Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
File:                     25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json)
Hash identifier:          KB1xefcXG9MthhkDMYIy0wc+4l8p3pPnG9Tfa2S35L8=
Subject key identifier:   E9:01:2F:48:3A:2C:9A:88:11:04:B4:63:40:3F:44:A3:D3:5E:38:40
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F432858498339F53D9793C4000DF43100
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     14048
IP address blocks:        141.225.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f5:3d:97:93:c4:00:0d:f4:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6f1561ff-d913-4428-b01d-ba83414df02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7e:f6:d3:2c:70:80:1d:19:52:30:f6:8b:b5:
                    5f:8a:1d:b7:23:c7:38:08:89:9f:73:ec:54:73:d9:
                    94:ed:d6:2b:d2:7f:fb:b2:1b:a4:ad:c9:e7:84:c6:
                    c3:b7:e2:25:57:63:80:33:e3:e2:e3:c9:99:c6:50:
                    94:f0:6e:60:03:7b:7a:7c:8a:92:bf:06:90:4f:90:
                    3a:c0:5a:ec:d0:51:a5:0d:0d:78:2d:7e:a9:91:f3:
                    34:13:db:d8:de:81:e8:c4:fa:0f:fe:d3:14:d7:91:
                    85:b9:cb:43:8b:72:72:1c:84:7c:bd:36:48:78:2e:
                    d7:95:b6:b9:d2:8e:78:2f:b3:d4:54:82:fc:5f:d0:
                    50:b0:56:33:f2:cb:9c:55:b5:44:79:c5:20:cf:56:
                    25:c8:ac:80:18:9a:24:e5:86:81:a8:46:e3:25:56:
                    91:2d:e2:d6:cf:1d:f2:e9:08:c5:e5:14:11:69:c4:
                    37:72:9e:3c:86:1e:15:2a:39:a1:cd:1c:09:03:e6:
                    b6:e5:49:52:9a:56:9d:f2:ab:98:f9:b6:c3:1a:5b:
                    66:98:17:51:38:a0:16:59:be:51:bb:65:0e:95:7d:
                    15:b1:eb:15:92:91:aa:04:f5:b8:bc:40:5a:89:3b:
                    ec:21:01:43:2f:21:bf:d1:4d:0b:58:60:83:66:c2:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:2F:48:3A:2C:9A:88:11:04:B4:63:40:3F:44:A3:D3:5E:38:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:62:d4:21:9e:0f:33:74:5a:1c:59:23:6c:bb:b5:df:b3:85:
         ff:b3:7c:6d:00:55:56:fc:89:9d:10:f0:b9:97:d0:05:3a:d4:
         9c:d2:2b:39:bd:e2:f5:48:98:fd:4e:a1:ae:74:56:23:e7:03:
         b4:cf:1a:92:37:fe:c9:7d:cf:83:85:2d:86:42:54:bb:a5:dc:
         93:a8:7b:05:d4:92:89:0f:b4:a6:fa:7f:fe:dd:df:16:f9:98:
         63:91:6c:06:62:cf:e3:7b:ba:7f:3d:f9:40:61:5e:5e:94:2e:
         b6:12:e6:85:c7:89:29:d1:e1:2c:5a:ab:f3:96:b0:be:2a:5a:
         04:ff:c7:86:72:3f:fd:7a:23:05:3f:12:28:34:83:1c:55:ca:
         2d:6c:fd:cb:af:33:8a:bf:e0:88:98:9c:27:d4:27:58:87:a0:
         df:6f:f0:2d:25:ce:19:b9:91:a0:5b:f3:d9:81:79:ad:9b:7b:
         3e:fe:c0:da:5a:59:fa:16:63:5e:c0:3d:58:a4:13:e4:3b:cc:
         64:0a:25:06:42:9c:5c:02:bc:2b:04:63:12:4b:2d:7c:8a:60:
         4d:2c:fc:73:4f:b3:fc:32:64:79:2e:72:b7:4e:29:7f:af:86:
         37:16:60:18:d0:cb:2a:38:83:5c:82:95:06:73:08:fa:9f:e1:
         72:95:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net