Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa
File:                     0ee1071a-423b-3d60-959f-226738682d8b.roa (raw, json)
Hash identifier:          qyUGM/LupVZiD/30F8aNg4TNY8ZpVcrQ3L3hi+CxnyA=
Subject key identifier:   07:31:36:7A:9F:D7:52:9F:23:CF:0A:BB:1B:CB:F1:7B:35:4E:2C:DF
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F432858496FB762B687C38E1613DE2D80
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa
Signing time:             Sun 06 Apr 2025 13:18:03 +0000
ROA not before:           Sun 06 Apr 2025 13:18:03 +0000
ROA not after:            Sat 05 Jul 2025 13:18:03 +0000
asID:                     16509
IP address blocks:        192.25.8.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:b7:62:b6:87:c3:8e:16:13:de:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Apr  6 13:18:03 2025 GMT
            Not After : Jul  5 13:18:03 2025 GMT
        Subject: CN=10956b75-93ec-4039-83a8-58299dfb99b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:a9:06:53:ac:7e:17:84:04:65:63:b1:52:
                    33:27:da:72:f3:ef:a5:a7:38:ca:7d:9d:e5:41:d3:
                    b6:5d:86:a6:bb:ee:83:c8:77:2f:2a:23:b7:b2:32:
                    0b:a9:9c:06:4f:6c:fe:27:2c:59:b6:4e:c2:9a:3b:
                    73:22:7d:35:c8:ee:5f:3c:4f:1b:de:bc:83:a9:d8:
                    45:65:e4:b2:ac:03:30:cd:01:da:17:fd:19:81:94:
                    98:a3:fa:83:27:04:70:b6:7f:c6:d0:1d:1d:dd:99:
                    78:73:21:18:74:c2:c1:2e:b6:48:28:99:ca:af:dc:
                    73:4d:bb:88:b6:9b:21:69:3d:e9:c7:0c:05:30:04:
                    48:cd:cc:ec:5c:95:d8:38:27:67:23:1c:c7:5d:5c:
                    f7:c7:e8:68:a6:a6:21:a4:b8:85:c5:eb:5b:db:bd:
                    8c:d5:1d:de:8f:5a:7b:45:06:16:c7:6d:91:e2:0c:
                    68:85:06:aa:16:40:b8:2a:c4:81:3a:db:d0:46:c0:
                    66:25:a4:32:55:71:9d:68:7c:f7:4e:53:46:1d:cb:
                    1d:0e:9f:88:09:a4:2b:13:39:d7:0a:dc:aa:c1:3a:
                    21:3a:4e:e3:4a:23:cd:75:89:72:31:86:53:38:ed:
                    0f:52:24:07:3a:27:a1:e7:6f:5b:fc:bd:22:f6:22:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:31:36:7A:9F:D7:52:9F:23:CF:0A:BB:1B:CB:F1:7B:35:4E:2C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:41:c2:eb:97:48:fe:4a:63:b8:09:a0:ef:de:74:31:c3:79:
         6e:22:f4:09:a6:aa:9c:39:cd:d9:23:f9:ab:c3:63:35:db:97:
         56:16:70:85:77:a0:39:a6:01:03:53:4c:82:57:81:83:8a:bf:
         70:10:b2:65:74:75:a5:a8:22:86:62:13:24:a6:8c:2d:4f:c9:
         d1:59:25:db:c6:d8:10:af:33:90:9c:27:16:24:cb:70:fe:b8:
         91:c3:58:dc:f7:39:76:3f:e6:1d:68:b0:2b:0b:ce:d0:8d:69:
         a2:43:ae:e8:0b:32:f3:d0:80:95:fd:ce:d0:74:09:f6:2c:f7:
         e2:95:6f:0b:f1:31:37:fd:43:2c:66:66:ed:b4:b6:00:48:52:
         a3:c6:89:aa:fd:24:94:86:2e:76:00:fe:b7:2b:e5:bb:a5:c0:
         65:56:8f:5a:19:ea:70:8e:a1:77:05:e2:c6:25:90:92:70:7f:
         42:7c:53:f2:ac:2f:70:15:3c:85:ea:56:34:a0:9a:67:c4:4b:
         73:69:3b:1e:2d:d4:34:a3:90:06:3b:79:00:8c:40:c0:69:02:
         9f:37:26:f9:de:b4:1e:4b:e3:35:9c:e5:25:bb:b5:23:f0:03:
         ea:b1:08:5d:d7:8d:e9:8f:d2:80:29:0a:86:c1:3d:b8:7c:8c:
         df:00:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:22 2025 by rpki-client on console.sobornost.net