Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa
File:                     189d52ed-0a7d-31e4-bb88-da744d1b0794.roa (raw, json)
Hash identifier:          jp3J8BwPJKQemMpdi/N/OtHYjhtCRhJGSdYfAIBYhJk=
Subject key identifier:   C4:1D:84:41:D0:FE:1E:E8:27:D4:65:88:05:F8:B2:93:BF:13:BE:64
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584978141C76537ADDE11372C780
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa
Signing time:             Wed 09 Apr 2025 13:11:21 +0000
ROA not before:           Wed 09 Apr 2025 13:11:21 +0000
ROA not after:            Tue 08 Jul 2025 13:11:21 +0000
asID:                     31942
IP address blocks:        104.37.8.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:14:1c:76:53:7a:dd:e1:13:72:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Apr  9 13:11:21 2025 GMT
            Not After : Jul  8 13:11:21 2025 GMT
        Subject: CN=a713305c-ca2d-430b-94da-c9ec5a8cfa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:b9:f8:c7:65:35:d1:46:10:8d:26:d5:ae:
                    21:ef:91:b1:0d:27:5f:b6:c6:58:30:78:73:80:77:
                    d5:f7:39:eb:df:21:20:2a:5f:6e:6b:c4:ca:87:aa:
                    92:c0:87:ac:c5:27:d8:6e:2c:ac:bc:09:74:17:6e:
                    18:af:b4:47:39:f1:89:7b:89:9d:8d:04:36:00:4d:
                    af:68:dd:e0:80:9d:07:0d:c1:2a:78:91:9e:00:9a:
                    8b:40:57:31:e2:62:12:36:3e:f7:66:2c:78:a9:7f:
                    2d:ef:2a:ab:56:06:98:35:00:57:46:f9:02:8b:f9:
                    0d:a8:9b:88:50:eb:5a:78:a0:a8:a3:c0:fb:71:a9:
                    12:c4:15:35:90:72:b1:62:32:87:7e:ef:c3:de:ea:
                    cf:b9:76:52:5a:e1:33:d6:c8:81:80:c8:d3:2f:0a:
                    7f:f8:fa:6e:c3:37:03:ea:d9:b4:eb:df:68:42:0f:
                    e3:5a:d1:a1:d8:d0:f3:a5:fe:a3:1a:b4:ad:69:c8:
                    2f:5b:3f:f9:71:47:ad:7c:d5:cb:23:be:1d:17:0c:
                    f6:40:84:a9:7b:a9:00:c2:2f:ad:01:0a:d1:af:21:
                    da:80:ba:74:c0:23:5a:f8:09:0d:94:e1:96:ce:1e:
                    12:54:93:8a:ad:be:af:2f:4c:3a:22:9f:6e:a9:83:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:84:41:D0:FE:1E:E8:27:D4:65:88:05:F8:B2:93:BF:13:BE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/189d52ed-0a7d-31e4-bb88-da744d1b0794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:31:4f:46:63:f2:c6:27:c2:e3:b0:dc:dc:00:4f:fb:df:85:
         89:eb:06:f8:f3:be:85:20:89:6d:1e:30:d9:bc:17:79:bf:3c:
         e2:1e:8a:44:4a:05:b7:1a:03:13:14:de:46:c5:7f:da:77:6f:
         16:94:b5:16:6e:1c:a5:3b:ac:b4:f5:0d:71:8d:3d:a8:9b:49:
         7d:90:48:c3:25:24:18:29:04:de:73:84:6b:2a:24:f4:03:33:
         71:d2:e2:49:35:42:d5:1c:ed:13:8f:44:8a:44:12:e9:d9:f7:
         d5:20:23:1d:5e:97:23:92:09:a0:bf:9c:36:1d:79:ff:e7:60:
         4f:ed:e2:f8:4f:a2:df:3a:ac:98:2b:49:3c:7e:3d:a1:cd:86:
         c9:ae:5e:d1:45:25:b6:d3:bf:2c:48:90:99:28:a9:e9:95:7f:
         6f:57:8d:c1:56:15:f5:62:cf:3d:84:7e:dd:78:0f:31:52:19:
         f2:d9:7e:6d:7f:94:79:d9:33:31:c4:39:20:e3:0b:2d:f6:39:
         4f:30:16:aa:74:db:31:0b:37:1f:dc:5b:cf:a8:69:dd:ce:6b:
         2f:8a:38:39:69:9d:0f:a8:0f:5a:cc:79:ed:d0:9a:43:71:71:
         6a:5e:58:e0:73:21:5b:65:6d:48:d4:2b:be:48:c9:08:0d:59:
         9b:0d:de:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net