Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa
File:                     ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json)
Hash identifier:          qq19JV6rq/42lZMIhlup8Orw1jYd6s7sc7VmMljnGbI=
Subject key identifier:   A1:BC:CE:C6:CE:3C:54:18:6D:EE:E5:7B:58:75:DB:99:EE:57:24:7E
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F43285849393E6CBC7F376C016B2A5640
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     30041
IP address blocks:        66.218.32.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:6c:bc:7f:37:6c:01:6b:2a:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=94def074-9e15-4aa8-bb9b-b3a69552f2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:fe:09:ea:ec:16:8e:ff:90:61:ee:b9:0d:
                    be:8d:bf:cc:a4:48:35:00:a3:1c:30:9a:26:4d:bf:
                    91:e9:6f:4d:48:28:e4:05:ba:c3:d8:04:7d:8e:bc:
                    c8:43:ef:5d:60:b2:ae:61:ce:33:3a:20:e6:ea:d6:
                    36:d8:f7:ef:72:2a:92:08:c2:6e:1f:25:40:1b:28:
                    33:ae:f7:99:2f:d0:c9:f5:fc:0f:a6:3b:1a:82:5d:
                    19:50:b3:12:31:bf:1d:39:6f:99:b5:db:52:49:78:
                    45:31:49:40:e7:5d:a1:b3:97:8e:02:b0:f8:b3:bc:
                    f5:cb:61:e9:ea:c0:08:5b:b8:f2:ab:13:b4:65:8f:
                    46:a8:99:72:a6:ff:e2:ff:e5:21:cc:f2:29:36:96:
                    45:5a:7e:0e:10:fc:33:72:08:5d:32:8e:79:5f:b0:
                    45:7e:22:b8:3b:a9:c4:5e:be:78:a7:23:8c:ab:8a:
                    f8:01:26:73:e3:12:f5:ad:8e:d8:8f:8a:fd:68:87:
                    20:30:70:3e:3a:88:3b:db:d9:eb:56:5f:c3:d9:d8:
                    7e:37:db:9d:44:ee:4b:da:43:8f:07:1e:86:80:cf:
                    d4:c1:07:b7:e8:19:29:a6:10:30:29:0b:9b:e1:96:
                    2c:db:bc:22:b2:68:02:23:35:22:77:15:d2:1a:23:
                    24:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:CE:C6:CE:3C:54:18:6D:EE:E5:7B:58:75:DB:99:EE:57:24:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:c7:5c:eb:b8:c6:c8:2a:c1:67:0a:84:82:81:29:2e:60:
         bd:7e:c3:be:ed:b3:08:b6:ee:66:45:2e:ea:76:c7:27:76:af:
         b0:9e:a0:f3:2b:0c:3c:84:27:6c:de:f1:0c:19:17:3e:45:7f:
         b8:df:af:2c:c6:df:47:b9:b0:3b:d0:b4:18:2b:09:45:98:40:
         b4:18:a8:ca:fe:1b:fc:8a:ef:ce:29:de:be:29:54:78:cd:72:
         fa:19:13:06:b8:4e:1e:58:1b:ee:08:19:64:da:f1:cd:e0:bd:
         b2:ad:9d:04:b3:9c:2b:fa:9c:97:7d:8e:cf:94:ba:d3:4b:aa:
         25:a8:60:67:d5:cf:03:44:a5:14:4a:51:4e:36:06:d6:84:ba:
         a0:42:3a:2b:69:f2:76:5c:ac:62:ea:83:8f:c6:78:cd:77:e8:
         d1:05:9e:fa:f1:39:96:b6:6b:55:f9:a5:43:59:27:93:75:88:
         82:14:a1:08:b7:00:5e:83:03:75:f0:f1:71:50:65:79:36:5a:
         c5:19:34:b6:00:85:49:39:4b:4c:dc:c4:77:98:18:77:b6:eb:
         88:fe:59:32:f9:c6:c5:7f:24:c5:2a:4e:97:15:6d:1f:15:51:
         79:88:1a:b3:81:81:1f:87:c9:6b:d8:6e:a6:e4:e0:93:cd:25:
         b2:c9:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net