Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa
File:                     45b9477e-868c-34f2-8a79-7724b571e110.roa (raw, json)
Hash identifier:          kBV6/9YatjaYGtRijyJmb3gsfV/9sHoJAXJ7+ovx6zs=
Subject key identifier:   F5:E8:8F:05:AA:37:B8:2D:E0:A8:AD:81:6A:0F:AC:68:C5:64:72:19
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584975753E771A6BE8DF59338B80
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa
Signing time:             Tue 08 Apr 2025 14:39:38 +0000
ROA not before:           Tue 08 Apr 2025 14:39:38 +0000
ROA not after:            Mon 07 Jul 2025 14:39:38 +0000
asID:                     21782
IP address blocks:        68.66.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:75:3e:77:1a:6b:e8:df:59:33:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Apr  8 14:39:38 2025 GMT
            Not After : Jul  7 14:39:38 2025 GMT
        Subject: CN=4e0a879d-25e6-4a38-8423-d5f43aaec8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:00:5c:0c:7d:ab:1c:d8:e8:bb:4d:d2:cb:
                    97:ea:3f:06:3e:13:b2:ff:37:aa:68:56:2b:1d:9a:
                    49:25:7d:7f:b4:62:cf:a6:fd:23:bc:f0:44:8e:89:
                    76:49:d9:10:74:04:cf:c3:b0:5a:9d:7e:ed:8f:15:
                    72:17:9d:68:2d:0c:ea:d5:50:75:10:48:bf:60:cb:
                    1c:86:d0:cf:ee:3e:03:10:ae:ea:b0:5b:d4:04:bf:
                    cc:97:ba:6f:1f:72:eb:79:3c:3d:db:41:7f:17:62:
                    71:10:57:dd:e0:df:bf:6c:a7:0e:0f:62:df:8e:c5:
                    b2:8a:37:b0:3e:03:f8:0d:3e:2e:e4:5c:ef:41:26:
                    9d:78:24:d7:d4:48:eb:d7:f9:49:3e:94:48:ee:f0:
                    47:41:23:b7:8e:d8:01:8c:5e:be:98:8a:06:d3:64:
                    58:d1:a2:26:13:70:f5:97:da:62:90:3c:83:3e:40:
                    6a:cc:a5:43:c4:ff:d5:2c:fa:22:f8:ea:d9:76:cc:
                    4c:10:a9:a4:e4:0c:13:45:6e:23:e1:2a:a0:f5:d8:
                    38:9a:1b:0c:3c:aa:eb:f5:27:91:99:c2:a8:1b:eb:
                    87:bf:c1:b8:a5:40:cf:f5:2f:77:fb:c8:a1:9f:c1:
                    72:71:4c:33:c7:1a:72:17:81:e4:0c:9b:b8:2c:cd:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E8:8F:05:AA:37:B8:2D:E0:A8:AD:81:6A:0F:AC:68:C5:64:72:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:34:d8:a6:88:0a:79:54:c3:14:3d:cc:81:ad:73:b4:8e:cf:
         27:73:bb:48:36:aa:a2:07:18:f8:8a:2c:fe:cd:54:d9:a0:76:
         fa:0f:1f:05:95:11:8c:21:f9:30:d9:da:83:5b:9b:6d:d4:00:
         ec:80:05:17:9b:c9:2b:b8:4e:67:21:7e:46:b8:46:ae:72:b8:
         37:a8:22:49:db:13:e0:0c:d6:87:07:99:91:9f:2e:95:c4:86:
         9f:00:8b:5c:03:f4:36:a4:b5:d3:31:2f:83:17:39:23:f7:6f:
         cd:c5:63:37:ca:eb:76:ee:35:0b:68:24:fd:a8:db:b9:4c:4b:
         68:4c:56:c4:75:91:5a:8a:25:86:dd:83:d5:d5:f7:d5:c9:01:
         c4:c6:4f:41:40:cb:a0:59:7f:42:4c:29:4f:7c:5c:95:04:2b:
         4e:bc:0a:6e:e5:c8:0a:db:0b:7f:46:5c:76:f6:20:1a:84:8b:
         37:5e:a5:26:ec:7a:31:55:6b:14:68:b1:01:5b:d6:75:82:dc:
         2a:00:bf:7b:e9:d7:da:22:fb:75:f9:ca:29:29:68:35:e4:91:
         4f:1f:3c:57:86:b9:24:2b:af:99:dd:4e:aa:ee:fa:e9:ab:39:
         4b:ab:23:a7:20:e3:ac:35:ae:fa:bc:a9:a4:5d:0f:9c:24:5e:
         6d:50:8e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:01 2025 by rpki-client on console.sobornost.net