Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa
File:                     dc98a4c9-b167-347d-b53a-d1d1192777fa.roa (raw, json)
Hash identifier:          NrP6VtHcpqQk1ml9zO+BkPKHAQgwOXboSVZLzV62ogk=
Subject key identifier:   FE:8E:EC:3A:DB:04:C9:42:86:E7:08:9E:C7:86:38:6C:2D:00:AE:DC
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0CA0FDCDB892CED1C000
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     203724
IP address blocks:        161.69.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0c:a0:fd:cd:b8:92:ce:d1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=d7ff142c-c855-460c-b0b8-92aeeaaf6412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:f9:c1:a5:19:04:94:ce:cf:99:7d:58:ff:
                    b7:ad:a8:6c:85:13:ac:e4:2f:cc:1b:0d:b5:87:5a:
                    13:cb:28:4b:cf:e0:2a:e4:2e:fc:61:80:e9:a9:80:
                    d8:c9:8e:77:07:21:74:d7:e6:60:35:94:71:03:8c:
                    20:4d:b2:02:d5:10:9e:d0:85:d7:c9:d2:1c:a1:36:
                    6e:e9:73:a9:f5:0e:ca:f1:6c:f1:0a:f3:df:bb:26:
                    dc:5f:05:7d:2e:e5:2e:bb:2f:ad:70:d3:61:9c:83:
                    1f:d0:d4:ae:d2:c3:4d:49:98:da:89:c0:bb:fc:77:
                    8e:f1:d4:c3:c3:db:c6:0f:30:f9:e3:73:39:ff:51:
                    b9:a3:ec:61:6f:37:98:af:21:22:dd:95:ec:ee:25:
                    8f:7e:7e:fe:41:5e:71:34:11:2f:e6:1d:1e:06:7e:
                    2f:3d:3b:57:6b:b2:8f:cf:b6:cd:c3:b5:11:d0:9a:
                    91:70:ff:3d:7d:04:13:c3:3c:59:2d:9f:3b:0f:63:
                    ee:30:ef:bd:2b:61:76:7a:49:4b:5e:e4:a9:65:17:
                    9d:c4:85:8d:de:80:4b:7e:bf:58:cd:30:81:14:8c:
                    54:c0:87:0c:db:29:98:33:2b:28:67:dc:54:f6:7e:
                    fd:9a:34:61:23:32:26:c2:50:14:02:91:97:b0:0e:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:EC:3A:DB:04:C9:42:86:E7:08:9E:C7:86:38:6C:2D:00:AE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/dc98a4c9-b167-347d-b53a-d1d1192777fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:90:66:56:bb:6c:02:d5:dc:7a:9c:3e:c7:eb:0d:aa:0a:
         8f:c9:22:f2:09:79:7c:26:46:34:84:32:5e:45:f8:9c:67:89:
         5c:7a:0b:1c:fe:11:d8:57:00:99:b5:7b:48:92:01:c2:7c:ca:
         4b:bb:07:5e:88:e8:f7:8b:4e:f1:e5:fa:4d:07:e9:5c:5d:e8:
         25:e5:8d:6a:9c:b4:91:be:08:2f:a6:41:bd:fb:58:b7:a8:83:
         6e:78:15:b7:fa:16:37:a6:1f:19:16:7d:6f:4d:79:1b:46:72:
         35:10:32:21:76:5f:df:6c:f8:31:b8:a9:b1:8e:fc:48:89:ef:
         3a:63:9a:af:24:e0:57:41:2c:ad:bf:18:34:80:a0:29:b0:21:
         f7:82:ea:3d:2a:5e:a1:17:4c:78:28:d6:c2:09:08:85:ef:33:
         cd:e8:96:2d:64:bc:f6:1f:44:5a:e6:3b:2d:b7:d4:a6:eb:c8:
         16:99:01:a0:dd:20:94:83:f2:0d:d1:36:2a:71:4a:79:cc:91:
         6d:a3:c6:12:38:eb:3d:28:ef:b8:3c:0b:a6:05:57:47:cc:e9:
         31:9d:ca:0f:12:dd:3d:eb:4c:63:05:4c:98:9f:81:f8:0a:46:
         68:90:a4:33:34:fb:18:49:fd:ee:cc:25:c2:69:a1:35:29:b1:
         aa:45:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net