Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/7c18ac32-1191-3d3f-9c20-42e4f9d803da.roa
File:                     7c18ac32-1191-3d3f-9c20-42e4f9d803da.roa (raw, json)
Hash identifier:          EfPHNsFpGwvx2+1HrwqC/4SmYkHS7NkB4Tv0f4hhBEc=
Subject key identifier:   AF:1C:00:FE:E2:B5:55:43:6A:C7:79:5A:6B:6C:F1:66:F6:F0:30:3E
Certificate issuer:       /CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b
Certificate serial:       010D0C9F43285849679487FCB89FE0B56D57DC00
Authority key identifier: 57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/7c18ac32-1191-3d3f-9c20-42e4f9d803da.roa
Signing time:             Thu 03 Apr 2025 15:21:21 +0000
ROA not before:           Thu 03 Apr 2025 15:21:21 +0000
ROA not after:            Wed 02 Jul 2025 15:21:21 +0000
asID:                     14618
IP address blocks:        67.63.51.0/24 maxlen: 24
                          67.63.52.0/24 maxlen: 24
                          67.63.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:94:87:fc:b8:9f:e0:b5:6d:57:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b
        Validity
            Not Before: Apr  3 15:21:21 2025 GMT
            Not After : Jul  2 15:21:21 2025 GMT
        Subject: CN=a1cf2db0-5672-4b36-9f89-f8f2de32af50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:8e:79:46:3e:29:81:d7:e3:2b:ea:24:a8:
                    b5:19:10:b7:33:e8:46:8c:4e:97:ff:2a:c3:ff:f9:
                    7d:21:48:c9:6e:f0:c5:2d:4f:68:9c:74:29:a6:37:
                    8e:49:8a:79:95:72:24:f3:c9:23:aa:0d:d1:12:5e:
                    5c:4d:cf:a7:39:04:8e:28:a0:05:f2:c4:4f:6f:0b:
                    e8:4c:4d:cf:4e:8c:c7:a5:32:9b:39:b5:c0:ac:3c:
                    a7:89:52:53:36:53:56:6b:f2:a5:7f:1b:97:c0:77:
                    76:c6:de:ae:da:67:a1:a1:5b:15:67:b4:12:85:6e:
                    87:01:cf:57:ba:78:cc:de:8b:95:87:90:3d:b8:d5:
                    45:df:6a:3e:99:72:7b:6e:2f:eb:50:da:cc:14:34:
                    bd:db:af:46:3b:11:c9:35:a6:5d:77:9e:06:3d:ca:
                    cb:23:e7:79:f5:27:3c:16:12:f7:51:cb:90:88:e4:
                    ea:8d:c4:c6:d9:70:a4:60:41:da:03:7b:ac:84:5c:
                    bc:3a:a8:c4:6b:c8:95:e4:a1:52:4b:77:eb:c4:a8:
                    35:e4:19:82:12:b9:1a:9f:c1:49:e8:b7:82:06:14:
                    41:4c:b3:c9:40:92:c0:65:dd:90:c7:29:27:bf:d4:
                    e3:81:62:dc:90:52:91:c8:ca:cf:79:98:fd:ec:ba:
                    b3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:00:FE:E2:B5:55:43:6A:C7:79:5A:6B:6C:F1:66:F6:F0:30:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/7c18ac32-1191-3d3f-9c20-42e4f9d803da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.crl

            X509v3 Authority Key Identifier:
                keyid:57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.63.51.0-67.63.53.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:85:5d:fa:b9:7f:03:3d:0e:c8:14:83:ea:89:17:36:27:06:
         21:f6:e1:14:fa:f7:04:de:54:9b:4d:67:34:54:1c:ca:a5:b8:
         02:b5:bc:b7:61:77:dc:09:5a:4a:bf:5f:9c:ff:04:a7:b3:ee:
         b1:d0:49:b6:7c:4a:18:7c:db:89:b7:84:9b:e7:b1:10:91:a4:
         f8:0c:2e:a1:69:76:7d:e3:d8:69:a1:0e:0f:19:70:43:93:d8:
         f6:62:d2:bd:52:de:29:08:92:b4:cd:4f:45:ae:d3:3f:55:d3:
         07:32:20:08:f4:59:78:c7:ce:7e:a5:57:09:0b:e3:ca:f9:2e:
         79:45:d7:bb:13:b9:04:97:d6:4c:d2:2c:0a:8b:cc:34:2f:40:
         e5:af:97:a2:1e:18:c7:d1:ba:34:21:80:b6:5e:bc:96:79:3e:
         46:ec:65:95:00:2a:fe:d4:9f:4f:36:48:91:b2:24:86:db:f4:
         45:74:a1:91:1d:84:7c:f0:20:e2:3c:3f:a8:29:44:ba:b0:b7:
         f6:14:b4:1d:c2:ed:68:f4:18:d2:a2:33:73:fc:1d:2c:56:ce:
         50:5d:a5:1d:92:fd:07:a5:86:11:80:81:be:80:b9:05:d7:4e:
         8c:29:c5:4e:c0:03:cd:40:c5:91:9c:5c:1e:b4:58:2e:51:17:
         44:0d:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net