Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa
File:                     7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa (raw, json)
Hash identifier:          95tzKheWrHUVPU+s2sQYlQ7SCgAlBgN/0DwcWDNUuWo=
Subject key identifier:   A4:86:8A:EC:25:DD:BE:1A:0E:F9:E4:65:74:4B:65:36:7E:30:94:9F
Certificate issuer:       /CN=2c41fdd7-374e-45cb-986c-b74864f1441a
Certificate serial:       010D0C9F43285849780F0E521E185D9FAB5837C0
Authority key identifier: 46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     11246
IP address blocks:        64.93.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0e:52:1e:18:5d:9f:ab:58:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c41fdd7-374e-45cb-986c-b74864f1441a
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=11b531f4-c6f9-4650-9bc0-28bc31e318f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:12:dd:b5:dc:b8:d4:20:fa:92:2c:45:59:
                    cc:c8:7d:64:5a:11:1c:bd:85:78:cd:01:69:02:14:
                    fb:d9:c5:a2:71:9e:de:5b:20:7e:1e:54:33:40:9d:
                    83:f9:48:c2:ae:5d:3b:76:44:e5:fa:f2:60:93:13:
                    81:d2:45:a5:7c:63:34:25:30:99:81:9f:de:83:c8:
                    13:0d:fc:04:15:f4:51:5f:0c:78:58:cd:10:8b:f7:
                    60:0d:85:76:17:66:70:44:23:6c:0c:33:7f:13:fe:
                    e4:90:d0:34:8d:4c:10:6d:41:ac:74:b5:08:ae:b3:
                    b4:b5:a2:42:f8:88:c0:c4:65:0f:39:f4:24:be:03:
                    f0:0e:e9:72:d8:f1:0f:d0:1d:fe:45:a5:e5:b7:7b:
                    fd:b0:2b:a1:a5:4b:12:cb:93:1f:d2:25:f2:72:b7:
                    2d:e8:04:07:5f:b1:7b:6a:9d:28:33:04:cf:5c:bc:
                    6f:4b:87:59:16:c7:80:ae:98:95:46:71:14:3e:b6:
                    14:6a:9f:5b:a6:ab:85:d4:02:f0:33:3a:54:fe:64:
                    bb:65:91:4f:40:78:a1:dd:f1:32:cd:ca:d7:f1:eb:
                    d3:76:6c:90:96:54:0b:9d:fd:91:d7:db:0b:02:37:
                    c7:81:10:4f:da:88:93:b1:01:0f:44:bc:12:3f:64:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:8A:EC:25:DD:BE:1A:0E:F9:E4:65:74:4B:65:36:7E:30:94:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/7793fc48-7ea1-37bf-b5c1-456f5f96831c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a/2c41fdd7-374e-45cb-986c-b74864f1441a.crl

            X509v3 Authority Key Identifier:
                keyid:46:5D:4F:76:28:0F:03:BE:D5:D3:30:82:30:A0:AE:E7:F8:BB:AC:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c41fdd7-374e-45cb-986c-b74864f1441a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:3f:2a:17:2d:13:e8:76:c5:31:2a:57:84:e7:b9:13:6c:
         4a:8f:17:51:1e:9b:5a:0c:f1:6f:38:9c:b6:69:15:8d:7d:72:
         90:39:fd:d1:6c:d3:26:4a:64:b0:39:9d:2c:32:c4:37:11:7d:
         d0:0c:8c:59:ba:cb:ef:77:9c:30:24:71:2c:61:f4:64:30:76:
         fa:32:1b:3c:c5:30:1d:36:57:d7:33:2a:39:57:ac:60:f8:54:
         7a:2d:eb:42:35:15:a8:b5:3b:dd:a5:c1:9c:2d:61:9e:c7:1e:
         db:5d:b2:57:4d:f8:7e:93:5b:5b:93:88:75:e5:2a:2d:05:c5:
         73:0a:6c:bb:f8:bf:70:8d:f6:99:8b:21:5b:d1:36:27:a5:fd:
         bd:d3:a7:90:19:09:de:bb:31:45:c8:dd:53:7d:01:eb:59:73:
         c9:6b:82:d0:4c:78:ec:82:45:b0:d2:5c:97:4c:23:d4:ea:53:
         26:2d:2b:c2:84:73:6f:28:fc:b8:a8:2d:35:9f:60:3e:fc:a6:
         c1:98:97:37:75:f0:18:f5:11:4a:b0:91:56:e1:71:5e:ec:9e:
         53:d7:91:99:ac:9f:b9:1e:1a:cf:09:fb:86:8a:40:dc:23:40:
         38:35:0b:29:31:23:9b:60:3b:02:f7:39:c1:77:28:c7:d5:68:
         5b:0a:28:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:59 2025 by rpki-client on console.sobornost.net