Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
File:                     3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa (raw, json)
Hash identifier:          n0SYuSAgxadv7YdWnbIftfpje0xM7hmCsM51evGdlw4=
Subject key identifier:   82:F6:06:8E:99:8C:8A:E3:5D:8C:55:DA:FF:B5:29:A4:8E:8D:9F:A5
Certificate issuer:       /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial:       010D0C9F4328584973DEEF886FF1E0E5EA6D54C0
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     9712
IP address blocks:        104.251.56.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ef:88:6f:f1:e0:e5:ea:6d:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=52fac31c-ec53-4a57-aac9-2eebb5001ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:b0:6b:16:6c:7a:d8:f8:e7:be:85:6f:23:
                    21:c7:3b:0f:43:2f:1b:2f:12:5a:f2:7d:99:26:f6:
                    c9:2d:63:41:d5:58:06:94:b1:b5:4f:37:83:25:7d:
                    1b:eb:8b:34:23:cf:8f:05:7a:cc:83:ee:45:d6:e7:
                    d2:67:38:bc:29:c4:c3:bb:74:d0:61:b0:d6:aa:1d:
                    36:40:7a:57:2c:d6:a7:f3:7b:4f:a5:82:ec:85:49:
                    b7:c1:17:eb:0b:ae:80:e8:20:23:f6:71:58:b7:ae:
                    54:cd:30:41:31:20:05:ca:c6:99:9e:08:de:59:09:
                    38:2f:4c:ca:5b:c1:7d:ef:b6:46:8a:3c:22:88:94:
                    9f:5f:98:9b:40:9c:d3:3e:98:b4:79:a7:68:14:31:
                    cb:02:3f:ee:84:9f:6f:d9:25:dd:df:e1:8e:d7:e3:
                    a1:b1:15:c9:b5:45:27:dc:6e:60:57:d1:f8:c3:db:
                    c7:dd:b4:4f:f5:ae:7f:12:45:2e:52:68:64:57:ac:
                    e9:95:ae:a6:1e:6b:bf:f8:e7:d5:87:87:3f:76:a5:
                    0c:b1:4e:33:4d:f5:30:a9:f0:1d:8b:1d:d8:16:49:
                    6a:27:13:ed:db:e5:b1:c8:66:42:74:99:ae:48:31:
                    f7:52:f1:66:f4:d4:e9:b4:7a:e2:31:19:a6:a3:68:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:06:8E:99:8C:8A:E3:5D:8C:55:DA:FF:B5:29:A4:8E:8D:9F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/3a1403f1-01bc-32f9-9734-b1dfc6dcd6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:ec:5b:10:f2:66:53:04:b1:d2:c4:ac:e8:27:29:1c:70:27:
         bc:8e:7c:22:c1:ab:f7:68:8d:61:c8:de:d3:bd:8c:68:61:f3:
         d9:2f:00:02:16:f8:65:de:e5:50:eb:18:8c:2f:b6:2d:ab:e5:
         11:23:83:01:3b:ae:2a:a9:68:a5:0d:5a:88:59:a2:c9:1d:ec:
         41:f5:a9:60:fd:d1:2e:2b:10:70:de:0d:2a:de:7d:aa:57:4c:
         1a:be:d2:f1:1c:98:58:35:19:43:fc:f7:5c:1c:64:2c:ee:5f:
         25:e6:61:b1:07:2a:d3:dd:d1:8e:a8:88:b4:8c:23:3a:08:5b:
         25:40:fc:43:ba:db:ee:23:05:6f:4b:3a:11:4d:55:30:3e:9e:
         62:88:1d:12:69:73:70:12:48:48:5e:5b:34:95:49:8f:e3:bd:
         00:e4:11:9f:49:c1:e2:38:9c:1b:17:09:8d:d3:68:9d:8e:2b:
         78:66:06:44:72:b3:ab:39:d9:b2:17:cd:94:4e:14:a8:75:66:
         3c:39:46:f9:a8:ce:c5:5e:4f:cf:97:61:05:96:1b:95:32:d2:
         f1:0f:e0:23:83:26:96:5e:0a:3f:3b:7a:84:38:f2:91:38:c8:
         ec:f8:8e:d1:a0:30:2e:4c:32:a0:57:6c:8e:75:0f:46:88:1f:
         1f:2c:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:11 2025 by rpki-client on console.sobornost.net