Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa
File:                     e8d7806d-c458-3253-b585-aab0952b090b.roa (raw, json)
Hash identifier:          0r1DI5M24UT1M/ZurR9iOMNSbZA6Mzhk0u8orgm1m50=
Subject key identifier:   3B:B9:BF:62:A9:B8:06:F3:0D:E6:60:4D:5F:53:E7:B6:9D:F9:70:62
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F43285849780F0F3F9013D956A6924440
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     202
IP address blocks:        135.84.120.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0f:3f:90:13:d9:56:a6:92:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=b2ea289a-1e50-42d4-9763-2e2cc7e31868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:fa:c9:0d:17:5f:e0:25:5a:57:16:25:8d:
                    58:99:5c:d4:2f:3a:65:e2:2f:bd:33:3c:68:36:1d:
                    6b:df:09:89:48:7a:65:90:b7:9d:42:8f:09:c1:27:
                    4b:a4:c2:96:42:60:9a:44:ba:8b:86:d5:4f:7d:ea:
                    7d:ef:50:f1:ad:f3:ef:44:00:30:91:1e:a3:82:c4:
                    1d:5e:ff:7e:f6:24:cc:66:1a:d6:89:cf:cb:e7:f2:
                    bc:b3:cd:82:62:4a:ea:dc:81:42:30:e9:d1:6c:81:
                    ba:43:df:af:9f:77:4e:a2:26:53:bd:42:11:69:d6:
                    f6:74:ec:ba:27:94:c3:c4:7c:63:83:fb:e2:9e:14:
                    ce:87:a1:69:6f:ac:96:1c:9d:23:2b:24:27:0a:ee:
                    a4:26:3e:4c:91:53:f6:3c:f6:43:fd:ee:84:bd:c8:
                    9b:ec:3f:28:78:35:95:d9:bc:87:0a:6e:8d:c4:59:
                    36:b8:e3:07:d6:35:9b:06:36:f5:f7:d9:c4:fe:87:
                    fd:04:69:28:a5:34:35:ab:b2:c3:5e:d6:69:23:e4:
                    80:6e:be:4d:08:3b:e5:6f:89:e3:7a:d4:09:ce:ad:
                    4f:79:2f:04:ac:28:e0:8f:c6:06:20:e5:19:74:b3:
                    a8:d2:30:07:68:75:1c:f5:a5:12:9a:72:7d:03:33:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:BF:62:A9:B8:06:F3:0D:E6:60:4D:5F:53:E7:B6:9D:F9:70:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/e8d7806d-c458-3253-b585-aab0952b090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:9a:1d:1a:0c:86:d4:e6:5c:06:0b:33:a2:a1:09:ce:b1:
         6c:1f:5c:8f:0d:f5:20:ad:08:24:e3:ff:f7:2c:1b:ea:d2:17:
         7d:4f:94:44:5d:8c:9b:b3:a9:7f:71:eb:8a:27:4c:4e:e2:44:
         02:35:c1:c7:1e:9e:b5:6a:3f:7f:b3:49:c9:b8:2f:68:7a:4d:
         a5:19:0d:5f:f4:97:e2:55:61:c5:a1:1b:c1:fa:15:71:be:64:
         c8:77:00:09:55:18:ef:77:a3:97:93:1b:39:9e:ef:67:20:94:
         72:53:bc:d5:85:0e:c8:48:74:46:06:a9:cc:ef:b8:da:ad:24:
         b7:52:c5:e7:fe:b6:aa:ce:72:a8:ac:00:f9:72:29:7a:a5:ec:
         e3:db:64:66:d3:d0:97:ad:68:fc:55:eb:0d:f6:e6:59:82:1d:
         02:6f:ed:53:b3:39:c2:dc:9c:b1:1b:90:64:bc:e0:0a:2b:c8:
         5a:93:11:31:1f:f6:8a:76:6c:49:68:b6:60:db:90:8f:a9:a6:
         97:5d:fe:58:3a:36:f5:ae:76:4d:10:e3:ab:b1:df:de:c6:93:
         ee:3e:c4:7a:37:3b:5f:08:21:47:45:e4:97:e0:5f:d0:9a:a0:
         24:36:49:b0:9f:63:88:ad:fd:ae:8e:f4:dc:aa:3c:22:df:40:
         cf:cc:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:19 2025 by rpki-client on console.sobornost.net