Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
File:                     c5f83fad-67aa-328f-bed8-a9b051be30b2.roa (raw, json)
Hash identifier:          aJuHT71ukw48mKaVMHaKpE/kpP1v+pX7t8WYpT7Y/b8=
Subject key identifier:   0B:28:92:F9:4D:E8:10:15:00:B7:79:27:9D:3A:5F:80:33:86:0C:6A
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F43285849071BF41DDE80CBF959F6A000
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     30041
IP address blocks:        148.222.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:f4:1d:de:80:cb:f9:59:f6:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=5b4c59f9-3bcf-448e-9c75-6720546e7779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:49:e2:bf:2c:4d:31:5d:03:8c:4b:c0:f9:
                    2f:85:0b:fc:cb:86:d0:e9:c0:e8:b4:7d:31:e5:b6:
                    5b:82:fa:30:3a:c8:c0:9c:ac:24:e2:69:93:5d:33:
                    11:c7:02:46:8f:79:53:54:c4:73:dd:2c:26:8b:a3:
                    fb:fc:cc:44:f5:82:4c:06:9d:d9:e2:6c:85:59:3a:
                    69:4c:8a:b6:bf:a5:a7:0a:4d:d9:28:14:09:56:19:
                    fb:7e:af:75:04:d8:f0:9f:4b:83:e1:13:b5:0d:fd:
                    05:62:6c:05:cf:5d:6f:bf:16:07:d6:71:d2:c3:5a:
                    dd:3e:46:e2:3d:70:35:85:6f:fc:89:20:3f:6b:b3:
                    da:b5:68:4e:c9:64:9e:ee:9e:bd:3c:f7:c7:d9:c0:
                    5d:9f:75:9a:bc:2e:35:af:4c:b6:23:4b:fa:1d:a9:
                    46:e0:15:10:f7:38:cc:a0:95:6d:a6:a7:02:e1:5a:
                    97:89:7d:62:7c:72:3a:0c:69:96:bd:4f:31:fb:87:
                    06:42:0c:c7:e8:64:25:0f:de:e0:8f:3d:1b:5e:a6:
                    2d:06:14:44:f0:c9:13:b8:ff:92:04:c3:eb:0f:24:
                    a2:02:5e:5b:81:52:7e:d3:2c:ef:3f:b2:50:82:d7:
                    58:88:4c:91:b9:0f:a6:00:0c:20:8d:bc:1f:4a:31:
                    ef:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:28:92:F9:4D:E8:10:15:00:B7:79:27:9D:3A:5F:80:33:86:0C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d9:38:e9:90:28:fb:d8:d4:8d:dd:46:bd:25:2c:7a:4e:e2:
         cd:60:cd:69:6d:b3:7b:2e:8b:3a:5a:cd:fa:e6:3f:0b:dd:78:
         8b:fe:6f:8b:0f:2d:dc:5c:db:5b:6e:71:f5:bf:27:ca:70:8d:
         a2:18:82:d2:8c:03:9c:62:c0:7a:da:d2:a5:bb:8e:80:7c:84:
         f2:5a:a8:4f:7f:73:e1:20:af:f7:9b:c3:1e:a3:f7:cb:a1:c1:
         55:25:e2:3a:e9:64:47:c2:b0:70:53:e2:bb:f4:42:4f:36:2f:
         61:78:2b:19:60:a6:85:10:57:c1:e1:40:41:02:64:c0:47:12:
         f4:41:f7:14:58:9e:e3:57:54:67:11:fd:72:8b:8d:ef:49:a2:
         a0:44:c7:2e:89:67:06:85:6b:06:74:a8:f9:e2:fd:0d:6e:2b:
         83:11:d0:8d:d9:fd:ba:00:84:88:c9:46:8d:91:64:71:31:2a:
         0f:21:84:67:e9:7f:4f:55:7d:da:d6:04:27:ab:94:90:32:2f:
         90:d6:2e:9f:c4:17:93:99:d4:48:75:7d:31:d2:61:61:9f:00:
         4d:07:88:ef:50:9c:31:7f:d7:94:aa:bd:e4:96:e7:9b:ec:02:
         69:99:49:08:1f:32:8e:6d:e9:20:2c:09:55:56:66:fd:8c:0e:
         57:f8:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net