Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
File:                     6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa (raw, json)
Hash identifier:          pH+YsqjV3cCxjQAjr/TMdaZH/omecv2i+tKVMCQyirg=
Subject key identifier:   C5:63:AA:97:41:F9:B9:A1:8D:7B:FB:C2:A8:71:D9:52:7D:55:F9:59
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584925B3AD9F53B34847624B3060
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa
Signing time:             Tue 11 Mar 2025 01:00:40 +0000
ROA not before:           Tue 11 Mar 2025 01:00:40 +0000
ROA not after:            Mon 09 Jun 2025 01:00:40 +0000
asID:                     11348
IP address blocks:        207.160.128.128/25 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:b3:ad:9f:53:b3:48:47:62:4b:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Mar 11 01:00:40 2025 GMT
            Not After : Jun  9 01:00:40 2025 GMT
        Subject: CN=4d190361-8e32-4b0b-b6b2-57f6127484dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:c3:67:6c:a5:b9:0c:f4:16:04:34:38:df:
                    7a:67:40:19:dc:ba:ff:18:74:fb:1a:69:84:36:53:
                    83:43:5d:7a:80:8e:4f:1a:60:54:24:fa:e5:9c:03:
                    44:f6:1a:2a:c1:9a:57:51:2a:20:41:66:d6:e5:71:
                    a5:99:65:61:7b:7b:d3:51:49:e3:e7:5f:0c:90:35:
                    ad:33:52:15:d2:45:81:de:cc:23:1a:14:69:9a:72:
                    3e:a1:a7:c7:c3:76:83:4e:be:37:86:2b:c5:cf:47:
                    7f:13:35:a5:72:d1:8b:92:1e:1d:d4:94:39:63:32:
                    8b:92:4b:59:64:f8:80:ec:de:31:45:e4:74:80:96:
                    03:d6:cb:0f:c6:df:ea:01:fc:42:10:2c:6d:c5:f1:
                    32:cf:fe:95:e7:b4:20:ba:fa:76:df:db:aa:69:ea:
                    50:83:ff:b4:cb:88:21:8f:55:9a:14:06:0a:55:50:
                    ba:e4:20:37:2a:fe:b1:da:46:d8:21:98:93:3c:9f:
                    44:67:82:d6:98:72:7a:04:53:8e:af:23:03:5b:b3:
                    62:c9:0b:61:c8:e0:86:0b:e7:a0:4c:45:c8:14:ea:
                    07:0e:83:49:f7:6a:c3:58:54:cc:12:63:64:aa:3a:
                    e3:33:fc:23:a0:9d:f1:4c:f7:ef:17:64:c1:8b:e5:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:AA:97:41:F9:B9:A1:8D:7B:FB:C2:A8:71:D9:52:7D:55:F9:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/6f59d69b-2b27-3b4e-8a14-e1eb1b261540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.160.128.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:99:18:4d:88:a6:c3:a5:09:c6:c4:17:d6:ed:d0:f8:0f:b3:
         99:61:8d:33:d5:4a:d8:e0:dd:60:3c:86:16:c3:00:43:eb:46:
         5c:5d:9f:a6:07:5c:7e:f9:7d:b0:98:89:c8:5f:07:59:09:44:
         d3:3c:ef:94:f3:0f:4a:2f:8f:a5:db:ff:1b:a4:4b:88:03:92:
         ce:b9:f6:78:fa:90:c7:34:11:92:d4:ea:5f:76:36:98:0a:5f:
         88:8e:d1:6b:6e:76:6a:c6:4d:93:30:7b:32:90:7f:0a:07:38:
         b4:65:b1:55:6d:4b:52:40:ef:0b:18:8a:d9:36:67:e4:fd:dd:
         e0:99:4d:29:c6:1f:91:b1:0f:c6:00:44:ac:78:db:c3:e1:ca:
         df:a4:99:8a:d6:a0:53:4b:fc:b1:a2:d3:71:e9:f6:f0:05:86:
         85:29:13:bd:46:dd:88:9b:90:35:a8:b2:7d:39:24:af:14:61:
         9f:f0:a9:19:82:32:a5:65:6e:96:23:e9:4f:0c:7e:d0:57:9d:
         e9:56:c9:e4:32:42:4e:14:61:81:28:ff:b3:27:91:68:5b:9c:
         66:4d:e5:c0:68:fc:38:15:0b:1a:30:dd:ad:b3:c0:e2:8e:db:
         59:68:d0:f5:86:27:8d:11:71:60:92:36:00:c4:e9:04:43:3e:
         6c:87:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:14 2025 by rpki-client on console.sobornost.net