Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa
File:                     77fa526f-7c17-3055-a646-b6cf40b10ecd.roa (raw, json)
Hash identifier:          aTeuMMOrhTYcp9IEYod0CpKokeemfocmP6TFTHRAAnw=
Subject key identifier:   3F:DA:FE:FE:82:44:4A:36:EB:6C:FA:0A:2A:51:22:6A:CF:2F:F5:BE
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0893F44AA6C3A3FD0980
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     203724
IP address blocks:        161.69.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:08:93:f4:4a:a6:c3:a3:fd:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=5d52bd8c-379d-4f1f-adc6-9452b02ba33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:c1:77:55:65:b5:2d:c6:38:5e:36:71:26:
                    bd:c7:3d:7e:37:f7:c7:3a:83:06:3e:3c:1b:96:6d:
                    55:8b:9c:6b:44:1a:4a:eb:39:5c:af:48:15:5a:c8:
                    cf:9e:5e:62:8f:ee:ad:24:d4:6a:f2:39:f7:71:07:
                    57:aa:c4:2a:8f:a4:a0:5f:c5:0a:e8:33:8e:77:56:
                    12:2b:7f:23:f1:9b:48:ea:60:c0:71:51:8d:d8:24:
                    ca:dd:f2:5b:bb:90:54:5d:f4:5e:33:9f:b4:05:ee:
                    64:7c:6e:e9:09:60:66:0b:24:02:d3:ca:61:80:af:
                    98:95:de:21:88:dd:10:89:7e:f6:7f:d7:6a:da:21:
                    30:db:4b:07:a5:aa:c7:0c:9b:7c:13:88:f6:e1:9a:
                    84:80:e4:d2:c2:61:da:61:88:1f:1b:03:2c:47:05:
                    62:6f:07:b8:ba:c6:8d:ff:15:19:8f:18:b4:cb:db:
                    49:92:03:2d:dd:04:a9:22:73:36:7a:b9:1a:3d:6e:
                    6b:56:8b:e7:8d:f5:e9:cb:eb:bc:68:2d:44:39:3f:
                    f4:d8:29:7c:72:b1:bd:6f:f4:e7:8c:84:c1:60:95:
                    cd:06:7b:0c:0c:81:44:d6:2b:d7:1b:fc:e1:0c:fc:
                    c0:9e:7d:2e:c3:71:09:e0:a4:b4:4c:2d:0c:21:a4:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DA:FE:FE:82:44:4A:36:EB:6C:FA:0A:2A:51:22:6A:CF:2F:F5:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/77fa526f-7c17-3055-a646-b6cf40b10ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:71:cd:98:5e:c5:9a:51:bd:eb:6d:17:14:a2:d8:19:23:1e:
         c6:55:4c:44:86:3f:cc:c0:91:df:80:91:68:14:f9:21:a1:f7:
         56:16:03:9a:34:de:f0:b1:53:d5:dc:17:f5:49:6f:75:3e:51:
         a8:56:0a:8e:54:02:0c:74:a9:ea:06:c4:23:fa:a5:16:bd:bc:
         3b:44:d4:62:c6:90:f8:8d:f9:9a:17:f2:34:24:40:a9:5b:c2:
         8f:a9:db:5a:e3:28:77:22:88:d5:20:b6:09:40:5b:5f:e9:94:
         1e:7b:3d:bb:a2:d8:8f:7e:59:00:f7:24:6c:e8:ba:cf:88:cb:
         85:59:cd:ba:20:a5:c1:1d:0e:db:94:ee:e2:e4:3e:82:b1:59:
         02:12:1d:92:1f:d1:49:0f:ab:c8:7f:6f:87:50:ae:03:8a:c2:
         a4:fc:b5:1b:3b:20:0f:40:40:87:8b:48:31:f0:b7:f5:ae:f9:
         a7:23:e5:f0:a6:19:4d:30:18:4e:47:43:17:bc:53:83:15:f5:
         1f:5e:24:c5:35:19:af:2c:29:59:83:bb:41:fd:dd:e6:7c:92:
         87:ca:28:93:80:c3:fe:62:3b:83:ce:5b:ad:19:1c:d0:a1:93:
         b7:24:fd:2a:b8:44:26:6d:27:a2:f0:99:29:69:87:a0:dd:17:
         07:32:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net