Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa
File:                     7a79000b-74b2-326f-820e-6ef810bf34b4.roa (raw, json)
Hash identifier:          wA7r6gh7nmPQ4lAAdsaJp06ttjQ7XvD+FCpvfq1ahbg=
Subject key identifier:   0A:81:60:13:A8:85:C7:BE:C1:C5:CE:DA:9E:76:75:FF:23:A8:9A:EA
Certificate issuer:       /CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
Certificate serial:       010D0C9F432858495ABEE1B26CE8D8C8BE540340
Authority key identifier: 8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     26427
IP address blocks:        108.161.97.0/24 maxlen: 24
                          108.161.99.0/24 maxlen: 24
                          108.161.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e1:b2:6c:e8:d8:c8:be:54:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac88c330-35f2-4a7d-92e2-3323dabae9f9
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=d597d346-c28a-4d61-99b7-b9ceeef3390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:87:ec:74:ea:32:35:86:84:fd:54:ab:c6:e2:
                    85:e3:76:df:5e:2b:8c:ab:4a:f0:ab:82:d4:78:55:
                    ff:66:4f:7e:82:4a:fd:6f:94:cf:d7:ba:ee:20:82:
                    0b:a2:1b:60:6c:28:11:a8:ed:59:5f:7a:3b:74:82:
                    61:89:b0:04:64:dd:a7:a5:05:32:b1:4b:f3:9d:b6:
                    2e:24:e5:05:fa:47:fb:5a:32:b9:4a:c3:dc:78:85:
                    d2:f3:d8:3d:11:02:58:fa:9f:05:37:6d:8a:0f:94:
                    ee:e3:c9:c8:ed:6e:0b:ec:56:18:cc:17:66:9c:47:
                    6b:2a:cf:38:85:8c:70:95:89:f4:ae:03:07:cc:7f:
                    d0:d0:48:e6:d0:b9:d1:33:18:09:94:91:ed:ee:5f:
                    5d:11:da:f9:bd:2f:87:72:4c:fb:cf:19:ed:41:44:
                    ee:fd:a4:0a:b1:9b:1e:cb:af:9c:02:62:b1:89:38:
                    c7:44:4e:1d:04:a8:cb:92:4b:a1:d3:e2:8b:01:ac:
                    23:05:64:e2:f0:90:29:cd:b4:10:de:53:57:ec:43:
                    42:6c:0d:74:29:0a:ff:aa:5e:3e:87:c4:18:1d:91:
                    22:17:fd:81:ed:f9:50:6a:4a:3e:bb:18:d7:f1:21:
                    72:26:8e:50:dd:93:97:df:61:42:9f:60:cb:65:41:
                    f7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:60:13:A8:85:C7:BE:C1:C5:CE:DA:9E:76:75:FF:23:A8:9A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/7a79000b-74b2-326f-820e-6ef810bf34b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9/ac88c330-35f2-4a7d-92e2-3323dabae9f9.crl

            X509v3 Authority Key Identifier:
                keyid:8D:24:9D:0C:C6:00:63:93:99:8F:03:DA:AA:3E:F4:36:4B:D4:6C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac88c330-35f2-4a7d-92e2-3323dabae9f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.97.0/24
                  108.161.99.0/24
                  108.161.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:00:fc:20:61:8f:6e:b6:1a:20:62:df:48:2e:99:32:a5:
         01:79:6e:eb:9f:c4:73:6b:30:79:cf:4e:3c:a5:d7:a0:e4:5d:
         fb:de:25:5a:33:3d:53:39:ce:45:fa:05:7d:93:e3:5f:bd:17:
         f5:f2:e3:ff:05:65:23:9d:f9:05:a5:c7:01:94:3e:78:7f:3c:
         24:b6:1d:00:d5:a7:d7:c3:de:89:78:08:a8:41:c9:97:e0:88:
         7c:5f:13:ba:5b:4b:10:c5:c2:3e:09:14:b2:b3:da:93:ca:a5:
         85:50:40:3f:27:e0:29:d5:c2:eb:18:d5:8f:93:77:0a:aa:bd:
         66:d0:12:15:2a:1f:cf:27:be:6c:f6:27:48:d9:2f:16:f2:01:
         ea:f3:d7:91:1f:2b:da:dc:59:be:a3:08:44:40:2e:2f:8c:6e:
         20:1e:0d:7d:8b:10:5f:d7:6a:43:d6:ce:fc:5d:19:66:05:c9:
         ce:2f:30:1a:53:8a:fc:b9:4b:10:4a:16:05:fd:01:9f:e5:d3:
         14:37:aa:dc:17:2d:26:c9:36:f9:a8:96:74:b7:75:33:06:f1:
         66:bd:f8:60:79:74:f2:dc:19:51:33:07:80:cb:90:9d:60:72:
         8c:03:f4:70:5d:ef:bd:a4:63:da:17:9f:d4:8f:a5:5b:39:47:
         ea:b2:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net