Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
File:                     e9195c1c-eac2-3b7e-9493-9fcabda112be.roa (raw, json)
Hash identifier:          LoXv8s6eCNi2AezSNJgwJdzLym4rybX+aKmqQGehfwQ=
Subject key identifier:   F8:45:91:86:A2:A8:82:3B:BE:E2:C1:95:9A:D1:DF:FC:BB:CF:30:E5
Certificate issuer:       /CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
Certificate serial:       010D0C9F432858494733E1F1A439EED5A29C2200
Authority key identifier: DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     397546
IP address blocks:        162.249.184.0/22 maxlen: 24
                          2602:fde1::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e1:f1:a4:39:ee:d5:a2:9c:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=062b4b36-6e8b-4075-ab0f-08b3e2970ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:3e:a3:7b:69:20:60:b5:bf:54:0e:93:64:
                    0c:ac:5f:ad:2d:9f:bc:4b:25:8e:cb:09:b2:7c:ff:
                    26:67:34:4a:51:50:e8:49:e2:08:bd:0d:ad:22:e0:
                    a9:2d:69:89:46:cb:83:1e:d5:5b:10:a1:a8:4c:40:
                    08:ac:a5:83:ff:1b:23:24:d9:3e:ac:fd:08:df:b2:
                    19:0b:ed:68:f4:41:3e:20:f3:62:9f:5c:03:b8:ea:
                    d4:46:04:b0:83:ed:3e:3c:7e:da:8b:54:94:99:7e:
                    f1:f0:0c:08:ae:f8:fa:53:7a:20:89:5e:4c:75:4b:
                    a4:99:6b:39:cd:48:d4:8d:db:cb:ce:cc:5d:1a:06:
                    32:b9:46:c7:03:f8:c1:50:c2:97:b8:fc:93:82:f3:
                    f3:7d:c2:0f:94:80:c4:6e:22:ec:11:85:92:6c:e4:
                    6c:dc:a2:4e:be:47:5f:95:b0:50:6b:39:32:ed:d0:
                    b9:0d:cd:f3:e1:db:8b:fe:84:79:96:3d:fe:34:72:
                    b2:02:5a:82:71:71:c1:4e:a5:27:02:b4:41:68:90:
                    12:24:6f:86:a0:cf:64:0b:d6:e4:fc:d8:2a:8d:e5:
                    f6:53:e3:11:ef:9f:68:cf:0c:d9:e9:50:2e:a3:4c:
                    b5:90:94:d9:51:b2:91:47:5e:a7:74:8b:9d:38:8b:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:45:91:86:A2:A8:82:3B:BE:E2:C1:95:9A:D1:DF:FC:BB:CF:30:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/e9195c1c-eac2-3b7e-9493-9fcabda112be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl

            X509v3 Authority Key Identifier:
                keyid:DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:45:fb:c4:b3:a2:29:bb:6f:0e:44:11:77:3c:a2:60:a3:e9:
         bf:94:65:35:77:22:03:b7:82:e4:98:d7:d4:05:13:9e:11:db:
         c3:eb:1b:db:74:16:8e:14:20:82:a0:9a:2d:4a:af:ae:40:c7:
         9d:0a:52:71:e7:29:3e:af:91:07:ce:4d:72:28:d2:a6:c6:98:
         99:ef:dc:fe:9c:26:a4:82:56:a3:6b:5c:5a:aa:5d:d2:0c:0e:
         71:6c:86:56:b4:72:ff:11:cf:10:a0:ed:66:cf:f6:e5:c7:5e:
         4a:04:7d:51:3a:85:92:dc:0b:33:75:52:ab:ed:7d:eb:3d:c0:
         46:c8:20:c5:45:43:da:e5:74:70:c5:dd:56:a9:38:77:ab:26:
         0c:a3:d5:6f:c2:41:b1:67:9a:07:49:a1:a8:fd:d6:79:d6:eb:
         84:00:9d:0f:30:45:78:5e:dc:4d:2a:25:11:8d:47:6a:54:bd:
         65:0b:53:be:d1:8d:6a:75:31:ae:68:ec:62:b5:8e:43:a1:a4:
         ac:ab:9a:a6:e6:a1:7f:7e:9e:79:20:c9:39:b1:b6:62:dc:f3:
         40:cf:a9:58:ee:e5:bd:2f:d0:4e:f7:97:a1:02:e3:a3:ac:65:
         4e:53:f5:0e:42:10:b3:fa:28:11:70:82:22:1f:ed:f6:74:19:
         e7:82:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net