Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0908a7ac-4c62-3d9d-be31-68484f0f08f9.roa
File:                     0908a7ac-4c62-3d9d-be31-68484f0f08f9.roa (raw, json)
Hash identifier:          sBj/hbY0Fxgh0oRPygkIew3HZXWXU3D6FIB62Ah8i8w=
Subject key identifier:   B7:4E:B5:5D:9A:1A:39:31:A7:2A:AD:6E:3D:12:C2:2A:D0:4B:48:76
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285849648444E096801BE01296A880
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0908a7ac-4c62-3d9d-be31-68484f0f08f9.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     394354
IP address blocks:        162.219.50.0/24 maxlen: 24
                          162.219.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:44:e0:96:80:1b:e0:12:96:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=863ae280-171e-4a20-8b4f-63c1f2d22248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:93:93:4c:b2:df:29:fe:af:54:40:24:5e:
                    6d:36:bd:b1:61:43:76:cd:23:43:e4:77:ed:34:3d:
                    4b:d1:dc:2f:36:f4:76:f3:21:da:1e:01:4b:bc:44:
                    39:be:ba:56:b7:13:18:87:3c:05:b8:c5:14:2c:28:
                    b8:f7:65:f6:96:3d:a3:93:bb:c3:50:ba:58:b4:2f:
                    24:34:53:1b:a2:d5:93:e5:ae:65:fc:c9:31:c5:a4:
                    47:22:19:65:24:49:83:0d:a1:a3:5c:99:6e:1a:be:
                    dd:8c:62:95:10:3c:73:fd:93:db:66:7d:13:00:a0:
                    a1:45:5b:26:19:6d:01:5c:f0:15:1e:97:ff:97:01:
                    4d:d7:51:51:c3:14:1c:43:8b:ae:a2:cf:73:ca:7f:
                    fc:48:ab:5c:f5:6b:ee:b1:1c:cd:3f:5e:ab:bb:08:
                    7e:47:63:cb:2c:53:3b:bd:38:9c:5e:0a:61:c2:64:
                    af:92:c8:9e:c1:f3:9f:38:79:b4:8d:2a:af:8c:61:
                    47:5d:0e:d8:27:72:3d:7a:55:74:5c:6b:7e:ce:13:
                    ee:8b:47:a9:fb:49:60:d1:0c:85:be:14:17:89:fa:
                    b2:1f:d4:d4:55:0f:8b:98:a2:e9:c3:60:34:e7:79:
                    6a:5e:86:b9:8a:45:af:3b:0c:71:16:cb:41:75:d1:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4E:B5:5D:9A:1A:39:31:A7:2A:AD:6E:3D:12:C2:2A:D0:4B:48:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0908a7ac-4c62-3d9d-be31-68484f0f08f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.50.0/24
                  162.219.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:19:7d:51:d7:46:a4:94:45:72:76:cb:69:4e:bc:ce:83:8a:
         30:0d:8c:df:a8:d1:bb:aa:8f:07:26:97:1d:59:e7:9b:aa:8e:
         13:48:de:f6:7c:8b:0f:dc:bf:7c:fc:8c:3e:7f:1f:70:9e:ca:
         81:a6:98:b9:7a:0b:a4:5e:cf:2d:f4:3b:94:b6:61:d6:b4:83:
         53:bd:f0:24:87:db:10:da:95:1c:a8:9f:b0:2d:c0:02:d4:4d:
         71:82:3e:37:cc:5a:2b:86:4f:b0:57:a7:c5:dd:fb:bd:a2:f5:
         49:85:03:7e:ba:38:5d:6b:02:e2:3e:0a:08:98:ac:4f:c6:57:
         3d:1f:7a:2d:3c:85:9d:37:f3:aa:c6:35:2f:cd:fb:63:98:e6:
         d9:f5:c3:20:80:68:f3:7d:2a:f8:a3:1c:18:48:bd:8d:35:2b:
         71:66:56:52:c8:4b:9f:ff:0e:93:70:69:e2:ce:88:79:23:0d:
         29:6d:e2:e4:39:75:c2:f2:19:1b:bf:30:a5:3f:bf:9c:df:e0:
         2a:9d:08:f9:95:c8:59:95:1a:2c:39:82:8d:5c:3b:00:9b:a9:
         96:e1:c5:9b:42:d4:4e:a5:d8:18:b0:5a:a7:f5:a0:b2:f2:6d:
         54:44:6c:e8:7c:28:71:0e:86:35:2f:bb:5d:fe:ac:92:35:b1:
         6a:e3:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net