Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa
File:                     e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa (raw, json)
Hash identifier:          R6ni7E6K/VcgO/aYMlUfGixdOKqztPnk3E/Fbqk05Ns=
Subject key identifier:   BE:61:73:DE:CD:0E:A0:5F:43:42:60:8B:F0:01:A0:EE:C3:65:12:FE
Certificate issuer:       /CN=9bd0a861-f835-4585-9517-e1dba949c123
Certificate serial:       010D0C9F4328584966DF224849F101878951C820
Authority key identifier: E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa
Signing time:             Thu 03 Apr 2025 09:15:52 +0000
ROA not before:           Thu 03 Apr 2025 09:15:52 +0000
ROA not after:            Wed 02 Jul 2025 09:15:52 +0000
asID:                     210110
IP address blocks:        74.118.192.0/22 maxlen: 24
                          104.193.8.0/22 maxlen: 24
                          104.245.96.0/21 maxlen: 24
                          104.255.64.0/21 maxlen: 24
                          142.0.32.0/20 maxlen: 24
                          162.213.24.0/21 maxlen: 24
                          162.248.72.0/21 maxlen: 24
                          204.124.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:66:df:22:48:49:f1:01:87:89:51:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0a861-f835-4585-9517-e1dba949c123
        Validity
            Not Before: Apr  3 09:15:52 2025 GMT
            Not After : Jul  2 09:15:52 2025 GMT
        Subject: CN=a84979a3-172d-4987-abfd-3b260fefcea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:4a:b3:45:6d:cb:78:87:94:b7:06:98:b8:
                    92:df:ee:6e:b3:6b:5e:51:3f:7e:6e:01:78:2a:d8:
                    22:56:c7:cb:9b:3f:27:f8:d7:c7:de:ba:9e:70:f5:
                    ff:c2:48:35:d5:6f:64:ac:65:d4:1c:74:18:9a:3f:
                    a3:68:7d:34:6b:d0:f6:ff:0f:79:0f:e4:87:c6:64:
                    75:3c:ae:4c:10:4b:9c:8e:d5:49:14:cf:f9:bf:99:
                    c5:a7:db:9a:dc:01:df:7e:74:01:c7:d2:1b:ce:f5:
                    08:83:79:b6:b4:4a:ee:d7:30:47:c5:fb:eb:05:8c:
                    29:fb:8a:95:a0:81:4d:e9:14:14:58:09:81:5c:e3:
                    6e:11:36:47:7b:c2:bf:f5:e5:bc:5f:2c:c9:79:8d:
                    46:cc:fc:40:3a:75:e8:a8:2e:96:19:a5:59:fb:4e:
                    bf:79:3a:b1:fa:e4:2f:49:67:10:c6:56:77:3e:f8:
                    e7:dc:30:d8:3f:03:d7:3d:3b:6a:ad:6f:6f:89:2d:
                    70:8b:b6:46:a6:18:1b:c8:6b:56:66:4f:12:d8:5e:
                    25:ec:97:f5:a0:b7:ef:77:94:62:ed:91:24:cb:b9:
                    14:aa:b9:d6:2e:45:1d:b5:9e:2e:93:07:86:c0:cc:
                    43:5c:a1:96:cf:77:fe:0c:fb:5e:23:a3:8d:c8:4d:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:73:DE:CD:0E:A0:5F:43:42:60:8B:F0:01:A0:EE:C3:65:12:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/e059b6f4-fe4e-3d54-80af-7a74c0f90ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123/9bd0a861-f835-4585-9517-e1dba949c123.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B7:17:00:70:3A:04:35:C4:63:7B:BF:A9:47:91:2A:F1:41:BC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9bd0a861-f835-4585-9517-e1dba949c123.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.192.0/22
                  104.193.8.0/22
                  104.245.96.0/21
                  104.255.64.0/21
                  142.0.32.0/20
                  162.213.24.0/21
                  162.248.72.0/21
                  204.124.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:e7:64:94:96:46:7c:ea:fa:99:7e:05:aa:30:aa:db:a2:
         9b:0b:ef:99:40:8b:83:fe:b4:58:8a:b0:15:98:cb:b2:b5:b0:
         3b:1c:3e:de:e8:7a:a2:24:12:33:b5:6b:d4:34:c5:bf:d5:1b:
         ef:fd:52:13:9f:47:26:88:ba:47:95:59:52:a5:93:40:d9:7b:
         ab:ce:d2:8b:05:52:18:f7:30:d8:12:2a:26:0c:35:ff:b5:cb:
         49:23:5d:fd:ef:e3:70:9f:b7:5a:cd:d8:9f:6a:82:f5:c1:19:
         c4:d0:25:4f:6b:7e:80:59:8c:47:04:99:97:71:fb:38:b9:1c:
         c8:6a:6c:99:ce:f9:85:7e:b5:22:99:e5:f7:9a:2d:ac:74:df:
         9a:0b:6e:9a:f0:ea:44:cc:84:8d:61:75:e0:db:e5:03:98:18:
         8e:9e:2e:50:33:d6:a4:02:e3:16:80:5d:e7:f2:9f:55:0c:19:
         d7:17:e8:fa:cd:58:be:f6:c0:51:41:af:bd:a5:cb:67:79:b7:
         9f:d6:cc:b2:9d:89:81:89:e9:77:d3:cb:bc:db:ec:f3:51:4b:
         db:36:ae:66:70:01:f9:a0:56:50:41:b9:f6:8d:76:dc:e6:ba:
         74:95:f1:3d:ad:54:b1:8e:59:eb:05:14:95:21:ba:11:b3:74:
         ec:50:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net