6:8e:59:fa:84:bb:1a:ef:7c:
                    3a:34:08:82:f3:c2:50:94:a1:2e:bf:4a:40:ca:f5:
                    82:43:4c:01:40:ad:4f:ac:ae:44:97:22:cc:b2:94:
                    30:81:93:cd:21:c9:4a:ee:43:3f:50:1e:89:25:6b:
                    ce:b5:b9:f4:8f:99:89:11:3b:bf:97:54:b8:99:36:
                    e7:8c:dd:a8:22:84:4e:ed:60:95:a3:44:cb:0e:f7:
                    b6:1e:3e:6e:ff:02:f9:64:5f:54:10:a9:09:f3:ec:
                    38:b7:1e:43:8f:ce:5d:fe:76:58:c9:0b:ce:d2:4d:
                    d2:23:46:55:ab:b9:ed:a9:01:3e:89:63:d6:a1:4a:
                    7d:12:d0:08:c3:ef:f4:e8:21:48:5b:b8:10:88:ec:
                    40:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:45:D1:78:B1:4A:84:93:C0:0D:8F:A9:F7:CF:B9:A4:58:79:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/34a3d806-88c7-3fbc-89a1-ec74e9c74a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.176.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:3f:a7:d7:7b:5e:cb:3b:f5:30:ba:1d:74:97:f2:f2:cf:
         8c:1c:ec:b8:c6:51:22:e1:17:aa:42:46:01:e5:b9:43:ad:0d:
         04:0f:3c:75:65:6e:b9:be:5b:15:ee:1c:d2:46:09:93:92:a6:
         83:37:3e:64:0d:a7:ed:f0:61:a4:9b:51:49:bf:7c:86:59:3f:
         55:1e:03:5e:b9:3b:c1:5c:70:d0:57:b6:d3:ff:82:e1:19:20:
         1e:a1:10:2c:55:f3:2a:df:57:fd:c4:0e:39:b3:a3:df:3e:90:
         84:74:1b:4c:4c:04:bd:81:10:fb:28:53:f3:e8:1b:8c:bd:ae:
         dc:a2:71:10:0b:c9:79:79:40:c6:3e:ee:5e:18:a5:3d:6e:ec:
         b4:44:97:b6:47:56:6f:6f:76:1e:44:f8:41:b5:0a:75:30:e3:
         09:a7:9e:51:0f:2d:30:b1:d7:2b:54:db:1a:73:8e:79:42:68:
         7a:08:bd:99:83:95:3a:28:26:b6:9a:17:df:45:3c:bc:09:04:
         a5:ef:e4:37:a5:18:6a:f9:a7:cb:f7:c0:01:cf:bd:b9:49:5e:
         05:a8:0f:2b:ef:69:7f:17:00:08:a4:04:60:f9:7c:b3:6d:0a:
         f8:e5:16:a9:68:30:d4:45:fc:1e:28:28:ca:b2:15:6f:3c:30:
         0e:7c:00:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:19 2025 by rpki-client on console.sobornost.net