Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa
File:                     10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa (raw, json)
Hash identifier:          pxgvp0uDY8lOfwSn46SoO+HdwqkxGInxkKyoRngNYTw=
Subject key identifier:   B4:9C:14:B5:8C:E0:A2:4C:DE:B1:40:5A:26:AE:0D:9F:0D:45:1D:3A
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F079D4A0553337A3A4500
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     203724
IP address blocks:        161.69.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:07:9d:4a:05:53:33:7a:3a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=8a7f775b-85c8-44fb-848d-39c78c4068b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:4f:2e:35:fb:0c:cc:45:e4:d1:d1:3a:f8:
                    51:78:4f:dc:7e:3e:f2:7f:39:0f:36:e4:67:b0:ef:
                    8d:ca:22:2c:c0:49:ba:3a:7d:61:4a:1d:22:e9:88:
                    ff:a0:cf:b5:e4:ac:a0:58:38:cb:ca:89:6a:ef:74:
                    36:ca:35:60:33:d1:f8:53:2e:9a:51:1b:54:74:b8:
                    f2:7e:6a:5b:78:1f:f3:38:26:07:68:df:37:67:5b:
                    57:ec:aa:d8:18:98:06:6b:43:de:9f:99:ad:35:7d:
                    ed:53:17:2e:95:67:ff:0c:b9:fb:f9:df:b2:c0:a3:
                    70:15:c2:6a:7a:c2:2c:f8:c9:20:52:85:70:01:28:
                    3c:78:68:e6:22:1e:82:db:fc:1f:c3:9e:a7:58:7e:
                    d3:db:b6:d9:4a:e0:d7:71:2e:f5:29:2b:d3:0a:6c:
                    dc:ab:27:2a:5e:2a:54:7e:a1:09:3b:45:15:84:03:
                    db:7b:00:83:cc:a5:20:40:09:ff:21:d2:dd:57:4e:
                    34:f3:4c:25:3b:b9:ae:be:a7:7a:fc:22:c3:a7:28:
                    64:24:30:19:75:ca:30:b0:30:6d:4b:81:9a:fc:c3:
                    91:e5:fb:f6:b8:73:a1:10:07:8e:f3:0e:e4:8e:0b:
                    50:7e:f4:19:cc:eb:50:74:ce:ed:45:e4:0e:f8:d4:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9C:14:B5:8C:E0:A2:4C:DE:B1:40:5A:26:AE:0D:9F:0D:45:1D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/10dd6aa4-88a8-3a52-ad0c-1d8ebf0dc1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:fc:af:4e:75:ed:09:7f:af:43:c4:4c:83:ff:78:9e:18:
         d9:91:e3:64:f2:f5:43:32:f9:dc:de:b3:29:46:e4:54:70:ae:
         3b:fc:6a:e5:59:53:45:76:0d:95:71:1d:2b:8d:a0:70:54:85:
         45:9f:ed:36:ad:24:5f:de:73:e1:8a:ff:0c:9b:3f:19:2c:20:
         b8:48:6a:9d:5a:82:73:43:d7:34:87:a7:15:32:88:4e:77:c5:
         af:d5:2b:83:cb:5e:c7:35:8f:12:be:76:f2:b7:96:cb:1a:e3:
         3a:31:80:7f:4f:88:b3:23:d6:47:a0:4c:8a:61:ca:01:25:06:
         7c:68:7c:bd:fa:fc:65:58:f5:d7:6f:ca:ff:28:67:ea:1d:27:
         18:e6:57:b4:e4:9d:b2:55:fa:18:6f:26:8c:80:f4:31:6e:d8:
         70:d8:14:d0:9f:79:f8:13:b3:0f:b7:b5:25:fc:03:6f:6a:a0:
         f5:62:2d:4b:c2:70:e2:15:9f:90:dd:36:72:a2:b1:b2:a0:3d:
         da:b0:3f:80:d9:ca:d9:fd:ba:0f:0a:3d:bb:e3:09:99:a4:94:
         7e:39:40:1c:0c:5a:27:43:b7:e4:11:59:80:f6:38:b2:c0:d2:
         55:d4:54:ed:59:a5:e8:d9:49:b6:6b:62:35:b0:6b:97:ed:cc:
         77:fe:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net