Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa
File:                     c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa (raw, json)
Hash identifier:          5U/ouKq9JDPi/uOwwDlf4b0/uLTkKICZtXL/ZqsRvd0=
Subject key identifier:   3E:44:E1:51:B9:A2:F5:0D:36:01:DB:A2:16:F7:B5:7A:8A:82:E8:1E
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584981D460E3FF55C11A8FB99440
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     5650
IP address blocks:        168.91.76.0/23 maxlen: 23
                          168.91.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:60:e3:ff:55:c1:1a:8f:b9:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=8715fc1b-170f-4b70-a1c0-f1923a6cfd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:a5:e7:db:08:58:09:10:28:c0:c4:ef:8c:
                    08:c4:81:19:56:34:77:64:b0:63:1e:3d:d5:9b:17:
                    37:18:ad:68:a3:e8:ad:7a:6a:03:18:74:d3:ac:4c:
                    65:f7:e6:b3:3f:df:b5:f9:ca:3e:e4:b4:d1:c9:8e:
                    cc:8c:54:bb:72:8a:91:5f:2d:3e:96:00:83:e9:dd:
                    f4:87:14:f7:0b:ed:91:54:33:7a:91:2b:f1:72:e7:
                    9c:fa:96:38:df:b4:b8:7f:a8:43:bd:ae:04:c5:6b:
                    82:d1:c5:32:2d:ce:86:17:71:30:1c:50:bb:14:f4:
                    13:26:44:18:d0:51:59:c3:f5:6d:ce:0c:f8:73:03:
                    22:23:f8:6b:48:90:93:1e:8c:01:8e:bd:c1:62:0d:
                    17:93:30:e5:2b:8d:9a:82:d6:c2:ba:ab:4e:91:20:
                    a6:af:ee:0f:86:b9:0a:92:c4:1a:3d:ab:4d:6a:5b:
                    18:de:0b:bc:ee:87:d0:39:05:6b:01:0f:f8:e3:bc:
                    0c:db:ca:cc:86:a0:40:f6:27:08:46:85:46:8c:e7:
                    95:78:6c:35:4b:a4:49:4f:98:9f:76:16:07:64:e3:
                    d0:47:d6:04:a0:64:4b:cc:48:55:2d:6e:d0:7e:c9:
                    03:24:6d:0e:96:24:5b:2c:23:42:51:5c:a2:75:00:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:44:E1:51:B9:A2:F5:0D:36:01:DB:A2:16:F7:B5:7A:8A:82:E8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:c1:5e:83:0e:f5:52:6f:ef:bf:a4:e6:84:40:3c:cd:1e:76:
         32:e9:35:ea:e5:3a:40:fa:30:d4:b5:ed:c3:97:b1:cb:e0:df:
         5f:a9:72:b0:0a:56:13:15:2d:93:c2:9a:c0:eb:d1:d4:92:82:
         70:2e:57:e2:06:bb:e8:37:79:73:3f:e8:10:2d:9d:8a:51:a0:
         dc:64:11:d9:18:f1:4e:b8:09:da:ec:ef:b0:5b:d9:37:78:96:
         82:a9:a1:75:6e:1c:f3:a2:14:75:d7:ae:3a:98:ec:ca:f0:e1:
         c0:92:e0:b8:80:0d:ed:3b:d3:f9:8a:7c:3f:44:8c:a4:24:2f:
         aa:5f:f8:12:c0:c4:e3:8e:5f:fd:66:2d:7a:3b:ba:7f:f1:56:
         61:05:ec:95:90:b6:0a:f1:fe:8b:56:57:63:6d:af:59:78:7e:
         8a:47:02:79:da:d7:84:56:fb:d9:21:10:fb:03:aa:51:c2:88:
         20:eb:01:55:3e:66:a7:f8:2f:35:df:26:12:42:50:3c:c2:bd:
         63:78:2d:08:9f:ab:03:d3:1c:75:52:87:34:a1:13:64:e4:e1:
         ce:cd:5d:1f:23:dc:f3:5e:99:15:77:63:1c:18:5a:75:8b:e5:
         10:15:f8:90:98:f3:d4:eb:46:22:59:30:55:73:1d:f6:2e:37:
         e3:98:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net