Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
File:                     cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (raw, json)
Hash identifier:          MWyeje3Z8SZ4zIwJpBf9XaOh5OdDrw04mfCsFZD1qZo=
Subject key identifier:   D8:A7:39:54:E4:DA:EC:DC:9C:41:10:8B:99:28:90:A4:17:A0:5E:98
Certificate issuer:       /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Certificate serial:       010D0C9F4328584979743A83E78AD87EDE034D00
Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     11399
IP address blocks:        204.225.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3a:83:e7:8a:d8:7e:de:03:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=a1eb406b-9a06-4505-b7fe-a0f40cab06de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:da:29:9f:9d:28:b8:c3:a5:c2:d5:95:b4:2e:
                    34:ba:8b:82:19:78:0a:43:bd:d9:fd:64:18:fb:5e:
                    59:38:be:20:f1:c4:5e:01:45:ae:e1:92:5e:d9:d8:
                    89:97:e2:4a:dd:d5:de:4f:46:69:30:68:3a:07:72:
                    16:9f:1a:f5:bb:e3:72:2f:1d:fe:8c:f4:e8:50:76:
                    26:bd:83:22:03:58:84:c4:fb:cd:0c:81:14:48:20:
                    73:5b:4a:33:f3:39:4a:1c:2b:2b:da:4c:8c:c2:3b:
                    46:7e:87:2f:62:d4:b3:e8:f5:a8:45:56:d7:82:b2:
                    8f:26:e1:08:4d:b8:57:46:cc:88:b6:58:c0:af:12:
                    7c:4b:c3:66:c0:9c:2b:bd:04:12:8c:18:48:e8:72:
                    67:9e:ae:2d:30:ee:de:20:1d:96:81:67:b6:1b:60:
                    b9:8a:88:59:fd:9c:1a:18:2a:1a:fa:68:90:3d:d1:
                    25:9e:2b:70:66:29:bc:d8:41:69:18:7d:13:ec:15:
                    b3:47:f0:6b:cc:28:84:0c:06:3b:fc:e6:b1:7e:c6:
                    64:d9:5b:52:01:5b:6c:be:aa:f0:d8:aa:b9:c7:96:
                    0c:94:a7:98:24:91:58:25:03:5d:80:31:7f:87:81:
                    a1:db:01:a4:58:1a:c4:6b:e0:65:7a:9e:f5:09:7b:
                    c4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A7:39:54:E4:DA:EC:DC:9C:41:10:8B:99:28:90:A4:17:A0:5E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl

            X509v3 Authority Key Identifier:
                keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:72:89:63:87:21:cf:49:e2:59:81:9c:bd:ba:c6:f9:23:c8:
         76:2e:6b:8e:e8:9f:16:85:70:ea:85:46:76:45:90:a4:ca:0b:
         de:8d:ce:be:1f:2a:84:6a:e5:97:af:47:13:82:5a:aa:63:52:
         57:09:ce:af:c8:1b:27:1c:41:e8:0c:eb:62:67:23:39:b3:6b:
         91:05:a7:85:cf:3b:33:20:8a:79:b9:38:68:5c:9d:18:3a:f0:
         85:0e:70:d1:07:e2:a4:33:2f:7e:4b:87:fa:ec:f2:ed:2f:07:
         f0:48:e7:83:15:ea:5d:44:5b:93:e1:c4:d2:d0:f8:a3:a8:53:
         04:c3:64:94:6c:f2:67:ab:52:a0:dc:8e:f3:08:b2:a5:7b:4f:
         9a:da:09:a4:8d:8f:ee:3c:a5:5f:11:81:f6:33:ea:94:f9:88:
         b4:35:8b:f3:30:8b:c7:d0:1e:c8:0e:74:56:5d:1a:af:2b:e7:
         af:88:81:cd:90:e3:af:d0:29:a1:9f:8d:30:0e:75:e2:6b:3e:
         1e:85:83:42:65:9c:1e:4a:e0:95:97:59:ad:08:d9:c6:86:f5:
         f1:ea:8d:2f:3f:a2:3c:52:64:37:e2:53:a4:46:03:e6:33:60:
         50:0e:2c:6e:81:39:0c:26:2f:68:5a:d2:48:a7:57:ac:ce:ff:
         af:b8:cc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net