Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa
File:                     1099ce86-f4c2-302b-8804-ff943a53fdab.roa (raw, json)
Hash identifier:          nBUkhZsPmJ0Q7Bq9jAlW7qlpvCkACBgmG89jYGzIiHI=
Subject key identifier:   72:E0:8A:52:C5:CA:EC:A9:76:F5:17:4C:DE:BE:29:18:CC:AF:89:FB
Certificate issuer:       /CN=5b061c76-19dc-466f-a9af-095e0d6f34a3
Certificate serial:       010D0C9F43285849806F209CECF86B6E08AA6040
Authority key identifier: 49:3C:B6:16:31:34:45:57:5B:CE:ED:2A:76:D5:87:6A:B3:DA:7F:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     395009
IP address blocks:        98.142.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:20:9c:ec:f8:6b:6e:08:aa:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b061c76-19dc-466f-a9af-095e0d6f34a3
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=e8f5100e-4bae-4487-9ef7-36932e5122c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:7f:b2:2e:5d:c1:02:eb:d4:bb:37:15:75:
                    11:34:79:f9:57:33:d6:d0:7e:a7:97:df:14:08:f0:
                    8a:43:47:81:17:46:ca:1d:d0:35:01:fb:d0:93:15:
                    61:e9:c4:d8:39:71:3f:7d:48:79:d8:2c:fb:cb:fd:
                    a5:bb:d1:58:49:9e:65:ab:09:53:b4:e0:83:93:a8:
                    1e:07:51:47:cc:94:08:82:28:08:45:d8:37:61:9d:
                    38:f7:5f:86:e9:97:93:2c:62:63:d8:41:82:f9:1b:
                    ce:37:0e:59:dc:62:a1:2f:8d:8b:95:74:1d:68:12:
                    b4:96:4c:b5:d2:6a:f8:2f:66:df:6a:9a:b9:5a:01:
                    aa:11:3a:d5:58:91:8e:5b:09:41:56:49:63:55:be:
                    e1:4c:c6:ce:3b:8a:c2:b6:29:8c:1e:ef:ff:23:a1:
                    7a:37:0d:47:ac:c3:e5:06:33:08:71:10:d5:4d:52:
                    9b:e3:d1:f0:f1:ca:c0:70:bf:a8:b6:34:84:92:d3:
                    5b:99:0e:17:4f:5f:82:c8:d5:50:ab:bd:41:ae:1d:
                    45:bd:ca:2b:fb:d9:66:d0:29:bf:69:1c:40:64:3a:
                    66:be:50:a6:37:96:6d:45:f1:9a:d1:5f:38:d3:97:
                    3c:99:2f:2c:34:86:fd:7d:ae:24:67:71:13:f7:2f:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E0:8A:52:C5:CA:EC:A9:76:F5:17:4C:DE:BE:29:18:CC:AF:89:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/1099ce86-f4c2-302b-8804-ff943a53fdab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3/5b061c76-19dc-466f-a9af-095e0d6f34a3.crl

            X509v3 Authority Key Identifier:
                keyid:49:3C:B6:16:31:34:45:57:5B:CE:ED:2A:76:D5:87:6A:B3:DA:7F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b061c76-19dc-466f-a9af-095e0d6f34a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bd:2c:24:5e:7b:81:98:25:43:f6:95:92:f2:cf:1e:ac:b6:
         64:9a:bf:ba:0e:1f:b1:d3:a3:9a:40:cd:9e:4f:7c:89:67:32:
         2a:77:98:85:3a:9c:be:b9:46:99:4f:f0:ae:ad:2e:b4:cf:24:
         29:c4:de:fb:0a:9d:25:87:c5:d8:be:1d:7e:d5:8a:d4:d6:26:
         78:da:18:8f:28:17:55:87:9f:7a:18:07:c5:f1:e3:6b:a8:94:
         ac:15:e7:45:18:c8:48:03:85:9e:3c:5f:7b:d5:e4:a1:3d:8f:
         01:75:54:a9:5b:2a:bc:81:20:d6:0a:34:72:93:a3:7d:fd:1a:
         d3:77:4a:24:3f:3f:47:d2:eb:25:94:5b:0e:f8:4d:a6:b2:3d:
         0f:88:9c:b0:6a:a5:bc:7c:9f:0a:37:48:e6:18:dd:62:3e:a2:
         dd:cc:ea:27:27:a0:62:4e:93:5a:d3:c2:7d:c1:e5:be:0b:ed:
         d2:44:ad:a0:0b:94:1d:1b:3e:cd:7c:04:ab:53:59:19:7a:1e:
         fd:97:aa:e0:4d:08:6b:2b:01:9c:4d:a5:46:fb:f2:ff:0f:01:
         f5:ef:08:f2:5b:fa:d8:66:4a:8e:d3:08:03:15:b7:28:e4:59:
         93:40:aa:62:75:1e:77:21:19:f3:e9:ab:18:6b:28:da:36:40:
         ef:b8:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net