Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa
File:                     815a54e3-8123-31cb-96ee-31a99dbd5486.roa (raw, json)
Hash identifier:          +wb20gU0oVtkx2s6JqKsL2HA06YD35MXU94ug1uQUBU=
Subject key identifier:   F3:01:0D:EE:E5:3D:5F:C7:27:E7:25:25:7B:1A:5C:34:D4:89:1E:BE
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F432858497D058958823BD6984B670EC0
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa
Signing time:             Fri 11 Apr 2025 07:41:01 +0000
ROA not before:           Fri 11 Apr 2025 07:41:01 +0000
ROA not after:            Thu 10 Jul 2025 07:41:01 +0000
asID:                     401243
IP address blocks:        140.235.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:05:89:58:82:3b:d6:98:4b:67:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Apr 11 07:41:01 2025 GMT
            Not After : Jul 10 07:41:01 2025 GMT
        Subject: CN=af34b57c-1f08-4599-97b8-167681b9f34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:de:18:f5:cd:ac:b4:c9:7e:f3:c6:42:df:a5:
                    74:87:11:b6:4a:e3:ab:95:92:09:cb:85:ff:6f:0d:
                    a6:0b:72:9f:aa:4f:b0:3d:37:8c:d2:c8:e3:ff:6b:
                    9a:c9:be:f2:b8:30:07:9e:17:6b:89:0f:99:31:76:
                    d2:e3:8d:cf:d8:0e:e1:eb:e4:97:f2:8b:86:18:65:
                    cf:25:9a:2b:c7:ed:41:ef:64:71:17:9b:ad:1a:c1:
                    53:e0:c7:f0:84:70:87:84:44:aa:86:20:5c:88:b1:
                    5b:71:f9:79:fb:86:bb:7e:88:24:ca:5f:8f:11:c8:
                    4d:ca:38:1f:80:39:21:93:54:4e:b8:0e:c3:5d:2c:
                    31:da:58:68:61:02:f1:ad:ae:4f:92:f0:b9:47:8d:
                    ad:e8:97:82:bd:b9:4a:ff:23:f0:7e:ed:8e:1d:05:
                    08:fa:71:1b:0d:97:fa:c5:5c:14:dd:3a:ce:d3:ec:
                    8c:7b:e9:e3:3f:51:b3:2f:e5:4f:92:bd:bb:32:aa:
                    b0:c1:5c:90:57:b4:72:51:91:73:ba:bf:a4:14:26:
                    e0:17:d7:a6:c6:32:0a:69:60:d3:0f:84:72:b2:b7:
                    7a:cf:fe:c3:ca:28:17:ec:4f:fe:17:db:88:a7:84:
                    d6:fb:a6:fb:5b:9d:9b:0c:b6:e7:7e:f0:20:0d:9f:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:0D:EE:E5:3D:5F:C7:27:E7:25:25:7B:1A:5C:34:D4:89:1E:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:87:dc:f9:60:7f:78:34:cc:4a:d0:90:f0:88:f5:90:59:63:
         f8:28:01:4a:9f:67:66:2c:0b:8e:c8:c4:87:ae:c9:ac:c9:c5:
         3e:37:6d:ea:24:4d:a5:a2:95:20:2e:24:1b:4c:2c:20:7a:87:
         c4:1c:13:b9:b8:00:c1:30:64:b3:b9:f3:c7:a8:12:bf:95:dc:
         2d:75:b5:b7:7e:68:93:8f:d6:da:70:f1:d6:37:ec:a4:df:f4:
         1a:04:e6:10:4c:d0:3e:26:92:c6:fa:1b:d2:5a:5f:6b:57:b1:
         4f:ba:43:43:d3:ea:fc:ef:32:96:84:dc:44:78:00:e3:73:59:
         28:e4:33:c3:29:72:d8:7a:e5:d9:fc:14:36:36:8b:00:1f:ce:
         98:ad:18:16:98:ec:4e:29:81:2b:2e:81:f6:f3:5d:77:ea:a9:
         73:32:6d:cd:6f:33:51:91:2b:9f:10:f1:96:28:bb:7f:35:12:
         00:4f:bc:ff:18:d8:1b:e2:ab:03:51:74:e4:83:98:7c:78:2c:
         24:2e:9d:0c:1e:c7:b3:d0:e6:c8:c9:ab:10:a8:d2:97:38:4f:
         41:93:20:46:cc:e6:87:35:26:cd:39:52:b6:12:08:c1:cb:02:
         ba:30:33:a1:b6:1e:d4:bb:6f:68:ec:d4:2d:98:30:9d:3c:80:
         f0:24:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:04 2025 by rpki-client on console.sobornost.net