Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa
File:                     8c27c1f2-e985-399e-a932-ffba02cadafc.roa (raw, json)
Hash identifier:          q4V5ENPwFo7+vTaKR7SqhF63p8bWRv3+oJA10fuc5Uw=
Subject key identifier:   C7:0F:0D:1A:14:1C:9F:19:78:26:DE:32:F3:1F:E5:C5:CE:28:0D:B0
Certificate issuer:       /CN=3c637fa0-0773-40d6-afca-d49122516b4f
Certificate serial:       010D0C9F432858491D71893D17916B9A8A3CAC60
Authority key identifier: DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     394968
IP address blocks:        204.87.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:89:3d:17:91:6b:9a:8a:3c:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c637fa0-0773-40d6-afca-d49122516b4f
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=4220d9e1-e39b-427d-b2b2-cb1b35697523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:8a:1b:6b:3a:56:08:1b:d7:84:0f:8c:bc:
                    11:76:5a:10:50:67:6a:1d:07:81:25:0a:01:d9:50:
                    71:97:30:5c:a0:04:1a:cf:13:f9:67:95:f2:40:92:
                    53:14:54:7b:2a:ce:52:d2:04:a1:78:ae:c0:ad:2c:
                    56:e9:e6:94:15:9c:74:e8:2d:42:a7:9b:db:36:46:
                    d7:e3:56:19:d0:fc:51:c2:fb:8f:dd:2e:a2:47:0e:
                    06:55:3a:34:52:e5:b6:5b:eb:75:6a:94:1e:98:1b:
                    f2:06:1f:9b:c7:a8:2c:dc:ba:3b:3a:f9:65:32:36:
                    52:25:1e:cc:ee:bf:0a:5c:64:69:9a:fb:e3:6a:4c:
                    3b:1e:16:e1:03:c2:1c:11:87:34:e3:cb:0d:eb:5d:
                    cb:cc:dd:cf:bc:e0:81:20:3f:bc:4d:85:8b:92:31:
                    d6:ca:51:b3:7b:8c:04:8a:a6:6e:17:36:cb:de:f0:
                    b7:8d:8c:2b:96:3e:47:8c:44:61:11:9e:79:ec:6d:
                    11:f0:ee:61:08:30:a6:3d:72:e7:20:f4:53:3c:b1:
                    a8:bc:d2:d5:0b:1c:49:c9:54:94:b1:8e:bc:83:e6:
                    07:8a:f3:c2:26:95:1e:8a:14:07:1c:47:6f:4c:27:
                    86:68:d4:dd:66:30:3f:ae:d4:d4:fd:1c:ae:12:c2:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:0D:1A:14:1C:9F:19:78:26:DE:32:F3:1F:E5:C5:CE:28:0D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/8c27c1f2-e985-399e-a932-ffba02cadafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f/3c637fa0-0773-40d6-afca-d49122516b4f.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F8:2A:9D:61:50:27:49:55:00:2D:3E:F6:C7:62:AE:F9:DC:0F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3c637fa0-0773-40d6-afca-d49122516b4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.87.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:92:f9:45:d6:9d:4b:19:ba:49:82:4e:c9:9c:7c:59:72:df:
         27:f6:d2:7d:3e:75:18:ae:78:43:b6:9f:d7:3f:62:c0:01:32:
         09:c2:5c:71:3b:ae:74:05:e5:8a:bc:2a:f2:fb:5f:77:f3:a6:
         03:fa:90:ac:e0:87:89:71:88:5d:46:c6:8e:68:ae:b5:fe:b9:
         ed:bf:13:de:86:62:14:64:68:7b:fc:73:5d:d6:b7:12:a2:59:
         9d:88:e7:f1:8a:a3:46:58:f7:12:2b:ba:df:13:7c:dd:22:df:
         fa:5b:af:85:20:04:b3:f4:dd:6d:9b:7d:ae:00:cc:35:23:61:
         bc:37:3d:bb:55:56:22:36:e6:7d:05:23:33:98:ab:7f:a3:79:
         af:03:1c:95:fb:84:55:75:59:4c:b3:5a:d3:7f:91:33:87:bb:
         e5:97:62:b6:f7:ab:ec:d9:dd:da:48:41:12:f4:8c:a3:59:64:
         28:a1:68:78:42:27:a5:05:51:8f:77:0d:29:b8:a0:4e:11:d5:
         25:ab:c2:71:b7:e9:25:a8:8d:45:6d:00:42:01:e4:be:29:eb:
         bb:85:a1:75:34:58:85:22:52:02:b1:57:a4:87:de:ed:15:8e:
         30:d9:ca:9b:3b:36:29:ca:21:6c:85:c8:5a:5b:cc:ac:b0:ff:
         29:f7:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net