Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
File:                     470b542c-40cf-3926-b91f-b6e750f55345.roa (raw, json)
Hash identifier:          XJzSXv1x4E0Viug0Kq1Dg3JILZumTu97qHpG/RQL4CE=
Subject key identifier:   D1:0D:68:57:52:A4:91:42:E2:45:A0:A0:6C:90:2D:BA:CD:69:27:E8
Certificate issuer:       /CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
Certificate serial:       010D0C9F432858495D8968C7E06AF4798BBB7FC0
Authority key identifier: C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     19885
IP address blocks:        206.214.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:68:c7:e0:6a:f4:79:8b:bb:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=d98ed9e8-f365-44df-b5ff-33c278da4b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:48:53:5e:f0:53:3a:7b:0b:e2:ee:14:74:66:
                    ef:e2:95:13:33:79:9a:bc:50:c3:36:d5:14:6e:4e:
                    94:f6:1b:c8:c5:0e:0c:3f:a1:2d:4e:96:53:36:29:
                    52:3a:63:e7:e4:1b:18:f2:19:71:4d:51:aa:08:9b:
                    cb:5d:14:27:0e:d6:4b:17:bd:1f:fd:73:a6:d2:30:
                    1e:15:3a:fa:a4:d5:09:35:20:59:63:f0:81:14:3a:
                    46:d6:c4:e9:b0:cf:91:ba:90:1a:89:f5:dc:e7:e4:
                    23:eb:77:84:05:fd:ec:2d:0d:53:c6:b7:8f:94:8f:
                    94:76:cc:b6:9b:ec:b5:67:e2:16:35:b5:f2:1b:49:
                    15:74:94:6b:76:1d:d3:87:11:cf:15:c7:ce:45:7e:
                    63:8d:05:14:c0:77:c7:76:93:28:dc:91:2e:42:5c:
                    e3:18:0e:e6:11:cd:c6:da:33:a5:28:09:b0:c2:4c:
                    e2:65:97:f3:7b:16:ab:22:9e:93:b4:61:4a:55:45:
                    e8:52:c3:c2:31:ff:30:99:f4:6c:cb:bf:c4:b3:ff:
                    db:f0:46:a7:98:8d:d9:42:54:50:f3:72:bb:8b:14:
                    9d:bb:f2:ac:4c:f1:a1:f4:b2:89:57:b8:8c:79:6c:
                    98:d3:6a:3f:ff:20:70:5e:7b:5f:19:13:b0:2d:c3:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0D:68:57:52:A4:91:42:E2:45:A0:A0:6C:90:2D:BA:CD:69:27:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/470b542c-40cf-3926-b91f-b6e750f55345.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.crl

            X509v3 Authority Key Identifier:
                keyid:C0:BB:76:5B:62:09:40:B6:EA:DD:1F:3A:6F:31:E0:70:96:2E:85:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d8b443a7-ecc0-47b6-8b16-db1fee8c2bb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.214.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:97:84:f5:51:36:83:a6:55:b1:56:2b:3f:9f:2c:19:5a:
         30:2f:46:20:85:a4:8e:46:a2:f4:37:b5:55:f2:b0:e2:9c:c3:
         d8:ff:6b:52:37:44:74:f0:e2:98:0f:c2:14:47:e1:db:42:05:
         1a:8a:02:cc:b4:a8:13:bf:5c:27:e2:f0:40:e7:b2:b4:3b:fa:
         c7:ea:cd:07:bf:26:8d:a2:4c:ed:22:1e:99:bb:66:af:92:40:
         47:b2:87:ce:28:4f:b4:f9:ec:1f:44:e5:30:b3:88:b9:10:38:
         7a:22:59:e3:23:02:05:d6:e5:ff:f9:94:f7:ef:26:d1:50:7b:
         02:df:72:d2:4d:41:b6:ac:81:b0:95:f7:74:e6:ad:17:30:6f:
         12:04:03:e8:d3:4e:34:bc:68:79:c6:7f:7a:a6:09:6f:89:3c:
         5c:19:01:52:cc:5b:43:24:06:7e:5b:4b:0c:44:c8:d5:8a:bc:
         b4:75:7a:df:3e:3d:c9:33:a9:81:50:a1:08:e5:2b:76:2b:1e:
         44:68:2d:13:54:be:aa:31:8a:e1:5c:1e:49:b6:65:36:08:69:
         75:27:3b:96:dc:69:91:68:ce:2d:83:36:88:a6:a2:d4:68:68:
         d1:93:95:4c:84:be:78:3d:99:70:16:9a:1f:c3:c8:b7:a1:a8:
         00:0a:61:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:23 2025 by rpki-client on console.sobornost.net