Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa
File:                     85df388a-c8da-3e19-af2a-f326a918b3bb.roa (raw, json)
Hash identifier:          huvVFn+uhRymAtukJOYLIg/TNIlU2TXAi/3vHdT7kPk=
Subject key identifier:   8E:DF:EF:C9:24:D7:D6:49:F3:06:BF:6B:17:8D:EF:8A:3F:3D:F1:DE
Certificate issuer:       /CN=59c9f46b-742f-4b2d-929b-267fefccc50a
Certificate serial:       010D0C9F4328584973DEDB025EB9B5E089270760
Authority key identifier: 31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     6079
IP address blocks:        208.74.168.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:db:02:5e:b9:b5:e0:89:27:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c9f46b-742f-4b2d-929b-267fefccc50a
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=20c9bc9c-12ba-4876-80f3-8bff03138c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:25:e2:87:06:83:0f:2e:c6:12:07:ab:a6:
                    5b:4d:de:84:af:7f:70:12:19:44:40:6a:9a:5a:b4:
                    72:84:6a:1b:1e:8f:0d:ae:fb:72:7b:72:f6:30:05:
                    0c:9e:e2:c6:ec:49:94:fd:4e:5d:a0:e4:5b:55:41:
                    5a:fa:ac:b6:95:5f:8f:66:06:59:eb:55:d3:a4:31:
                    32:38:2b:7a:ea:98:9c:ae:1f:24:3a:88:cb:7f:5f:
                    93:43:1d:1b:78:67:af:48:6c:dc:19:c8:57:19:de:
                    73:93:37:39:3d:bc:ee:79:b2:e4:11:aa:f5:82:aa:
                    03:03:b3:ae:9c:d6:8c:23:f8:b9:40:fe:62:e2:38:
                    10:3f:5a:f9:16:1c:71:ff:31:13:48:72:b5:f7:89:
                    51:41:b4:d1:27:fa:00:45:18:c0:e4:24:c7:ee:29:
                    c5:25:43:48:7e:75:dd:2e:62:5a:84:af:70:5c:d5:
                    f1:7c:6d:bc:2d:55:ff:d2:e3:27:94:c3:4d:92:08:
                    44:7b:bf:7f:34:3d:63:35:28:c5:61:58:b8:86:1c:
                    76:f2:75:33:6b:20:80:9f:fe:ec:26:46:82:30:6d:
                    68:86:71:94:1f:39:ba:86:8d:33:9f:ce:64:e5:ed:
                    ef:2d:a6:a5:7b:e8:14:4d:3e:03:91:21:81:c6:76:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:EF:C9:24:D7:D6:49:F3:06:BF:6B:17:8D:EF:8A:3F:3D:F1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/85df388a-c8da-3e19-af2a-f326a918b3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a/59c9f46b-742f-4b2d-929b-267fefccc50a.crl

            X509v3 Authority Key Identifier:
                keyid:31:94:CB:06:4F:A4:B6:3C:A6:4A:48:CC:A8:86:01:92:A7:0E:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59c9f46b-742f-4b2d-929b-267fefccc50a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:29:be:a6:90:2f:21:9b:33:90:81:7e:00:c7:5d:cd:fa:23:
         de:a9:95:33:62:39:be:4a:42:c3:08:1a:be:e8:a2:fb:0d:c7:
         2e:ec:b3:dc:6b:b1:ae:64:7b:0e:77:69:b2:c5:fd:ff:18:6d:
         cb:09:b0:07:ef:01:f6:a2:a0:a7:4a:64:76:15:e5:99:74:01:
         5e:67:9b:a1:6e:85:49:0e:76:b1:19:f9:43:a9:c7:5f:9d:1d:
         38:22:07:1d:fb:41:f8:4d:36:f3:73:a7:e9:ad:50:50:74:8c:
         ab:c4:1f:36:37:be:18:aa:fd:a4:ef:3f:5c:1e:e0:13:69:a2:
         09:2c:ba:ee:a1:e4:c7:ac:20:b3:fb:92:8d:5a:d2:f2:b0:c4:
         93:72:4a:d9:8a:aa:77:8d:b9:d0:fb:4a:c1:6d:fb:48:99:7d:
         7d:65:d7:e6:dd:ba:fd:30:df:27:75:17:be:ef:a5:82:ef:c1:
         32:65:1c:1b:49:3c:34:6d:39:7a:1c:e6:97:ab:5a:94:99:04:
         90:9e:d5:bb:c6:bc:da:b5:dd:af:c5:22:f8:5e:b1:78:82:42:
         a9:d5:37:ac:68:a8:a1:a6:60:5a:90:46:8f:53:f0:61:1d:33:
         23:90:ba:14:b0:38:63:52:57:19:e0:b4:53:81:8b:9d:56:7b:
         47:04:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:53 2025 by rpki-client on console.sobornost.net