Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
File:                     9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (raw, json)
Hash identifier:          WTW5cRT4TTR+k0morpNm7r2+nPT/NMKDjwTwJx0loVo=
Subject key identifier:   AA:E0:CD:13:9E:B7:36:36:1C:67:C7:1A:5E:21:08:7C:5F:08:5E:60
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F43285849350E8C149FF335F795AE0E00
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        130.248.166.0/24 maxlen: 24
                          130.248.177.0/24 maxlen: 24
                          130.248.178.0/24 maxlen: 24
                          130.248.216.0/24 maxlen: 24
                          130.248.217.0/24 maxlen: 24
                          130.248.223.0/24 maxlen: 24
                          130.248.227.0/24 maxlen: 24
                          130.248.228.0/24 maxlen: 24
                          130.248.231.0/24 maxlen: 24
                          130.248.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8c:14:9f:f3:35:f7:95:ae:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=2a1be0eb-5b89-40e8-acca-609a4fdd86b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:cb:7f:05:06:ac:be:f4:66:94:d8:f5:13:
                    3b:01:e0:bf:60:5e:62:99:97:e8:6f:7e:9f:6c:76:
                    49:6f:9b:e2:e2:5e:45:d7:81:de:8d:11:3c:64:b0:
                    e4:af:9b:fd:cf:af:20:0c:e4:4e:3f:68:0a:6f:3f:
                    bf:76:88:5a:64:ab:b7:a6:d2:f3:c2:58:59:23:55:
                    e3:ed:08:bd:50:91:e5:65:96:2d:a7:aa:57:ba:28:
                    52:fd:1c:72:73:d5:e9:1b:fd:b7:9e:5e:4b:ee:a5:
                    c7:d6:77:6c:e5:f8:88:db:a8:2d:69:bf:ef:f1:a7:
                    46:2c:7a:e2:73:82:58:7b:d7:0a:8b:38:05:e6:c7:
                    cf:a6:23:ff:35:97:20:01:2f:c1:40:9c:ff:49:15:
                    de:2e:0c:76:4c:b1:e8:7d:29:5a:46:72:ca:ed:3f:
                    47:0f:77:be:e6:92:df:f1:58:57:d0:0f:1a:80:f9:
                    b3:1b:37:e2:53:f7:63:27:a6:26:64:16:ed:8c:30:
                    ea:61:d9:62:6d:0a:f7:5e:38:ec:c8:70:85:67:4c:
                    59:04:d2:d2:e7:11:76:6b:24:bf:47:c5:ca:2d:46:
                    13:d7:b3:5c:4a:e7:8e:3d:28:92:8f:e3:07:eb:20:
                    a8:12:48:b9:53:65:79:32:63:56:52:18:39:37:f2:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:CD:13:9E:B7:36:36:1C:67:C7:1A:5E:21:08:7C:5F:08:5E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.166.0/24
                  130.248.177.0-130.248.178.255
                  130.248.216.0/23
                  130.248.223.0/24
                  130.248.227.0-130.248.228.255
                  130.248.231.0/24
                  130.248.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:5c:4f:cd:2f:b1:f4:e3:71:fb:40:09:69:f6:76:27:3d:
         12:b7:23:ef:be:5d:4d:32:e8:d6:a3:2b:a0:9d:e2:d4:72:5c:
         9b:98:34:2e:86:ec:03:d6:8b:da:14:0e:26:79:16:2b:f2:7a:
         cd:92:c4:75:37:d8:32:f0:81:70:97:cc:13:db:ba:68:bb:10:
         26:60:88:13:61:71:e6:75:7d:8a:49:14:df:70:52:91:c8:a4:
         cb:8f:ba:09:a2:3e:0c:c6:ab:9c:ca:36:65:7a:87:b2:ba:3c:
         76:6c:ab:c3:ec:8f:9b:9e:3e:b7:2d:8d:e2:8d:5a:fd:33:2a:
         c0:bc:d4:79:c0:4d:7a:cd:f0:53:c6:e5:90:20:14:aa:50:99:
         67:c0:86:39:bc:5f:66:db:ae:27:94:4c:6a:40:df:de:5f:9e:
         6a:14:c7:d5:34:a8:fb:71:b9:cf:6f:d0:13:25:6c:b9:a4:46:
         76:69:5c:4f:d1:8d:07:93:9f:d0:9a:48:c0:80:f9:30:20:d5:
         3e:88:2c:d8:5d:57:6a:6c:2b:35:c2:2f:e8:c8:aa:1a:fc:e6:
         d7:b4:af:74:23:ca:2c:73:90:db:10:d2:5c:7f:d6:37:58:67:
         74:71:a9:38:31:34:1d:8b:53:b1:63:4a:cb:5a:18:28:47:4c:
         67:e5:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:47 2025 by rpki-client on console.sobornost.net