Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa
File:                     2383a987-7584-3a26-891c-3c54bc00eebe.roa (raw, json)
Hash identifier:          FSE2O0LowZx1CXX9mGpN5TyGZgemvbA/NNRHzbD35pM=
Subject key identifier:   77:98:46:7B:53:25:7D:25:D2:9C:91:C9:36:10:C0:15:C7:96:FB:2F
Certificate issuer:       /CN=44c9f20f-94d3-45ab-b941-cca94fba4981
Certificate serial:       010D0C9F432858496595BFA3DABBB8FCFEA1BD80
Authority key identifier: 03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa
Signing time:             Wed 02 Apr 2025 22:12:12 +0000
ROA not before:           Wed 02 Apr 2025 22:12:12 +0000
ROA not after:            Tue 01 Jul 2025 22:12:12 +0000
asID:                     30337
IP address blocks:        170.194.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:95:bf:a3:da:bb:b8:fc:fe:a1:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9f20f-94d3-45ab-b941-cca94fba4981
        Validity
            Not Before: Apr  2 22:12:12 2025 GMT
            Not After : Jul  1 22:12:12 2025 GMT
        Subject: CN=b4ab579e-9d16-4dd6-b8c3-3890862c2ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:0f:28:40:5d:81:fa:a5:70:3a:51:35:01:
                    df:d5:ad:86:35:d7:eb:cd:83:48:cc:10:92:a7:8c:
                    4d:a3:4c:d0:26:bb:99:a6:ce:4d:60:f6:a4:c6:f1:
                    f3:8f:49:f5:1c:1c:eb:b7:80:49:3f:92:3c:23:19:
                    8f:c7:bc:4e:54:d6:d9:e7:3d:43:77:af:67:bf:77:
                    1f:b8:c0:88:74:57:0d:12:53:04:dc:b7:5e:a1:28:
                    0e:5e:82:9b:cc:d1:85:18:3d:c7:2d:63:ae:2f:c4:
                    57:cf:79:26:f1:a6:27:e4:8e:bc:11:a5:fa:c1:7b:
                    b5:8e:af:6c:78:c0:4d:57:7c:d3:f6:03:ee:6d:12:
                    d0:78:ff:b0:bf:41:6b:b3:e5:a2:2d:e0:53:7c:2d:
                    4a:d9:2c:81:4b:27:ee:8a:54:f0:88:27:42:dd:64:
                    3e:2e:13:3b:95:aa:44:13:e6:82:6d:b8:c0:b2:07:
                    87:26:ab:6d:ce:56:00:3f:4b:5d:7a:52:7a:e4:39:
                    a5:93:3d:d5:ab:1c:8a:7c:35:ad:5e:6b:48:d0:3e:
                    f0:15:d6:51:c9:58:74:15:15:41:aa:a4:75:a8:b2:
                    86:62:74:7d:e6:53:a9:a2:ad:46:66:8f:2c:eb:d3:
                    f9:35:d5:b7:42:3f:42:f6:4f:6c:3d:46:ae:fc:49:
                    20:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:46:7B:53:25:7D:25:D2:9C:91:C9:36:10:C0:15:C7:96:FB:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/2383a987-7584-3a26-891c-3c54bc00eebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981/44c9f20f-94d3-45ab-b941-cca94fba4981.crl

            X509v3 Authority Key Identifier:
                keyid:03:F6:F6:1C:42:4C:C7:52:8D:DD:05:02:7D:BD:F4:D8:FD:07:A3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/44c9f20f-94d3-45ab-b941-cca94fba4981.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.194.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e1:08:f9:f8:db:1f:21:7a:27:a1:a1:60:a2:99:9b:84:5f:
         83:54:b1:e3:d1:7b:51:50:1c:c5:0d:5b:e0:a5:c5:fb:ed:c2:
         09:2f:4f:ce:1f:b8:3c:96:4f:46:b1:72:87:7f:0a:92:f4:78:
         0a:9f:c5:e5:c2:77:54:ef:9b:e4:4e:32:60:08:61:9c:ed:40:
         7d:87:4c:7f:ca:74:13:1e:2e:f8:5f:6c:25:f1:d4:7d:61:04:
         bb:3e:5d:91:28:c4:bd:e4:d9:15:55:ec:4f:e7:3b:97:0c:1a:
         9e:7a:e4:b6:f0:ff:44:b1:e1:36:a7:f1:21:3d:0c:2b:20:b9:
         d3:1b:49:84:0b:8b:a3:66:54:8d:93:55:e9:36:43:cf:ea:9a:
         51:3f:4b:53:04:39:9b:bf:60:d6:16:17:63:7d:ab:4e:d0:90:
         de:38:dd:32:09:3d:56:ce:d8:43:78:24:b7:a1:db:c7:ed:f5:
         2f:97:b9:09:2f:f2:87:35:02:ba:9f:3d:31:80:56:8a:9d:4e:
         f2:90:ed:5e:02:73:a3:2a:3f:fb:68:82:a7:08:47:88:ec:48:
         7e:0a:32:e8:e5:86:ca:40:64:55:1d:af:62:3d:ab:c0:49:a3:
         3e:be:53:70:92:19:04:72:0a:da:68:16:f1:13:6a:3e:a3:f7:
         73:cd:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net