Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa
File:                     3959543b-12b4-3a65-842b-987e2c3cb0e7.roa (raw, json)
Hash identifier:          9N8njqw97OwHEqNJlmteLOked4A1IMwm+U/O0nBQHUE=
Subject key identifier:   8D:2A:ED:4F:59:5C:0F:1A:F3:DA:18:E4:81:35:89:1D:23:64:21:DC
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858496FAF08EA842290048B42B9A0
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     20454
IP address blocks:        64.38.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:08:ea:84:22:90:04:8b:42:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=76b84aff-0472-4296-b330-a878026cd7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c1:b2:4f:ed:52:8e:0c:81:c8:31:77:e5:21:
                    59:76:9d:bd:b3:77:c3:d7:b9:49:15:e4:30:59:ec:
                    c6:e0:2a:a0:eb:a8:6d:2f:31:1b:8b:b3:1f:90:50:
                    bd:25:58:d9:57:68:8b:f2:86:01:5d:42:b3:5e:a4:
                    8a:62:1c:ca:41:cd:0e:3f:9a:78:f2:2d:01:fe:71:
                    33:89:f9:2f:f9:7a:30:98:8a:69:44:f0:16:f4:5e:
                    6b:28:4c:bc:42:d1:84:15:ff:9f:41:2e:75:9d:b9:
                    44:1a:6a:99:a0:6f:07:a7:59:4d:8e:81:4b:00:89:
                    24:aa:b0:58:92:21:f9:46:60:52:b3:be:01:de:8d:
                    06:de:c9:90:3d:5e:c1:73:a6:35:21:fe:16:7f:af:
                    f0:75:d7:ea:75:f4:7c:7f:1d:b6:89:91:3c:70:41:
                    cd:c5:2f:e1:c3:27:81:b0:ac:e0:5c:22:f5:d2:dc:
                    e9:60:2f:a0:4e:da:02:21:21:63:84:16:c0:72:8d:
                    9b:df:54:93:a2:2b:6f:d9:b5:ab:3d:71:f2:04:91:
                    ce:54:7b:09:be:b1:80:fd:58:fb:24:11:5f:7b:33:
                    83:b8:72:17:9e:99:b1:5b:4c:e4:f4:4e:f8:8f:92:
                    44:96:10:34:ec:73:7f:ca:be:f0:f5:94:d4:f8:02:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:ED:4F:59:5C:0F:1A:F3:DA:18:E4:81:35:89:1D:23:64:21:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:58:26:45:4f:39:ad:e5:93:4a:86:91:b1:a0:6d:50:5d:
         28:8f:3d:41:10:11:31:4e:bf:ce:61:68:4d:03:ea:96:f5:73:
         77:26:e3:c4:75:c6:71:73:5a:6e:23:23:b8:bd:0d:8b:c1:71:
         1d:64:c1:fa:4b:06:38:76:f6:06:84:26:12:16:8c:a0:69:0d:
         24:3b:2e:6d:97:c9:e7:8b:2f:10:72:ef:9d:8c:4a:c2:76:40:
         4a:99:14:73:92:1d:84:63:1d:93:1f:1a:9d:4e:dc:00:59:1c:
         74:54:dc:03:38:13:fa:38:42:33:d2:92:9a:94:a2:a1:f0:a6:
         e6:18:d3:4c:21:7d:de:e0:f3:e4:82:21:2b:d1:8d:44:11:0d:
         93:0f:0a:4c:79:83:7a:7a:df:de:9d:d1:53:36:e0:ab:71:25:
         e6:ba:e9:7f:a9:55:e7:6e:d3:9a:f1:3d:78:81:ff:60:50:5c:
         7b:2e:1b:7f:56:8a:c6:c9:9f:a1:c2:ac:45:3b:67:85:56:61:
         d2:fe:20:97:f8:c2:86:cb:97:6d:e4:e9:34:95:79:9d:47:4f:
         d8:12:63:90:0e:29:9f:04:9b:86:fe:03:b2:f0:26:06:45:2e:
         8f:1e:66:09:e3:7e:c2:1a:eb:14:02:a3:32:62:b4:d8:ff:d3:
         87:30:67:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:04 2025 by rpki-client on console.sobornost.net