Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa
File:                     ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa (raw, json)
Hash identifier:          VXdIa5Rl5Lybp4o1McaynlTEwoiknfSUD4uB9qzf/g4=
Subject key identifier:   F7:CC:FC:F1:7E:C0:14:06:ED:36:38:F4:98:02:CB:9D:84:7A:D3:21
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858494039429FC9BAF0F848A4B200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        168.87.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:42:9f:c9:ba:f0:f8:48:a4:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=a2d57581-589b-4224-b18a-4f58a495d2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:9a:8f:07:79:62:f2:7e:c7:90:00:8b:f3:
                    ef:da:56:4e:e0:8c:41:f2:91:a7:45:3e:ac:8d:0d:
                    58:f5:88:c3:c9:4e:a4:49:28:25:cf:6a:bd:dd:d5:
                    e5:d2:6a:f1:05:6d:7a:5e:8e:5c:65:e8:f8:c5:68:
                    c4:f8:18:d0:b2:3d:0e:51:ed:8c:d7:9c:5a:65:18:
                    01:35:7b:bf:5c:d1:42:f9:e6:91:54:b9:6b:62:42:
                    69:4c:2b:aa:fb:1b:bc:fe:e0:f8:4f:cc:f9:19:15:
                    a5:fe:a3:b8:7f:fd:b3:1c:0d:5a:1e:d1:cb:8f:e0:
                    be:d6:7e:65:22:67:6b:35:9f:cd:1a:44:0e:5b:77:
                    be:6a:f5:47:d8:b3:b9:75:82:1b:11:71:60:b9:3e:
                    f1:a5:b8:24:47:3c:1f:71:df:52:d5:b1:b4:e0:ff:
                    cf:30:d6:96:61:aa:c5:b1:7a:e8:cc:0c:ac:3f:d8:
                    43:2d:53:cb:08:ba:08:ec:7a:2f:db:5c:38:45:ab:
                    a2:1b:6c:e9:0c:42:9d:7c:ea:c2:26:a2:71:83:9a:
                    2e:b8:a6:34:60:61:00:ed:3a:d9:7e:4e:92:30:eb:
                    ad:2c:f5:8b:e6:90:05:cd:7b:fa:7d:01:5e:de:81:
                    00:1b:e8:68:8d:e6:0f:e0:64:c1:bf:a1:b9:55:1f:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:FC:F1:7E:C0:14:06:ED:36:38:F4:98:02:CB:9D:84:7A:D3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ec92c3f6-4237-3be3-841a-2ea34dae9af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.87.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d5:d4:bf:94:e7:27:73:7a:18:f0:27:70:17:e0:76:a6:7a:
         da:21:d5:cb:37:6a:84:17:b9:37:29:9f:78:e4:f5:54:bf:c4:
         e5:cc:96:14:18:4a:2c:c1:12:7c:43:a0:c7:18:fb:64:45:c4:
         07:4d:75:e9:f4:b6:b9:6a:2b:2d:91:da:bf:10:81:18:9f:82:
         f0:f0:ba:d8:1c:5d:7f:33:86:2b:6c:4a:ec:56:4b:c3:83:cd:
         ea:11:2c:bc:2c:bd:a6:59:3a:7c:d3:5f:7a:b6:62:f7:ad:72:
         f3:27:3b:9f:b1:d1:c4:6a:c9:17:ac:2a:eb:b1:42:44:53:cb:
         3e:af:bb:0d:0a:6f:26:14:46:5d:8e:eb:e0:06:ef:73:5c:7f:
         75:5a:04:65:b5:eb:1a:c9:5a:80:32:9a:79:47:a2:73:3d:72:
         e3:2a:7a:2e:a6:8c:b8:6d:a1:20:dc:aa:68:09:e6:07:3b:18:
         1a:d1:93:17:20:ce:f1:02:cf:33:5d:68:01:69:40:a2:7e:6c:
         14:d8:91:52:78:fd:97:b7:4e:e5:68:53:24:a9:0f:26:b7:d0:
         f0:3b:df:c1:a7:56:13:4f:e8:2d:1e:fe:4c:16:8d:4c:fd:eb:
         95:c7:b8:79:cb:2a:18:d3:29:d8:8a:ef:9f:9e:50:e4:87:54:
         c0:86:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net