Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa
File:                     a2c3132b-e476-3eef-9ccd-b420407c2963.roa (raw, json)
Hash identifier:          For+tIVNB8lCiUSmTjvkG8WCwQVJkBBQjD0OXIFWutU=
Subject key identifier:   8C:6B:4B:F7:0B:C1:CB:1E:D6:D7:39:60:F9:5D:B3:DB:B4:9C:FF:09
Certificate issuer:       /CN=1889ddcb-202e-4e86-8fb3-63c498cba935
Certificate serial:       010D0C9F43285849653EC86F05244A8DB421A900
Authority key identifier: 7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa
Signing time:             Wed 02 Apr 2025 19:16:58 +0000
ROA not before:           Wed 02 Apr 2025 19:16:58 +0000
ROA not after:            Tue 01 Jul 2025 19:16:58 +0000
asID:                     401550
IP address blocks:        199.36.25.0/24 maxlen: 24
                          2602:f755::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:3e:c8:6f:05:24:4a:8d:b4:21:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1889ddcb-202e-4e86-8fb3-63c498cba935
        Validity
            Not Before: Apr  2 19:16:58 2025 GMT
            Not After : Jul  1 19:16:58 2025 GMT
        Subject: CN=8170acc3-13d9-4015-bb7f-e1fbaca66600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:55:33:22:f1:d2:09:88:0b:77:96:8c:dc:ff:
                    c0:22:b6:88:90:f6:2f:64:7d:76:4d:f4:13:fc:ed:
                    26:fe:36:e7:9b:7e:57:b6:ce:c6:8a:aa:79:33:57:
                    72:24:ae:a3:ea:71:87:71:79:91:be:36:76:ab:e5:
                    48:84:87:a5:89:a7:9c:93:39:b4:8e:05:62:ce:3c:
                    6e:42:80:1b:17:53:fc:f6:58:67:96:eb:c8:b5:9e:
                    5c:dd:ad:15:d8:7b:5a:61:4a:cb:be:ec:05:34:62:
                    ce:91:53:00:ab:14:5b:f3:4c:b7:7a:8a:70:44:75:
                    c5:a9:11:33:73:78:09:6e:2b:ea:b1:18:9b:d2:34:
                    8a:31:7c:08:89:49:01:54:d0:e7:31:fa:6e:76:b0:
                    73:ef:97:2c:87:ff:e6:51:e1:91:6b:59:6d:9f:03:
                    bb:31:c2:9f:14:f1:ea:f6:f8:bd:ea:88:28:fb:07:
                    14:f2:5a:8c:2c:74:4a:8b:95:e4:89:be:1d:4b:95:
                    ea:d1:2a:d6:70:bf:0d:18:14:c4:37:e1:cc:90:40:
                    a7:c4:1e:d9:1e:33:cf:87:0c:42:15:de:a6:b8:b6:
                    7c:82:33:9c:c8:1e:b6:8d:69:69:33:ec:fe:9b:be:
                    50:02:a8:fe:e3:12:ca:5a:ce:16:c9:b5:e7:12:37:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6B:4B:F7:0B:C1:CB:1E:D6:D7:39:60:F9:5D:B3:DB:B4:9C:FF:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/a2c3132b-e476-3eef-9ccd-b420407c2963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935/1889ddcb-202e-4e86-8fb3-63c498cba935.crl

            X509v3 Authority Key Identifier:
                keyid:7B:BC:6E:6D:03:51:66:8F:B2:65:C8:95:39:61:20:A8:7E:A2:FE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1889ddcb-202e-4e86-8fb3-63c498cba935.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.25.0/24
                IPv6:
                  2602:f755::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:96:15:55:90:9c:8a:74:68:40:8a:2f:56:ba:fe:e6:35:
         ce:30:a3:b1:dd:0b:3b:70:b9:fd:07:0d:48:9e:19:09:19:7f:
         f6:e4:bf:c5:49:1d:63:95:d3:cf:86:e5:19:ae:eb:7a:62:d6:
         78:78:a6:6f:49:d8:87:74:46:d7:bb:a7:7c:47:58:52:b8:20:
         1c:e4:03:8c:20:8b:27:11:a1:1c:98:7e:08:76:58:08:ea:26:
         04:ad:ef:ec:90:e8:26:52:2f:40:2a:76:b7:d7:13:b0:f2:5e:
         dc:a3:9f:da:e7:81:43:10:6f:07:5e:a1:27:11:20:38:df:53:
         f7:bc:4a:e5:16:4e:49:c8:66:86:dd:1d:45:e9:18:26:5c:05:
         87:aa:4e:72:32:08:7c:3a:3f:27:a7:35:db:86:21:59:34:c7:
         53:e9:79:e8:2a:0d:a0:67:9f:09:0f:ff:84:1c:d0:84:a5:e0:
         0b:6c:69:c9:81:fc:54:80:f2:c0:81:5a:26:09:de:5e:95:84:
         38:72:8d:e9:0d:76:cf:f7:70:b7:ab:cd:7b:f9:5d:c6:d9:64:
         ea:bb:ec:87:06:ac:30:aa:c0:a6:6a:1e:68:46:60:29:92:26:
         b9:a8:ad:5a:3a:c1:49:7a:37:2c:24:ee:7d:e1:3a:75:d1:48:
         29:6a:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net