Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/27876a0c-a71d-3a39-9b1b-652ec18ff626.roa
File:                     27876a0c-a71d-3a39-9b1b-652ec18ff626.roa (raw, json)
Hash identifier:          tsx8vE4f6ffRpFKcDD/Om9vSGTQ5BZj7qaqpJcMuRB0=
Subject key identifier:   FA:6F:41:F0:BF:C5:9C:EE:E1:42:C1:8F:AD:70:BF:50:57:25:0C:50
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858497BC9DD8AEEA46D613167D480
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/27876a0c-a71d-3a39-9b1b-652ec18ff626.roa
Signing time:             Thu 10 Apr 2025 21:04:59 +0000
ROA not before:           Thu 10 Apr 2025 21:04:59 +0000
ROA not after:            Wed 09 Jul 2025 21:04:59 +0000
asID:                     14618
IP address blocks:        208.83.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7b:c9:dd:8a:ee:a4:6d:61:31:67:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Apr 10 21:04:59 2025 GMT
            Not After : Jul  9 21:04:59 2025 GMT
        Subject: CN=daa3aecc-6a73-48cc-b22f-9c031648d939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:7c:87:c3:9d:be:ea:49:b1:d2:88:21:03:
                    21:20:82:c8:46:eb:7b:86:8f:dc:da:e6:b6:85:f6:
                    7c:0a:e4:a3:e6:db:f9:ee:12:fb:1f:87:e3:60:2f:
                    95:70:ea:99:3a:03:0e:ed:36:de:05:30:65:47:06:
                    bb:e5:56:8d:35:3b:80:41:41:ff:72:69:84:cf:11:
                    ef:c8:f2:60:9d:e0:d7:04:39:e2:78:2f:e4:20:13:
                    6a:3d:c8:bb:d5:b8:7e:4f:b5:47:34:7f:b2:17:c3:
                    f2:10:f0:4d:a6:63:00:3a:2f:2d:a5:35:2a:e6:25:
                    45:ab:d7:4a:aa:66:74:76:c7:11:7d:2a:26:17:91:
                    dd:4c:cf:e4:45:b8:a9:f6:9c:de:83:cb:05:bc:83:
                    42:f0:83:84:98:e7:6d:08:4c:0e:f7:1e:0e:c2:e9:
                    95:ca:34:2d:f5:57:e2:0d:86:d3:74:41:33:3c:cf:
                    76:fa:7a:ec:95:a6:a4:19:a9:c0:1c:2d:c4:02:06:
                    2b:00:f8:10:a2:1f:93:41:d9:34:83:a2:d6:6c:99:
                    cc:64:a2:1a:70:c7:31:e8:43:02:9c:3d:93:f2:34:
                    0f:07:b9:25:19:ed:95:16:ea:4e:71:58:dd:e4:e8:
                    75:f1:50:1d:13:7f:33:bf:39:30:d1:83:43:b3:f1:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:41:F0:BF:C5:9C:EE:E1:42:C1:8F:AD:70:BF:50:57:25:0C:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/27876a0c-a71d-3a39-9b1b-652ec18ff626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6f:fa:3b:ff:de:25:86:ec:99:55:50:72:cf:72:9c:2f:9d:
         d7:dd:67:7b:4b:c3:b7:34:af:5f:a3:49:46:2b:45:8a:48:92:
         23:90:98:67:19:9e:21:0e:54:c2:2f:23:09:5f:2c:4b:2c:ec:
         e2:9e:63:33:aa:d4:3b:0c:a5:a8:dd:7a:98:2e:12:54:6f:35:
         1d:60:e4:41:60:6d:36:25:f5:ce:1b:f9:86:92:1f:e7:74:62:
         7a:9f:d2:45:d3:65:be:ed:c2:1b:7d:63:ce:3e:0b:f3:07:8f:
         88:fe:e2:7c:9f:02:78:b7:2f:24:58:bf:4d:6c:a4:ba:74:e6:
         80:35:b8:30:e1:a0:8b:c3:cd:77:37:3e:ec:65:cf:a0:ee:18:
         86:3f:5d:1a:4f:c8:3d:f7:8e:b1:0f:bb:77:a3:e4:df:ab:42:
         ba:28:2c:d8:fc:79:40:4e:99:ec:bd:c8:43:f7:bc:1f:92:31:
         0a:63:60:b7:ba:44:5a:c1:41:27:37:b3:ef:0c:30:4a:c7:a1:
         a3:e1:88:b0:f1:0b:7b:67:d4:69:10:09:ea:99:0e:6e:4a:e0:
         fd:b5:54:25:af:9d:a9:26:7a:5a:c9:c3:18:5e:5c:f5:28:2e:
         d5:4f:a6:ba:5e:1e:b0:88:f1:61:13:e7:51:d9:8a:4c:fb:f9:
         a0:d9:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net