Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa
File:                     11f88e34-07bc-3f95-9191-762ad2f8559d.roa (raw, json)
Hash identifier:          fxzot3nB2rGfwOKncyAda3kQH49Q/Toy4795p5LHnQU=
Subject key identifier:   F5:30:3D:0F:EC:7D:DD:F2:99:B8:42:E8:12:49:91:FD:0D:A0:8C:09
Certificate issuer:       /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
Certificate serial:       010D0C9F432858496CE458AF8C54C75524634780
Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        65.38.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:58:af:8c:54:c7:55:24:63:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=0365abfe-c553-406f-bf8d-b547ee10c5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:dc:38:c6:0b:c8:c2:db:00:8b:6a:51:29:
                    8e:78:72:f0:95:e7:d4:58:dc:03:2c:03:d0:32:d2:
                    85:5d:52:1a:d7:54:55:ca:f0:a6:da:e5:53:49:f9:
                    da:02:e7:61:54:82:76:41:2d:25:f1:f1:b5:be:3f:
                    fc:f5:05:f1:16:f4:8b:5b:53:cb:4e:5e:1b:86:21:
                    b9:4b:27:e7:e3:ee:c2:10:68:40:fc:de:87:ec:39:
                    79:43:d0:52:83:81:14:11:c6:6a:68:3f:f1:83:1d:
                    de:58:10:5f:4f:e7:3a:52:ad:8e:40:cf:59:94:7d:
                    95:11:5b:51:28:99:5f:d6:69:69:16:9e:2b:c0:d7:
                    e8:70:aa:d6:37:33:6f:df:3a:10:d4:81:22:39:9f:
                    69:51:81:56:89:d6:11:d7:53:ac:38:c2:24:21:93:
                    ae:72:ec:a6:7d:cc:2f:b2:e4:ec:1b:a6:d7:fe:f3:
                    a6:51:8a:4d:93:b5:af:7b:51:91:d8:b2:99:1e:7e:
                    73:08:eb:41:d5:ff:3f:2d:ec:53:7b:5e:72:0f:2a:
                    02:81:f5:ab:2b:e2:fa:1c:e3:2c:bf:af:57:11:c5:
                    96:d0:b4:07:7a:2b:92:bb:6b:ee:c8:4b:d3:16:d8:
                    ff:1e:d8:0c:ab:eb:10:c3:f6:ed:8c:6a:0e:ac:3e:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:30:3D:0F:EC:7D:DD:F2:99:B8:42:E8:12:49:91:FD:0D:A0:8C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/11f88e34-07bc-3f95-9191-762ad2f8559d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl

            X509v3 Authority Key Identifier:
                keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:f3:f4:e5:da:a4:94:9f:b5:80:e6:04:23:00:5c:76:36:
         26:31:a2:41:5e:09:18:c2:f7:1f:12:76:be:6b:3c:ac:bd:89:
         22:36:6c:f9:7e:cc:97:61:22:ba:f7:22:12:4d:59:3a:90:9c:
         85:fc:06:dc:c6:b2:b3:6f:c6:44:7a:c4:a7:64:f9:08:9c:77:
         29:12:9c:05:e6:b7:30:29:d2:b5:f8:44:71:c5:db:8f:53:ac:
         02:76:53:f4:be:ad:6c:7d:37:5c:e5:fe:0f:c5:ff:f8:31:51:
         62:ad:00:bc:b1:0d:d1:d5:69:b4:51:9b:f9:92:3c:77:11:88:
         ba:35:66:5a:6c:57:77:a5:e8:91:ac:fa:65:90:f7:69:e8:39:
         98:72:07:ed:35:df:97:b7:e7:f0:02:ad:7f:a7:ff:b6:0e:7a:
         95:a9:a2:e1:16:38:2a:5e:da:2f:9d:e1:d7:5c:2f:58:2c:0b:
         b1:7f:cf:ec:69:66:96:e7:71:f9:be:ad:85:0e:4f:ad:f9:12:
         16:ea:36:73:db:83:a7:b6:56:97:17:90:0e:94:a5:31:39:fc:
         0f:4a:e0:e4:b5:83:a1:aa:39:df:0e:c1:75:06:46:92:dd:d0:
         04:8e:f6:fc:36:42:3a:93:4a:f6:6b:a5:7e:c2:5e:35:a3:e6:
         f4:24:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net