Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa
File:                     68359572-ada3-3f96-a3ca-23583c701e48.roa (raw, json)
Hash identifier:          8i/ebHVigeQppBbW1rG0PuMAbcoF2ZY2cDUjDFyvgOU=
Subject key identifier:   32:27:E2:06:87:CC:F2:72:80:F8:5F:AF:29:05:26:38:37:78:5E:FF
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584968B42217004CCB46C7A8EF80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     13763
IP address blocks:        141.140.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:22:17:00:4c:cb:46:c7:a8:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=acd696b4-7926-4176-937d-ea6700e7274f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:ee:c7:b6:b8:a5:75:99:a6:26:33:bb:38:
                    e8:15:95:34:66:3e:f8:2e:bf:38:76:a8:8c:5d:97:
                    80:45:e6:8f:42:af:5f:d9:72:8d:bc:a6:7e:82:17:
                    89:45:27:9d:f4:d3:12:a3:cc:f0:dd:a4:36:ad:c5:
                    18:12:1d:fe:9d:30:17:71:66:86:d6:ae:c7:10:60:
                    f7:63:14:a7:9d:5f:08:ff:f7:da:37:b3:c7:70:bd:
                    ff:5d:05:e8:71:2f:c4:7c:2d:89:dd:aa:57:b2:f7:
                    63:b4:95:2c:9e:90:92:37:74:cd:d0:a2:d7:62:86:
                    57:a4:2b:e6:df:d6:e7:ab:91:9c:24:16:83:b7:14:
                    67:95:8a:78:46:b7:52:b0:c7:dc:55:14:56:9a:22:
                    79:3c:d5:9a:87:63:21:86:8e:4d:bb:6e:1d:12:39:
                    85:5a:5b:81:a3:5c:d6:09:91:66:aa:f6:dd:37:f5:
                    fb:bc:28:d0:0a:4c:8c:46:56:85:f8:e1:ec:7d:63:
                    83:1a:5e:ad:f7:d1:34:ec:3f:c8:59:6e:ac:b3:be:
                    5a:37:2a:81:60:ad:b8:a5:af:58:b0:40:e3:e6:05:
                    a8:1d:89:fe:0f:cc:09:a5:f3:32:3e:d5:c7:32:62:
                    60:1e:a6:2f:2b:8d:4e:ec:eb:89:80:f8:e3:2d:99:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:27:E2:06:87:CC:F2:72:80:F8:5F:AF:29:05:26:38:37:78:5E:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/68359572-ada3-3f96-a3ca-23583c701e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ee:12:d9:4e:e3:0e:72:64:16:1e:e9:42:c4:c1:27:f2:ab:
         93:95:f7:66:d1:48:4b:01:73:bb:55:69:98:12:9f:56:c2:60:
         74:88:f2:be:8c:4d:05:47:6d:f2:b6:d6:33:6c:25:af:1d:97:
         cd:69:f6:3d:49:52:d1:94:91:23:1d:b3:31:84:25:e6:20:26:
         74:4c:9f:13:88:36:54:a2:85:18:9c:33:0e:ff:16:aa:fc:80:
         f4:3c:01:22:fd:75:62:60:c8:9d:85:f7:7d:13:eb:7c:b9:38:
         cb:69:28:c6:0e:8d:d4:d7:d5:cb:79:40:15:28:5b:4c:52:10:
         4c:60:92:eb:8e:2f:d7:53:ac:fa:f7:a9:db:bd:0f:5b:5c:26:
         91:86:4c:d3:78:a4:f6:85:99:4f:35:a0:a6:a3:1f:0c:26:5f:
         c7:f0:1e:6b:00:18:09:f3:b4:3a:df:f2:02:22:5f:87:c5:15:
         69:48:b8:18:86:99:37:4e:62:17:99:56:b5:bc:bd:59:dd:d9:
         b1:23:bc:c4:81:40:3c:7d:35:e1:f8:3a:e4:75:4c:ba:6d:d0:
         48:d7:7e:66:da:b7:e8:65:b4:3c:4b:1a:15:53:b4:47:28:e0:
         e1:fe:c6:27:d2:3c:4c:1e:96:c4:b5:79:21:4f:bf:ba:ed:c0:
         7a:6c:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:13 2025 by rpki-client on console.sobornost.net