Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa
File:                     8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa (raw, json)
Hash identifier:          Pl/5/z/zBK9g42ONH2qonC/Gdqn77TPZLHDlvyLbqLI=
Subject key identifier:   36:83:35:CD:7E:F2:00:48:C3:9D:8A:A6:AB:72:D4:7F:BE:9E:BE:3E
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F432858494733DE4C2068637F52E69E00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     1239
IP address blocks:        104.218.195.0/24 maxlen: 24
                          104.251.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:de:4c:20:68:63:7f:52:e6:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=fca63349-b2a3-4c0e-9bd4-be3b56180d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:97:c5:7f:0e:7e:66:20:c8:89:33:5a:20:fc:
                    63:22:12:5e:bc:ec:92:f0:8d:0a:e5:94:81:46:96:
                    b3:98:c4:c4:f6:e5:67:04:57:20:13:a1:cf:2d:6a:
                    47:5b:28:bf:a4:12:ee:9e:e0:85:c6:e4:aa:29:aa:
                    6f:84:74:9a:7d:06:f3:9c:95:89:6e:a7:67:dd:4c:
                    7b:d6:a2:cd:98:69:b9:2b:85:06:75:d0:e2:f1:1c:
                    b8:e2:d6:a4:18:d5:83:e0:3a:23:57:e9:6a:39:53:
                    ef:b4:9f:f1:d1:51:55:04:a4:69:b3:21:27:49:65:
                    66:5f:99:dd:52:16:38:5f:fa:9a:97:4f:e2:8b:be:
                    1c:52:23:f2:4a:09:22:4e:7e:ae:7f:97:db:7d:a4:
                    ad:b1:75:fc:5a:3b:dd:a2:12:d2:76:40:7a:1f:6f:
                    3a:df:72:7f:a6:2a:62:f7:06:d0:aa:b2:b7:88:7d:
                    f3:24:bd:02:dd:c9:1b:21:bf:09:1e:0b:1b:cd:95:
                    4a:48:30:65:88:8c:55:4a:0c:eb:33:4f:34:d1:d5:
                    32:6c:0b:84:51:37:1e:2d:f4:0a:f3:8f:f0:7a:c9:
                    95:9e:62:2a:57:bd:0a:b6:2e:c1:2a:3e:25:a8:ae:
                    09:3b:14:f8:21:c2:81:1c:6f:34:0e:37:35:ed:d9:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:83:35:CD:7E:F2:00:48:C3:9D:8A:A6:AB:72:D4:7F:BE:9E:BE:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8266ac6d-7bb0-35d9-89a0-c3181b874ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.195.0/24
                  104.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6f:3c:e6:bc:67:0f:a4:48:6c:01:c1:7b:4f:2e:f9:56:aa:
         81:41:b5:a7:28:ed:6b:43:2a:43:30:b7:b5:7e:29:03:a1:cd:
         6c:80:43:45:d0:d5:ae:a5:e9:17:23:32:61:cf:45:8a:ef:43:
         f4:cb:c9:4c:a7:19:88:05:1b:65:fc:8c:a2:03:f1:82:ad:d0:
         44:a0:f0:0b:2a:7c:b7:05:85:55:c7:57:84:c5:05:68:8b:6e:
         00:19:55:c3:96:37:cf:be:4c:2b:ce:8c:c0:9c:30:83:48:a0:
         52:88:f0:3a:2d:28:7b:70:f8:8f:83:df:06:f2:70:4c:6a:e1:
         1b:71:d2:86:a3:23:69:4d:8c:ae:ef:53:2c:e9:a3:c0:6c:f0:
         61:8e:75:9f:3f:08:02:87:8a:cf:ba:58:d7:60:ca:3d:8a:5d:
         57:88:9f:c8:92:45:75:c0:7f:16:2a:16:17:bb:cd:0c:7a:b4:
         7e:f0:be:c8:b7:f4:42:2c:87:5c:61:e9:88:08:0c:ca:94:10:
         90:db:33:7d:4b:98:5d:11:23:ed:ba:f8:02:ba:a7:cd:e9:fd:
         63:2b:94:41:f3:d0:15:bd:a8:c9:17:10:31:40:40:6a:56:3c:
         64:c4:85:8f:1c:7e:41:9d:df:62:c8:84:20:a7:b8:a5:b1:04:
         81:a0:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:07 2025 by rpki-client on console.sobornost.net