Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/188cf477-528b-33dd-b162-1bba1bd7e1c9.roa
File:                     188cf477-528b-33dd-b162-1bba1bd7e1c9.roa (raw, json)
Hash identifier:          ffCOpJpY7Nce1daD2jL9HEeU6JzUF3GUIJcX3ZzPNAY=
Subject key identifier:   D6:A7:AD:19:3C:78:61:21:D3:6C:C6:36:FB:07:D3:AB:D6:E5:4D:C1
Certificate issuer:       /CN=01b2d667-c096-462f-9ad9-6391b09e9746
Certificate serial:       010D0C9F4328584974B162DB1FC86A5929077640
Authority key identifier: EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/188cf477-528b-33dd-b162-1bba1bd7e1c9.roa
Signing time:             Tue 08 Apr 2025 08:05:00 +0000
ROA not before:           Tue 08 Apr 2025 08:05:00 +0000
ROA not after:            Mon 07 Jul 2025 08:05:00 +0000
asID:                     400345
IP address blocks:        199.59.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:74:b1:62:db:1f:c8:6a:59:29:07:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01b2d667-c096-462f-9ad9-6391b09e9746
        Validity
            Not Before: Apr  8 08:05:00 2025 GMT
            Not After : Jul  7 08:05:00 2025 GMT
        Subject: CN=f6731485-5d57-4c8f-bf73-4a2ffc895323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b5:53:e1:f2:d0:11:b5:5b:ca:c3:7d:dc:f0:
                    bf:ec:61:a9:78:4b:c8:b5:fe:a2:53:1f:1e:df:ef:
                    a0:be:79:ef:a0:1c:c9:fd:31:ce:5a:fe:43:ea:f0:
                    4c:f4:70:7b:37:94:aa:4a:c5:67:e7:e1:ae:36:74:
                    00:7d:bc:c5:d7:7f:68:d5:00:a4:6d:86:6b:16:fa:
                    83:ba:ca:c7:9e:f1:15:f4:15:29:41:a4:22:40:7a:
                    e6:61:13:c3:cd:bf:be:8b:4c:48:07:5b:ff:d4:3d:
                    1a:8c:79:67:46:0d:16:8c:5d:43:fa:b5:00:9f:db:
                    6a:31:94:b0:76:89:15:78:c9:f1:41:d1:e9:f5:e6:
                    6e:9b:a3:89:1f:97:84:6c:40:d8:1c:fc:d8:66:20:
                    d1:74:aa:c5:83:b4:4c:44:be:ab:b6:f2:91:cc:11:
                    74:28:c6:93:5f:3c:57:cb:d9:26:ff:67:39:2c:73:
                    be:6f:d0:57:46:ec:41:83:09:56:2e:4c:93:10:5b:
                    33:d6:eb:3d:fd:4b:4f:5f:ff:01:9f:49:45:86:e9:
                    67:c7:25:21:2b:8d:8c:72:bf:fc:83:84:e4:38:0f:
                    f8:5a:b1:08:00:dd:04:c9:60:7c:7d:be:f1:a4:0f:
                    66:1e:84:ab:e4:01:42:e4:fa:ef:95:b4:93:36:cd:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:AD:19:3C:78:61:21:D3:6C:C6:36:FB:07:D3:AB:D6:E5:4D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/188cf477-528b-33dd-b162-1bba1bd7e1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746/01b2d667-c096-462f-9ad9-6391b09e9746.crl

            X509v3 Authority Key Identifier:
                keyid:EF:55:74:99:02:9B:7D:CA:4F:EF:EE:5F:8A:11:58:6F:46:D7:2F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/01b2d667-c096-462f-9ad9-6391b09e9746.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e1:64:74:14:0b:d4:c2:79:1b:a1:d2:db:a0:7c:02:8a:e7:
         d0:6f:ff:d0:de:ea:b7:4e:b3:27:25:27:f4:c8:2a:6c:98:f9:
         2e:3f:fa:c4:09:b5:a8:c9:ef:2d:c7:1f:67:12:e1:3f:9a:3c:
         63:e0:90:50:9a:00:c0:76:c1:05:7b:28:bf:46:0a:11:10:2f:
         f4:c7:15:1a:02:25:db:5c:53:b9:09:73:ea:9b:9b:6f:f3:97:
         31:01:9a:b4:0f:21:fe:42:2a:ac:24:9c:1f:a0:58:3d:34:b6:
         8a:ca:45:a0:37:c5:e3:38:77:80:bf:9c:3e:12:2f:1a:be:66:
         d2:ad:a3:f6:f7:e2:0c:ec:e9:d6:ab:aa:27:9f:1e:38:6d:b8:
         cd:de:ef:b3:d5:b8:da:27:95:79:6f:83:a7:b5:bb:2d:e9:c0:
         1a:31:c0:70:ea:67:94:1a:ca:a8:76:37:0c:c6:c5:91:35:d5:
         e0:2d:eb:8c:70:aa:94:83:c9:3c:37:b1:f5:6e:2f:8f:a7:d6:
         5e:9a:d7:e4:e7:04:a1:d1:af:9a:dc:af:1d:4a:16:4e:d4:1b:
         ba:74:53:23:5f:ff:e3:df:94:1f:ac:7a:07:66:f8:ec:1e:29:
         90:e0:d6:ae:85:88:87:ae:b0:83:ff:3b:31:de:a5:16:3e:e2:
         cd:1d:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:45 2025 by rpki-client on console.sobornost.net