Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa
File:                     8dd54771-641c-3441-b738-5439e82997ca.roa (raw, json)
Hash identifier:          cjAzbbymIilfvhTfZfr9zsMAlK2+8Olbw2FAqYY3xj8=
Subject key identifier:   94:80:C6:A6:C3:E9:96:41:2C:C2:05:3D:47:6F:B2:FF:C1:F9:AF:83
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F088324D7644E4361FB80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     203724
IP address blocks:        161.69.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:08:83:24:d7:64:4e:43:61:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=45de3247-d27b-44a1-a46a-70f89d9657eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:0c:3f:02:cb:b5:a3:44:5d:b8:6a:00:1e:
                    49:7f:56:4b:03:6c:73:8f:7c:37:e0:cf:7e:0e:6d:
                    06:23:b0:68:b3:90:a2:7a:54:c5:6c:77:29:53:dd:
                    4b:3e:61:0e:bb:70:6a:3d:b1:53:0e:14:0e:8f:29:
                    0f:0c:af:ff:f8:ce:02:8d:fa:ca:bb:8a:34:81:24:
                    f0:e7:a0:05:f6:8c:8f:aa:43:6c:16:d7:c2:06:8a:
                    64:b4:c4:5a:b1:4b:22:03:c8:89:94:22:fb:10:03:
                    ff:33:d1:70:9e:79:64:9b:77:6a:4e:39:03:e1:95:
                    a1:24:e6:80:ba:42:90:4b:0c:1c:44:84:8a:ab:da:
                    40:70:fd:95:e3:a6:6c:e8:af:09:27:99:10:86:d0:
                    ed:f8:bb:1e:ed:3d:60:f1:f0:41:fe:83:eb:ac:10:
                    e2:f6:f9:fb:83:7d:a2:6a:98:b4:50:04:15:1e:c5:
                    0a:01:90:e2:da:f4:31:01:98:d2:d8:9f:71:de:05:
                    14:c8:a4:cb:93:70:e5:34:dd:92:fd:3f:88:7a:d3:
                    4a:61:81:93:48:76:fd:cb:9d:a5:07:6a:bc:03:5e:
                    68:d0:e4:42:7c:ef:91:eb:69:79:4e:c4:86:7b:1b:
                    21:10:a9:96:12:0b:57:5b:4c:04:f4:29:d7:01:9f:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:80:C6:A6:C3:E9:96:41:2C:C2:05:3D:47:6F:B2:FF:C1:F9:AF:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8dd54771-641c-3441-b738-5439e82997ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:64:78:4d:14:14:94:14:c4:2d:f9:0e:00:21:12:b4:03:99:
         c5:d5:e5:04:10:6d:c6:f5:66:cb:58:3b:6f:bb:c2:90:d0:7b:
         d8:3d:14:bc:f7:f3:38:90:37:8b:80:4d:21:d4:fb:ec:49:19:
         88:26:d0:84:f3:ed:e5:d3:94:d6:ef:78:5a:17:46:fd:d1:fd:
         35:17:d1:cf:63:88:4c:3d:35:cc:65:e3:a5:bd:a4:b6:94:a8:
         88:a6:42:ce:1b:10:63:23:4f:77:d8:b0:d3:21:7a:98:4f:04:
         b9:4d:89:4c:da:ea:f0:c8:1c:77:a6:6c:11:ba:fd:29:1d:d1:
         6a:e3:3d:6d:2c:0c:e3:90:1c:88:67:d6:5f:df:3e:43:5b:7f:
         52:7e:28:1b:10:00:26:a1:2e:79:e7:06:dc:f5:54:50:2a:9c:
         21:e7:02:66:9f:b4:43:75:b7:86:e3:e9:5f:16:d3:5c:ac:d9:
         ac:22:03:71:a9:3d:18:b8:35:cd:cf:83:bc:66:36:c7:a9:fa:
         b7:b6:6a:97:06:b6:4c:8d:de:ca:c6:fb:20:99:df:73:56:0a:
         fe:78:9b:93:1e:60:ac:f6:41:18:56:e9:dc:33:9c:a1:0b:5e:
         9a:a2:99:08:03:d5:71:50:68:83:82:47:56:c1:9e:ee:d4:8a:
         11:a7:17:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net