Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
File:                     e75cf125-8715-3d14-8f55-bb352f87cf59.roa (raw, json)
Hash identifier:          +VGsjOLKc6YQzb4M6amlL+pK8nF4pJQmX9iYiuof1J8=
Subject key identifier:   13:99:93:B6:8A:EB:5D:79:B4:C7:58:A4:44:C6:B3:69:54:09:C8:8A
Certificate issuer:       /CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
Certificate serial:       010D0C9F43285848FD5699BDC11F820143F7AA60
Authority key identifier: 2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     11961
IP address blocks:        64.89.208.0/20 maxlen: 20
                          72.250.128.0/19 maxlen: 19
                          108.59.112.0/20 maxlen: 20
                          216.228.32.0/19 maxlen: 19
                          2607:8380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:99:bd:c1:1f:82:01:43:f7:aa:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5dd2f3b-d544-4a90-84a5-58af0db84dab
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=196601c0-6dc4-4cb9-baac-7d331b446004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:27:55:32:04:b7:53:8e:9e:85:f9:41:59:
                    7d:50:34:9d:9f:55:b4:31:4b:59:ae:0c:d1:cc:6f:
                    12:ae:8f:f9:ed:6c:3c:21:93:37:3a:97:c4:f0:7a:
                    8a:a8:d3:7e:5d:e8:07:90:ab:a9:c7:84:9f:bf:c5:
                    c4:ed:c4:f4:86:cd:57:74:b3:d6:d2:b8:ba:d7:44:
                    a2:97:e7:7d:d2:8b:da:43:b5:9e:2c:7b:e7:b9:ee:
                    8b:70:f7:e6:b4:61:05:78:ce:02:93:da:86:0d:7d:
                    a9:e5:ee:12:af:4b:8a:cc:f5:fe:6d:26:3d:02:94:
                    7a:e3:fa:8e:33:c0:3c:7f:85:6d:99:a4:81:3f:f7:
                    95:e5:a0:92:80:3a:a6:65:45:10:a6:75:c9:df:64:
                    b9:ef:1b:07:1a:11:be:4b:f6:eb:14:95:ed:a8:01:
                    9f:4b:d5:f0:30:69:1d:10:2a:c6:76:08:b3:ba:44:
                    63:87:12:ac:b4:2f:24:46:fb:58:1c:0a:af:09:59:
                    d7:1d:66:7e:38:48:ce:5e:18:52:ba:4d:e6:b5:35:
                    6e:7b:3e:53:0e:f4:1f:8a:7d:87:a8:fe:13:7b:e8:
                    94:bc:a3:85:33:64:f6:23:1d:71:68:9a:60:b6:7b:
                    ad:2c:05:de:0c:ce:8d:32:80:58:32:14:cf:af:c7:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:99:93:B6:8A:EB:5D:79:B4:C7:58:A4:44:C6:B3:69:54:09:C8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/e75cf125-8715-3d14-8f55-bb352f87cf59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab/f5dd2f3b-d544-4a90-84a5-58af0db84dab.crl

            X509v3 Authority Key Identifier:
                keyid:2A:21:7E:D8:28:3A:D2:41:FE:CF:E5:E9:1D:32:3F:C0:B7:8A:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f5dd2f3b-d544-4a90-84a5-58af0db84dab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.89.208.0/20
                  72.250.128.0/19
                  108.59.112.0/20
                  216.228.32.0/19
                IPv6:
                  2607:8380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:b0:03:82:31:a7:f3:79:cf:27:37:86:4f:19:cc:ab:a1:
         c3:20:41:b5:56:3b:f6:b8:ff:82:d0:cf:b0:78:2b:bd:79:43:
         16:e8:24:8a:31:5b:3d:73:8d:37:1e:b4:ab:58:ca:ac:a4:af:
         ab:17:63:33:b5:c4:18:17:d4:c8:fb:e8:cd:97:c5:3c:d3:85:
         66:84:42:17:a1:94:54:24:6e:45:7e:ce:f9:d3:ef:bc:8d:68:
         7f:91:74:7b:ba:5c:a9:d4:e1:54:e0:b5:eb:bd:77:9d:14:0b:
         50:fa:e1:62:75:13:e2:6f:9e:f1:c0:2c:71:97:20:7e:33:22:
         37:39:a7:75:14:7d:79:80:ef:12:cf:57:3c:d2:d4:d5:5e:7c:
         b4:05:43:33:9d:61:02:5c:18:9a:fc:0a:6d:ec:9b:91:ac:7d:
         96:d3:fe:5c:08:17:64:09:88:bc:3d:6e:22:f8:db:b8:6b:bb:
         76:ac:6e:62:2a:c9:26:89:14:03:8f:a2:73:5d:69:98:f0:80:
         9d:47:bd:67:e1:32:a2:71:e7:c1:34:36:ed:81:b8:98:76:5c:
         51:f1:1d:18:45:d6:f0:34:a6:97:08:fb:49:ad:76:b0:a1:80:
         b1:1e:ba:d3:e2:6e:94:09:35:a8:2b:b2:d9:b0:aa:5d:1e:9c:
         09:f7:f5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net