Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
File:                     24ba5273-3345-3148-8db9-2c7983ba89c8.roa (raw, json)
Hash identifier:          osBgkPgt9yDiwB7ikWGQ03lSNTiNfo5bIJRGheGs7HU=
Subject key identifier:   80:4B:8B:DA:CE:B6:04:F7:9E:3F:A6:DE:41:8D:9C:CD:D6:76:51:59
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584953C44C0F133121D6C789F540
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     13451
IP address blocks:        74.205.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:4c:0f:13:31:21:d6:c7:89:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=504062f4-707a-45e2-be71-222334b23e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:80:d4:81:55:cb:6b:08:3b:57:8a:10:ee:
                    e5:b8:1d:bf:09:80:54:da:f8:58:ae:19:a9:37:78:
                    ff:62:3c:c3:b0:c8:f3:26:38:18:37:90:54:56:48:
                    f4:12:b1:d3:43:23:97:fa:95:cb:49:73:86:a8:72:
                    62:1a:05:83:23:1c:34:dc:9c:a7:55:16:d4:c6:d4:
                    9c:8f:10:b1:13:7e:ef:22:0f:fe:8c:a1:bb:d1:f6:
                    5f:55:e8:8c:32:b8:29:05:d7:aa:e5:6a:99:d5:82:
                    39:96:ff:79:03:be:2e:27:25:e2:fc:04:92:94:2b:
                    b7:ae:27:50:4d:3f:50:ee:06:2e:0e:f0:91:ad:91:
                    18:9e:ce:6b:35:e6:35:9a:f2:3d:bc:15:43:18:48:
                    1a:56:68:77:33:fc:5f:85:45:16:ad:8d:b2:4e:ac:
                    7d:0b:14:dd:5f:8d:47:43:a7:62:89:1d:c6:60:23:
                    c9:0a:e9:74:3e:21:52:0f:06:4e:06:85:f7:46:dd:
                    86:57:4a:06:a6:41:1a:73:a8:81:30:2b:c0:6c:f4:
                    ee:a1:15:7e:cc:c9:58:dc:b4:b9:5a:16:db:92:bf:
                    d0:74:1b:93:ba:29:08:cd:77:bb:cd:10:44:b0:f5:
                    7f:50:8b:8a:20:75:ab:0c:0e:84:b0:5c:74:9f:0e:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:8B:DA:CE:B6:04:F7:9E:3F:A6:DE:41:8D:9C:CD:D6:76:51:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/24ba5273-3345-3148-8db9-2c7983ba89c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:be:6a:ab:0d:6a:7c:aa:eb:6f:c3:b7:07:8c:c1:3e:fe:3e:
         f8:50:ab:e5:8f:fa:85:ac:33:e9:44:57:ab:ec:b9:80:f6:e4:
         11:df:60:2f:ce:f3:33:97:59:89:7f:47:d3:11:f0:33:4e:d4:
         79:30:40:f9:08:f3:33:2d:be:cb:af:ff:59:4a:ae:d8:98:f1:
         8d:c7:4b:d1:eb:7d:90:37:61:89:34:aa:d1:4e:23:f0:79:92:
         06:84:6f:cd:cd:d1:76:4b:d0:e4:3a:50:ed:33:db:13:19:92:
         13:73:f9:69:a1:ca:16:55:c5:d3:ed:4e:61:0a:c3:79:15:94:
         a0:c0:77:8f:26:bb:39:db:98:6e:3e:c2:88:bd:bb:b3:27:b9:
         c8:b5:3f:7d:9d:b0:1f:ca:2d:9d:7b:b3:22:a5:06:8d:e8:69:
         c4:cb:c4:68:4b:d0:98:e2:e5:35:5f:cd:66:f6:3a:6e:3f:02:
         84:5e:6a:44:96:9b:d5:87:e9:6b:c4:19:b0:f8:20:73:19:9e:
         b2:c1:92:79:55:d8:89:6b:f4:9a:ac:38:7a:35:23:79:77:60:
         cd:6b:b8:ef:ae:24:65:87:27:52:10:6d:15:7e:f3:d2:75:73:
         bf:03:70:b3:10:88:f2:59:82:8c:84:b1:b7:97:f8:45:c0:ce:
         2b:14:bd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net