Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa
File:                     cd4c80fc-4bfc-38d4-97da-230d3865660f.roa (raw, json)
Hash identifier:          BN7m2KQddRlABcYY2cSdSiK0yXG6u0s1/PzEjkTlyB4=
Subject key identifier:   0D:EC:83:B1:DB:1B:09:C7:D0:22:E8:1C:1E:FB:BD:6D:C5:59:84:4D
Certificate issuer:       /CN=50a1e076-031a-4889-966a-80f9220a2ed6
Certificate serial:       010D0C9F432858494733D6BDE7DD839B7C69BEC0
Authority key identifier: 77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     32861
IP address blocks:        174.34.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:d6:bd:e7:dd:83:9b:7c:69:be:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50a1e076-031a-4889-966a-80f9220a2ed6
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=fcffcdef-375b-4dc5-85fc-453352d98656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:17:96:b3:bd:62:67:51:e2:ab:0d:3b:21:
                    59:b4:e4:59:ba:3e:27:25:49:fd:6c:6d:01:0c:d1:
                    6e:8c:59:cf:1f:81:4a:0b:91:c2:1d:1c:86:62:8b:
                    58:fb:30:80:b0:62:11:05:ae:f3:45:66:a5:41:92:
                    22:cb:f7:a4:02:99:a3:94:e2:cf:e2:8a:f5:f6:6a:
                    61:1d:b2:3f:68:e0:f3:32:03:fc:4e:45:f6:2f:9c:
                    b6:0d:46:ab:41:72:f2:25:18:e7:4a:74:7b:c9:d6:
                    3a:ac:d4:d5:5a:a9:a0:57:aa:45:b4:54:4f:7b:35:
                    46:ce:55:3d:d5:29:14:2c:fc:35:62:93:a0:8a:f4:
                    62:98:fd:24:4b:eb:4f:ef:9b:e6:93:85:6b:74:24:
                    1b:1b:75:3b:1e:5a:07:a5:29:df:2c:22:cf:bc:b5:
                    7b:fc:9b:cc:c7:87:7f:ab:40:93:6b:c2:05:47:b9:
                    99:c4:f9:eb:b9:c1:67:91:58:05:5a:8c:0c:86:39:
                    13:5d:98:ea:71:08:32:ac:3a:66:6f:19:67:ce:7a:
                    7b:b8:3a:38:08:37:98:e6:d5:fa:83:f7:c5:17:60:
                    e3:9a:48:82:c9:c1:89:48:ff:b4:5f:0c:bc:7e:da:
                    6f:08:da:03:c7:b2:3c:4a:b4:9c:8f:c5:92:15:bc:
                    27:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:83:B1:DB:1B:09:C7:D0:22:E8:1C:1E:FB:BD:6D:C5:59:84:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/cd4c80fc-4bfc-38d4-97da-230d3865660f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6/50a1e076-031a-4889-966a-80f9220a2ed6.crl

            X509v3 Authority Key Identifier:
                keyid:77:D6:AE:77:72:F6:9F:EF:38:31:F4:9E:3A:35:C7:06:63:50:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/50a1e076-031a-4889-966a-80f9220a2ed6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.34.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:a4:87:b1:85:c6:d5:01:cf:57:81:6b:8f:fa:1b:25:c9:
         dc:58:be:3b:48:47:14:4d:a7:2b:b4:4a:e2:12:3d:53:4b:a6:
         eb:c4:5d:63:50:cb:f8:e7:08:c5:54:90:40:0a:0e:83:34:3d:
         f0:49:7d:7b:ef:b2:6e:30:9e:64:ab:fc:5c:a3:98:d2:98:89:
         d4:12:33:2c:d6:0b:85:c2:94:2e:6a:93:1f:16:00:ff:b7:74:
         58:1f:12:46:90:58:ec:0c:ce:dc:f5:ae:77:3b:c7:e0:50:e7:
         55:96:ce:14:96:75:bd:c8:27:e0:1a:df:6a:3b:3a:e2:72:42:
         cf:d4:3c:69:b9:61:ce:a7:ad:86:43:7c:c9:f0:a1:fe:55:bb:
         35:94:c3:a3:9b:ee:e0:0a:44:93:ea:cf:03:23:a3:10:7e:f9:
         8e:7e:9c:ed:f7:1b:ad:7f:32:1f:3a:86:b0:1e:d4:fb:0a:ed:
         8d:0c:87:1e:55:ff:07:25:0f:ba:3c:2d:bb:d4:e3:12:d7:95:
         0a:87:f1:8c:54:5a:97:3d:a9:3f:21:c2:59:79:4a:fd:d7:ed:
         39:7f:e2:c2:8d:3e:ae:7e:72:cd:f2:d6:58:a5:e5:67:48:4f:
         4d:80:ef:a7:6f:65:bf:a2:95:c7:df:2a:a4:a0:80:72:ac:a9:
         78:9c:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net