Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa
File:                     53ff869c-cd2e-306b-a270-97070a097b4b.roa (raw, json)
Hash identifier:          9yd5F+intTX8QAkK9VInUH5rSn8fMqIU5RFTtzHyvBQ=
Subject key identifier:   95:0F:20:66:C0:64:4D:DF:3A:21:B1:11:F9:F0:F5:5B:75:C8:EC:62
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DB968B235386CF1ED640
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        107.188.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:db:96:8b:23:53:86:cf:1e:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=ac71b2bd-666b-4894-88fd-bd2dfd9712e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:6d:c2:07:12:10:28:7d:d5:25:6d:0c:f5:
                    35:0b:c4:62:2f:73:ed:1d:64:c6:19:f4:c8:ca:01:
                    11:1c:5a:b4:a0:4f:fd:74:51:5f:b7:7a:20:59:6c:
                    05:c1:d2:cc:4d:88:0d:e2:54:ba:1e:6a:96:c2:a1:
                    2d:57:c5:70:02:aa:e4:b2:6b:c4:ff:b0:0b:b8:64:
                    ce:82:27:fe:0b:d1:f0:43:b9:a0:fb:ed:65:16:51:
                    27:4e:9e:c5:e3:2d:61:bf:20:3c:ba:5b:7f:4f:ad:
                    54:e1:83:81:b8:21:1f:c3:d9:05:f6:5e:e3:c4:b0:
                    09:8e:85:30:2b:71:7f:f8:8b:b3:b8:04:8e:26:78:
                    56:25:be:47:91:24:b9:15:ec:b0:cb:99:4c:0d:73:
                    65:78:14:4a:ca:88:20:45:e8:a2:30:48:0b:8a:bf:
                    23:4a:a4:5f:bc:38:ad:3f:94:ea:1e:f6:a8:f7:68:
                    15:34:c8:f0:c2:ff:31:45:25:0f:12:26:0a:f3:4f:
                    82:3e:7a:59:a7:4d:a3:11:61:3a:b7:9d:e9:4d:ba:
                    9c:14:c2:41:05:fc:99:73:e5:a9:5e:19:28:f4:43:
                    00:94:5b:93:e3:70:a2:aa:13:bc:14:aa:eb:3f:eb:
                    59:b5:8d:38:71:4f:ef:9d:3b:c8:f8:69:ca:26:2f:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0F:20:66:C0:64:4D:DF:3A:21:B1:11:F9:F0:F5:5B:75:C8:EC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/53ff869c-cd2e-306b-a270-97070a097b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.188.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f6:da:4f:0e:bb:6f:e3:e9:da:31:41:e6:ae:26:2f:4c:32:
         82:65:27:c5:a8:c2:ae:6b:ae:45:6e:f5:3b:27:98:96:9d:11:
         30:43:38:a4:24:2a:ee:cc:0c:17:9a:4b:c6:91:10:dd:1c:23:
         06:4b:ad:6a:d9:53:02:0c:67:bc:6a:f3:17:be:a8:62:cc:d5:
         da:5f:2b:7a:1f:14:5c:bd:37:36:84:05:ac:85:74:7a:bb:e5:
         e5:60:bc:d2:50:18:ce:25:62:ae:97:cb:a5:3a:99:ba:96:bd:
         a1:6f:ab:6d:ea:b7:76:8e:8c:48:bb:ea:a2:75:ff:99:09:c5:
         e6:bf:4e:fb:88:c7:55:48:72:8f:75:00:6c:fc:69:02:7f:af:
         c0:91:8a:06:7f:14:9f:7b:35:3e:a8:59:99:32:31:6d:88:76:
         18:56:c9:40:a3:7f:b3:d7:a3:b9:09:31:09:73:83:97:c5:6f:
         dc:de:dd:77:eb:94:b0:b4:28:20:5d:c0:b0:ba:6b:27:47:06:
         70:68:59:cf:2d:70:0e:3c:6b:d2:b4:9a:77:e9:f7:f9:79:6a:
         25:40:74:0b:64:4a:85:47:32:86:2c:7c:29:ef:c7:c8:51:48:
         18:5a:bc:f8:90:9a:81:d7:e6:11:dd:7b:3a:99:d2:bc:74:7d:
         8a:fd:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net