Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa
File:                     303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa (raw, json)
Hash identifier:          hwYdi9DUo2wkGkr0q/NXGpIfNlxMTMwx9Ujl24EWAu0=
Subject key identifier:   9B:C2:C8:73:8E:11:1F:D9:76:48:98:92:A7:00:FF:2E:62:E6:90:55
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F432858494733FD3A1058D501CE778780
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     393878
IP address blocks:        216.99.216.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fd:3a:10:58:d5:01:ce:77:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=0689256e-9695-4837-bbfc-a452b193d04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:97:60:b6:be:b3:b7:e7:41:b1:1f:15:40:
                    1f:3d:62:47:6f:24:de:3f:1c:b1:df:06:7f:c4:c2:
                    73:34:83:26:de:b4:4e:3b:59:3d:07:19:63:91:5a:
                    a8:51:9c:9d:5f:8f:73:c1:35:d5:0e:07:bc:20:38:
                    ac:d4:85:da:25:a0:c3:34:c0:e5:6e:70:b4:fb:27:
                    13:9a:d8:80:71:a2:a7:df:6c:a2:6a:4a:67:8f:55:
                    84:47:d9:06:ad:35:fd:4c:92:08:97:38:f9:03:ea:
                    81:08:05:37:f9:1b:12:b3:3b:09:f2:5e:69:6d:e0:
                    08:f7:7e:fc:ff:a7:01:91:ac:fb:25:5a:02:be:21:
                    c2:34:07:9f:6a:22:25:51:61:19:cc:1c:d8:a7:7c:
                    e8:c6:59:d5:69:3a:50:35:60:9a:7a:51:dd:85:98:
                    de:7f:eb:f0:df:8d:d1:c7:a5:44:ed:43:6f:e8:ac:
                    e6:83:2a:17:48:08:11:19:be:1d:1e:ff:d9:af:b8:
                    54:52:98:c3:3d:52:90:4d:ee:c1:71:0a:83:98:5b:
                    16:c2:f4:7b:fd:32:32:4d:2c:27:e5:06:09:68:ce:
                    00:78:0e:78:34:f2:d6:1d:ae:a9:d7:ee:a4:10:ee:
                    28:47:af:31:8a:a7:ca:c4:fd:59:20:fa:35:aa:b6:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C2:C8:73:8E:11:1F:D9:76:48:98:92:A7:00:FF:2E:62:E6:90:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/303c779b-4e01-3064-9d83-5e9b4fcee5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:89:36:51:f8:b2:8f:30:34:2a:a7:7c:08:13:d4:fe:72:67:
         e8:91:6f:c0:3a:94:82:36:f1:c5:ca:f1:d2:72:29:38:1b:d3:
         dc:ac:34:01:89:f7:01:80:28:56:7c:c5:04:a2:c8:55:12:e2:
         8c:4b:be:02:d1:b0:37:65:48:3b:3a:11:b9:5f:36:42:3b:63:
         db:c5:c3:0f:48:4d:ba:b8:7e:0b:7c:ea:cb:d1:59:25:7f:73:
         9d:c7:32:5c:f3:36:e0:68:b7:03:84:61:44:6b:1e:5b:91:f9:
         3e:6d:f9:70:10:b5:c3:1f:bc:a3:f1:32:c3:11:be:65:bf:44:
         49:0a:08:fe:f7:a1:4b:5d:fe:99:fe:15:85:ce:d7:7c:15:98:
         6a:3f:75:f0:ae:b1:99:58:f0:c4:7a:97:4c:ca:36:60:7d:b7:
         c8:32:f1:6a:02:90:e7:54:6d:f4:ff:ff:13:6b:7c:c5:7e:34:
         0a:a9:c6:eb:ff:76:7f:f2:5a:66:79:9f:54:e3:be:7f:f6:ae:
         dc:a6:d3:66:eb:26:4f:68:0e:51:f6:fd:3e:74:fa:0c:fa:9f:
         ac:7c:18:97:b6:89:db:bc:7d:35:65:b0:ad:b3:71:b9:58:44:
         03:c9:5b:99:4b:65:fd:d4:80:a8:c0:6f:b0:31:79:9d:90:db:
         96:9e:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net