Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
File:                     c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa (raw, json)
Hash identifier:          wYEiVnz1H/RmfMwYbVRExFGUDJLi1RzNNz6PABwBH3I=
Subject key identifier:   AC:D1:17:20:1D:2D:B5:82:82:29:C6:FD:81:A3:56:00:32:A7:4F:EB
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285849350E87D5B4395E9A7093E200
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     198949
IP address blocks:        208.56.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:87:d5:b4:39:5e:9a:70:93:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=e9314552-1614-45b7-941c-6faec83d341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:d5:ef:06:91:af:52:e4:1b:2c:4c:78:09:
                    60:59:c6:f4:dd:ea:84:a2:50:31:8c:4a:d7:77:45:
                    3c:fa:dc:db:8f:2c:7f:59:46:f9:3f:ca:79:62:0d:
                    b6:1a:9b:80:33:93:ad:21:ca:8d:28:84:f9:3b:d2:
                    76:39:60:b3:c3:ee:13:c2:53:8e:bb:75:02:0c:d9:
                    40:19:2e:64:40:9f:c4:1e:3f:2e:87:03:79:b4:84:
                    cf:d7:05:57:18:93:e1:d3:fa:13:c5:d6:a7:c4:02:
                    e6:75:19:21:72:f4:2f:1b:7c:5b:18:59:3b:e4:ea:
                    cd:5f:98:07:e9:a8:4b:63:4c:32:9e:72:94:cd:f1:
                    10:f0:07:ae:39:d1:11:91:e7:10:bf:ed:a6:f2:4e:
                    79:7f:3d:5c:74:5d:5e:e4:8b:39:5d:9e:4d:f5:f5:
                    48:29:0f:8c:ac:5f:9d:aa:ac:93:92:d0:98:03:71:
                    71:4d:dc:0b:2a:75:2e:1e:00:95:8b:17:41:7f:bb:
                    a9:4a:43:a6:48:86:13:75:e5:be:45:4e:a2:29:7d:
                    c8:3d:ac:e6:8c:3f:71:11:df:54:44:b3:30:52:b7:
                    63:4f:f9:8f:50:2b:ea:bb:de:f9:52:51:b1:06:e5:
                    4d:3f:ec:0a:ff:e5:81:19:20:61:c2:21:84:1e:a9:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D1:17:20:1D:2D:B5:82:82:29:C6:FD:81:A3:56:00:32:A7:4F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:19:6b:9e:3e:88:c6:9c:de:ab:df:a3:a5:89:3b:81:dd:75:
         db:c4:0c:a3:9b:48:78:b1:ee:e6:ed:e4:60:65:e9:47:4e:c6:
         0f:15:01:45:4f:c0:34:5f:4e:1e:0e:c5:ad:f2:1b:96:7e:2b:
         4f:1d:58:88:6b:54:35:a3:d4:06:d7:84:ed:3e:49:af:a4:84:
         0a:82:5e:dc:c0:45:cf:e2:ae:01:b5:1c:30:ad:d3:e0:20:47:
         0c:2f:91:c5:ba:60:e1:ae:38:82:1e:64:1a:8a:43:0c:a2:6a:
         e7:7c:9c:9b:9c:c6:3d:e6:25:12:b6:98:7a:e6:4a:ac:5e:d2:
         46:14:66:60:69:6d:ce:c8:5a:20:03:93:67:56:bc:c3:9c:8b:
         0a:29:52:c4:88:09:6c:b4:42:20:15:1b:ba:58:cf:43:2d:9e:
         0f:9c:d2:91:a5:aa:f2:5e:47:09:c9:c3:0e:b9:b8:65:12:3e:
         18:fa:b6:73:fd:f4:99:9a:c3:e5:c2:4c:06:d7:b8:a1:56:6b:
         50:14:f2:a2:4f:d5:dd:ef:d1:37:f5:82:a5:4a:c4:ab:98:ad:
         5e:de:26:28:b5:f4:c2:93:7e:cc:d1:3d:5a:ea:16:ad:89:ba:
         12:99:8d:ad:ac:89:47:f7:75:bb:10:77:a7:5e:f1:14:4f:69:
         e3:cf:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:46 2025 by rpki-client on console.sobornost.net