Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
File:                     71703ea0-4313-3b97-ab1e-b29a6f173349.roa (raw, json)
Hash identifier:          FydSkU2Tzm/zF7P/mxNoEeBCw2lY6tNR0aE8H8m9jMU=
Subject key identifier:   02:62:64:18:FD:97:EE:68:53:5A:1F:1C:9D:81:CB:C6:E3:58:C9:C0
Certificate issuer:       /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial:       010D0C9F4328584979744290690FFF011693D600
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     399244
IP address blocks:        104.247.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:42:90:69:0f:ff:01:16:93:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=8f043b24-3f9d-4de4-809e-a49fbb5e946e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:71:23:fd:93:c5:7d:31:74:7e:81:23:c7:
                    42:45:4b:67:7c:7d:33:ed:e5:93:3f:6e:33:20:5a:
                    34:8c:6d:b8:2a:b0:d2:71:ed:03:e2:93:44:51:1b:
                    8f:e3:a3:ad:d1:31:52:d2:ef:ec:97:69:b4:3d:f8:
                    1e:10:75:3b:fb:a3:27:06:5a:cc:85:06:80:18:cf:
                    3d:2f:6f:45:cf:3e:be:70:aa:32:7d:0b:75:88:cc:
                    48:d3:9c:07:f7:97:df:05:a5:53:4c:31:30:1b:18:
                    df:4d:41:c6:1d:e4:44:02:55:1a:d3:9b:c7:80:08:
                    ea:d7:5c:2e:5b:c4:79:b2:ad:6c:6e:99:79:12:a8:
                    20:3b:c6:0c:2f:ea:d5:b9:26:a0:7e:e0:d1:af:91:
                    40:70:dd:c5:c9:77:51:ee:d7:80:a2:47:cb:48:98:
                    a6:65:fa:96:2f:9a:56:d5:47:43:83:8e:22:76:1a:
                    85:29:9e:e7:34:37:d4:95:0d:30:fc:ea:54:75:7d:
                    41:7b:a2:3c:a7:55:d9:47:1d:e2:f7:df:46:b9:6e:
                    1d:70:ab:ce:b6:e7:3a:6b:dd:6d:40:1c:7f:34:89:
                    26:b1:31:4e:72:4e:57:b7:ee:c3:a8:f5:3b:e8:8b:
                    92:3c:1a:e6:06:64:81:f9:97:87:a6:a3:c0:41:88:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:62:64:18:FD:97:EE:68:53:5A:1F:1C:9D:81:CB:C6:E3:58:C9:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl

            X509v3 Authority Key Identifier:
                keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:29:a7:b7:5f:a0:a5:8a:db:72:81:83:83:f3:13:cd:e5:
         76:c7:91:45:68:9f:98:d0:b6:18:ca:a4:aa:5a:e9:52:5a:24:
         d4:a3:f7:95:75:10:02:fb:12:ce:7c:e1:d0:2d:ad:84:b5:c1:
         9c:40:9d:82:e8:26:23:a8:06:5d:4b:f2:1d:42:5f:c6:a5:74:
         79:c4:46:73:6e:49:69:44:9c:34:0b:56:0f:c3:c7:ac:9d:5f:
         30:76:01:ff:3f:68:48:50:ee:77:0a:98:6c:15:b6:4d:f5:dc:
         34:6e:00:27:31:84:ee:48:1a:e6:b0:8f:57:9e:38:34:15:bb:
         d7:48:8e:af:6c:40:9a:b4:59:ad:a1:80:85:92:45:c9:15:fe:
         14:74:d8:1b:75:c1:dc:70:a0:bf:58:7b:85:cd:9b:a1:63:96:
         d2:c0:28:b6:64:dd:1b:0c:a9:57:50:58:3e:44:24:90:6e:f2:
         1f:cf:78:96:24:8c:a7:12:fc:e3:92:e5:e8:f5:71:1d:3c:32:
         07:d3:3a:6b:92:22:f9:35:3a:88:35:03:d2:f5:53:bf:e6:1c:
         5e:de:43:34:4d:65:40:ca:bb:c7:a8:55:ed:2f:6f:5a:a0:69:
         0f:38:83:2f:ed:ed:9a:9a:0d:a9:57:be:65:04:2b:11:58:1c:
         80:2c:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:15 2025 by rpki-client on console.sobornost.net