Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa
File:                     791354d3-b69a-3f80-9895-25a56bac7468.roa (raw, json)
Hash identifier:          BW08fwp9bHVB+U59GzqzibmTvD4DFguiuVNQV4tGMJc=
Subject key identifier:   7E:8E:DB:9A:B0:5D:58:D9:F6:8C:3E:F6:9B:EF:F6:EC:B6:B6:D8:CB
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F432858494E2EB2584773F88A0850A1A0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     399091
IP address blocks:        162.218.8.0/22 maxlen: 22
                          198.22.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b2:58:47:73:f8:8a:08:50:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=4df982da-3c49-4159-b5f5-78aa7be4959f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:88:ac:7f:cd:0a:ce:7e:b5:44:b4:80:63:
                    4f:95:43:1f:f0:d1:f5:83:a7:25:e4:8c:87:02:0f:
                    09:4c:3f:b8:16:7b:b2:28:04:e8:50:d2:11:50:a6:
                    4b:26:c1:ee:e9:7e:62:59:3b:29:e2:d0:d3:3f:d9:
                    0d:51:17:51:51:ef:6b:a2:3c:4b:bd:38:da:52:8f:
                    9c:ba:da:b5:b5:a1:38:f3:35:29:70:17:b5:fa:06:
                    13:1e:49:14:9f:ca:e6:b8:3c:21:99:ef:84:4f:f4:
                    64:9d:69:f0:1f:df:04:0e:6a:d1:0c:36:44:e3:d4:
                    44:d1:0e:b3:09:66:ef:66:d6:b8:90:36:cb:d3:fd:
                    7e:b7:43:0e:2f:5d:2e:36:07:5b:ae:4f:ca:d2:29:
                    38:35:b0:da:9d:2f:14:c8:47:e5:d3:9c:a9:21:b3:
                    30:b8:16:cb:27:e9:df:9b:6a:8f:63:00:f6:c1:5b:
                    5e:24:d1:a9:55:84:29:2e:53:5f:2f:8e:e7:3f:f1:
                    a5:9c:c0:26:cc:bd:66:eb:2a:77:3d:2d:4b:32:9f:
                    f2:8d:4a:45:3c:50:62:4d:a0:c4:12:ea:52:d5:72:
                    59:c4:22:d1:38:5f:19:c5:12:11:37:a2:63:96:9d:
                    c5:f8:23:3c:e1:32:12:fb:ca:03:cc:db:7b:06:a8:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:DB:9A:B0:5D:58:D9:F6:8C:3E:F6:9B:EF:F6:EC:B6:B6:D8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/791354d3-b69a-3f80-9895-25a56bac7468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.8.0/22
                  198.22.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b6:48:5b:7b:ba:f1:a7:54:49:15:d6:b8:ac:71:94:20:8e:
         ad:b4:af:6e:e0:ae:0a:45:d0:09:0d:a6:eb:63:48:c4:8a:46:
         c3:29:6a:ba:39:fb:7b:26:f2:3c:d2:c4:2e:05:2e:24:dd:cf:
         85:0d:ce:29:ff:f3:65:98:7c:c8:a7:bd:e3:25:4b:1b:d0:18:
         c1:95:6b:d1:b2:a0:1a:02:d1:92:66:9f:e3:6c:1b:95:6b:f0:
         97:d0:a7:94:8a:53:cd:65:85:58:24:27:00:79:b5:54:bb:9b:
         f3:48:de:58:4d:fa:71:51:10:f5:9e:cf:21:1b:a0:9d:eb:c1:
         6e:58:86:23:18:90:37:82:46:79:a3:d4:13:57:98:dc:7f:0a:
         85:c7:49:87:7e:79:fe:d9:cc:75:75:c4:50:e6:d3:c7:08:21:
         62:8c:8a:aa:8e:ae:3f:53:ea:ba:e1:46:b3:db:0d:ae:6a:55:
         61:0e:b0:53:ba:cd:bd:45:82:1a:99:c4:3d:a3:11:52:dd:bd:
         ec:1b:4d:56:3d:c0:42:2e:4c:5e:ab:f5:65:eb:9f:1e:28:e5:
         9a:e5:5d:76:dd:b5:dc:b8:26:c8:32:e8:7c:04:e2:ec:aa:43:
         d3:aa:ab:3f:47:84:e9:0f:9c:e0:63:1a:ff:5e:aa:14:41:72:
         bb:05:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:58 2025 by rpki-client on console.sobornost.net