Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa
File:                     9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa (raw, json)
Hash identifier:          rxMUOYVicv6xWHU2IMqPvASR3vIvEhn53oeSmqJ5S6c=
Subject key identifier:   B6:C6:22:AD:AE:41:F3:72:5A:F6:56:9B:A9:A5:47:24:43:86:64:9A
Certificate issuer:       /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
Certificate serial:       010D0C9F43285849806F26608F3E702872E09480
Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     393981
IP address blocks:        142.207.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:26:60:8f:3e:70:28:72:e0:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=50a2c00a-0fbb-4555-b3f0-1454006ad53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:e8:6c:e4:00:57:66:7f:37:14:ad:37:68:
                    aa:20:2a:f2:52:3e:32:fe:29:70:93:9b:2f:00:24:
                    e7:ce:ab:8a:d3:22:66:3c:ad:4a:97:bc:b5:04:06:
                    6d:6d:8d:5e:94:f3:fc:50:0a:46:8f:7d:85:ca:fb:
                    59:f5:96:20:d1:8c:b0:2c:bd:91:b8:e9:2f:1b:eb:
                    0e:52:f0:2c:dc:4c:01:2a:84:70:f0:af:36:89:97:
                    ac:9d:80:cd:48:41:f2:9a:6c:36:23:2d:24:0c:95:
                    78:8e:1b:45:6d:c6:32:82:c7:f9:fe:62:be:41:fe:
                    de:b5:85:34:ec:e4:2b:ba:60:a8:4e:bc:16:78:fb:
                    e2:5e:9e:d3:ac:26:88:16:97:5b:7c:bc:1a:1f:90:
                    36:29:52:7e:e2:5b:98:60:c7:33:4d:0f:22:9c:41:
                    db:57:3c:41:6a:b4:6d:8f:ac:7d:63:36:23:3c:fc:
                    77:bf:5d:b8:0b:a3:4e:cb:68:f1:7a:76:f0:1b:82:
                    64:7f:c4:c3:41:5b:c3:9f:8f:fd:f8:94:d2:18:ee:
                    00:ef:d4:cc:8e:06:4b:6d:2a:13:94:5e:8b:d9:15:
                    52:6e:fa:01:80:4d:c6:2a:62:ad:35:ee:22:f9:bc:
                    37:85:19:c5:9c:10:41:ef:f9:9c:be:86:8b:bd:bb:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:22:AD:AE:41:F3:72:5A:F6:56:9B:A9:A5:47:24:43:86:64:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/9191016a-ca61-3c01-b5a2-4ffa42bb0432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl

            X509v3 Authority Key Identifier:
                keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.207.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:3e:87:38:22:bf:13:93:9a:26:40:79:1d:e3:f0:56:f5:65:
         9f:50:12:03:39:ac:31:37:c9:13:d2:10:0a:83:58:8a:aa:ff:
         5a:94:65:f1:5a:e5:ca:56:55:0b:ac:d6:36:af:77:1e:90:2c:
         b2:5f:fc:c6:40:06:20:fd:1b:72:41:77:d5:cb:fd:d6:9b:e5:
         a1:2d:bc:c3:2c:6e:a4:f4:c0:12:c2:e2:18:24:6b:dd:27:ab:
         e7:cd:88:5a:d9:e3:77:93:fa:c6:24:da:d7:07:ef:fb:69:ce:
         25:e6:4a:c7:b3:78:10:23:82:a7:9c:4e:9e:40:aa:c9:2a:54:
         38:81:d1:22:c9:b7:40:10:d8:c8:95:bd:3c:2c:71:a8:b5:58:
         03:99:0b:ac:e4:13:33:5e:32:3d:9f:7e:1d:97:d1:cd:41:07:
         b3:74:63:c5:11:94:f2:35:f1:8c:7e:59:04:b0:8b:fe:97:94:
         1f:89:bb:e2:42:ea:13:ae:b9:5a:de:6b:cc:94:34:61:43:a6:
         fd:23:9a:28:34:a1:1c:90:f2:4f:c3:81:ee:ab:5d:bb:df:0f:
         9d:f9:3b:03:22:08:41:df:f5:bd:a1:04:fa:b9:eb:1a:55:a4:
         60:9d:86:f9:2a:ed:c2:75:b7:b2:bb:57:be:67:fd:2a:79:d9:
         0a:79:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net