Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/a49fb1a4-3b64-35b8-86ac-1ddff35c78c6.roa
File:                     a49fb1a4-3b64-35b8-86ac-1ddff35c78c6.roa (raw, json)
Hash identifier:          F7oTedxbC+TGNpwB1zzorQtDLzq2F7nwS4cTbv/LA10=
Subject key identifier:   41:6D:D2:7D:7E:16:82:25:18:AC:0E:7C:9B:B0:8D:D5:7A:F4:8A:4F
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584957F4165014B1442B9E98B080
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/a49fb1a4-3b64-35b8-86ac-1ddff35c78c6.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     21743
IP address blocks:        142.214.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:16:50:14:b1:44:2b:9e:98:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=ab919788-e8bd-4cd8-9961-d8ed3801b619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:69:f7:b4:4c:9f:75:d1:5b:70:5f:c4:f4:e0:
                    9e:97:d7:93:5b:58:ad:55:49:76:b7:01:96:2d:df:
                    a6:a1:a7:6f:4d:f0:65:c6:b4:45:24:86:95:3e:e7:
                    62:af:d6:d0:5f:b3:0b:a3:54:d7:17:55:76:7a:95:
                    d2:bb:94:56:34:45:12:62:3a:f5:f3:64:6d:9a:e7:
                    67:6d:76:1c:50:d1:61:24:2b:d8:d1:48:d6:2f:0a:
                    6e:f3:af:f5:cb:7b:14:41:31:5a:5b:a3:73:0f:47:
                    f2:d7:f8:81:4d:b6:73:1f:8c:55:ea:b2:71:48:4e:
                    d1:d8:fb:8b:a9:cf:93:59:2b:33:b6:3c:35:ff:fc:
                    8f:60:04:ff:95:a0:05:5e:d8:6f:bd:51:3a:f2:77:
                    31:3a:e4:87:ce:87:6e:da:d4:0c:78:10:b4:a5:d4:
                    fd:cc:9f:79:b0:73:bf:fc:e7:33:ae:40:76:b3:6e:
                    23:3c:83:26:2f:c9:b4:7d:e9:46:7d:91:6a:dd:25:
                    2d:38:4d:db:1d:ed:f2:66:72:a2:28:7d:81:ef:81:
                    b9:d8:bd:e3:6b:2e:76:f0:27:e5:a4:d4:10:14:be:
                    af:cf:da:2f:82:7d:f5:14:ec:40:db:ce:ac:2a:9d:
                    02:48:42:ce:89:15:c1:06:a7:12:45:27:2c:44:7d:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6D:D2:7D:7E:16:82:25:18:AC:0E:7C:9B:B0:8D:D5:7A:F4:8A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/a49fb1a4-3b64-35b8-86ac-1ddff35c78c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:0b:b8:8c:ce:08:0c:2f:4d:a5:d0:03:2f:e9:d9:88:8a:5e:
         4b:f2:57:2c:b8:18:fa:4b:89:69:50:ae:00:76:91:ee:c8:c0:
         77:d1:99:62:75:dd:fa:29:bd:39:83:7e:1c:e3:2b:c2:56:26:
         8b:58:4d:36:ee:be:f7:8e:41:a5:60:3a:a1:85:6f:2e:5c:9e:
         24:09:1d:02:32:bb:98:de:73:1f:2c:69:ed:ef:b8:31:c7:3a:
         b3:0a:24:89:90:d3:5d:1e:2e:a5:2c:7c:07:e0:bd:fe:f2:d4:
         8e:fa:f5:e5:86:cf:84:f3:53:16:63:92:57:70:e5:ed:85:cf:
         dd:48:f7:83:ab:e1:fd:71:fe:f9:6d:b7:51:d1:72:53:95:1a:
         f6:8b:40:a6:f5:03:1b:c3:f4:4a:d7:8c:42:6d:9f:b4:76:8b:
         ff:43:4a:89:4c:db:de:97:dd:1c:26:0e:18:b1:4a:28:13:ec:
         fc:9d:dc:d3:60:69:51:85:66:61:49:fc:c9:40:e3:5a:2b:1f:
         5a:1e:8e:8d:e5:cb:41:60:74:5d:06:59:83:81:e6:d5:37:f9:
         1e:b7:5c:e8:b9:e6:d6:c7:2d:43:75:b8:c0:41:e4:f8:d3:26:
         af:cc:95:5c:ad:07:29:33:48:89:27:39:5b:cf:10:1e:6f:56:
         4d:23:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:14 2025 by rpki-client on console.sobornost.net