Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
File:                     4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa (raw, json)
Hash identifier:          41o4XM5KX6poamlm6pkOs4vo5z3AAyxM3RoQTsZEhjc=
Subject key identifier:   F2:93:9A:24:00:58:AD:17:2B:54:11:DF:1A:82:E0:DD:71:5B:65:CE
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584981D4579B69D29BA063F04B00
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     21699
IP address blocks:        23.130.96.0/23 maxlen: 24
                          45.41.212.0/22 maxlen: 24
                          45.45.240.0/22 maxlen: 24
                          162.253.212.0/22 maxlen: 24
                          204.10.89.0/24 maxlen: 24
                          209.160.96.0/22 maxlen: 24
                          2602:fe6b::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:57:9b:69:d2:9b:a0:63:f0:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=3e0699f4-b175-4fea-966d-337053e5cf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:0a:d1:3b:da:90:56:24:ec:f8:c4:6d:b7:
                    3b:e3:ca:04:14:56:59:e0:e4:89:50:04:46:f4:ff:
                    83:34:88:c0:8f:1e:28:05:a1:4d:57:08:8c:73:dd:
                    6c:5a:30:17:a8:e9:1d:72:9d:cb:50:c0:26:89:50:
                    51:4d:b8:8a:bd:c8:9c:0f:5e:f8:1f:7d:f8:48:3f:
                    02:9c:de:d5:d6:87:8d:ec:58:fd:85:56:0e:ec:df:
                    f1:5b:ca:65:13:fa:0d:33:ae:72:e4:8e:d1:95:53:
                    8a:52:55:8f:ef:f7:aa:2e:5c:41:ff:06:93:02:9b:
                    ad:6d:09:f7:3a:e8:e4:1a:3c:9a:bf:ff:fe:17:f6:
                    dc:2c:b2:de:60:e0:50:9b:90:51:f4:15:b7:f7:27:
                    4e:86:b7:79:eb:42:09:57:bf:04:18:b1:94:59:da:
                    c6:42:b7:00:ff:f7:41:da:86:e6:6d:ac:6e:50:71:
                    8e:ae:3b:3d:53:8a:1a:9e:3f:ac:79:2a:44:55:17:
                    ef:bc:4a:07:e0:d7:59:e7:12:5b:58:15:55:35:fe:
                    28:08:11:34:79:a1:0c:7e:94:d7:12:e8:df:ee:ce:
                    99:a8:8a:be:b4:a2:cd:1d:ae:37:8b:0e:c5:c0:f2:
                    2b:1f:41:1b:6b:d8:c7:ea:b8:80:bb:50:f4:1a:fd:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:93:9A:24:00:58:AD:17:2B:54:11:DF:1A:82:E0:DD:71:5B:65:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/4a9c37ad-9e8a-369e-bf7f-9478353fca0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.96.0/23
                  45.41.212.0/22
                  45.45.240.0/22
                  162.253.212.0/22
                  204.10.89.0/24
                  209.160.96.0/22
                IPv6:
                  2602:fe6b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:cb:86:64:98:ba:f1:66:22:27:ea:0c:28:be:02:75:29:
         71:d1:c3:9b:a9:e7:2b:7e:6a:14:fb:22:5e:b3:74:3d:3b:76:
         ee:a9:ac:7e:04:47:95:b3:c8:25:d5:8d:f9:53:77:b4:3f:ff:
         57:8f:0f:01:b3:14:4d:60:aa:44:5c:8c:5f:ca:d7:64:1f:51:
         27:98:b5:74:fd:d2:55:dd:a5:de:78:c5:43:65:4e:8a:11:a2:
         33:33:68:fa:fc:12:66:72:6d:8e:68:90:49:34:14:cd:16:f9:
         9b:33:b9:67:d7:38:4e:b9:3e:bf:a6:a3:db:11:02:a3:11:1d:
         a1:7d:69:7a:26:50:d7:65:68:d2:04:0a:a9:fe:77:f5:02:32:
         62:91:15:fb:8f:f0:67:f2:4f:f0:fb:f8:2b:d6:71:39:cf:1d:
         c7:00:19:91:00:8e:88:47:a9:25:8a:21:a8:3e:eb:58:bb:18:
         91:13:73:78:ec:df:fa:36:6f:cd:d4:eb:00:a1:03:8d:32:15:
         d6:e2:1e:be:2a:ae:41:25:ec:47:e4:67:54:7d:dc:4b:40:01:
         2f:95:57:51:88:0b:9a:77:9b:8f:6c:8a:84:a4:f0:d9:c0:72:
         d7:c2:79:82:92:75:55:cb:cb:7b:cc:4a:60:e6:52:dc:f9:ee:
         b1:fc:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:50 2025 by rpki-client on console.sobornost.net