Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa
File:                     03bb8480-7690-3aaf-be33-0289f8d26b99.roa (raw, json)
Hash identifier:          O1gGnaaUqDBGN62xlrivFRFuyoQuP4c7I99tbfZD5h8=
Subject key identifier:   7E:AE:26:5E:50:D1:43:7E:20:2E:E0:40:B3:49:4E:7A:77:D0:5A:C7
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858496A1997FDAC143752DB9E69FE
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     13760
IP address blocks:        142.190.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:97:fd:ac:14:37:52:db:9e:69:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=b9c8467b-203f-411c-a2e7-49b49147650f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:44:b6:7b:22:25:1f:bf:77:99:4c:fd:ed:
                    3f:10:ee:e5:35:e8:96:be:ba:67:ff:45:68:96:39:
                    24:20:4d:17:e6:00:71:2e:72:c9:9d:d8:1c:37:f0:
                    3d:9c:19:49:23:68:cf:17:dd:3f:81:0f:1f:8b:94:
                    5a:d6:59:46:59:19:91:15:ff:a2:71:f7:68:ea:ba:
                    8a:3d:18:98:06:f1:8b:27:6d:01:e8:ba:d9:e9:21:
                    70:63:21:7e:50:d8:83:31:90:ea:da:d6:df:a7:ec:
                    38:29:1f:9e:54:89:5d:0f:7d:8d:80:da:10:6f:fd:
                    04:2c:9c:a1:8c:30:43:6f:9c:ac:92:74:44:77:c7:
                    8f:fd:f8:2e:b7:c2:3a:90:bd:28:26:9c:98:ee:7d:
                    28:44:fd:9e:cd:00:63:6d:ef:44:3c:0d:57:99:55:
                    6e:d5:1b:20:26:dd:02:9a:23:70:24:19:23:c2:29:
                    ea:9f:78:6c:bb:99:77:ad:17:f4:ac:13:50:89:18:
                    b5:e1:b6:46:ff:a0:7e:62:c7:10:4d:c5:ad:f0:6e:
                    75:5a:58:0a:40:01:90:4f:ca:9b:57:9b:b3:4c:a3:
                    5f:e5:a0:fc:fe:34:be:94:d3:49:18:a5:c4:73:7e:
                    f3:5b:2c:a5:2d:e9:16:aa:8f:c7:62:6c:f9:d6:89:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:26:5E:50:D1:43:7E:20:2E:E0:40:B3:49:4E:7A:77:D0:5A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:22:0f:90:1d:de:4c:96:43:ba:0d:b8:2b:e3:3f:ce:d2:c2:
         11:58:b4:b2:82:7e:72:31:f6:0a:c3:1a:30:a0:63:c8:cc:32:
         4d:a9:7e:17:f1:8b:d6:34:be:d9:46:da:65:1a:5b:73:51:98:
         26:e7:22:75:3e:52:53:dd:ed:a7:cf:1f:eb:07:3f:73:67:18:
         c9:5d:2c:eb:11:a3:ec:00:76:2a:c5:cc:f0:ea:10:88:91:be:
         f1:17:00:55:ca:be:32:ec:ea:95:0f:1e:7c:2d:dd:99:86:a5:
         81:08:5e:52:b5:15:88:50:ad:53:b7:ef:3f:d3:1d:b8:e9:3d:
         0c:34:1d:cf:ff:5a:8d:2e:02:ad:85:21:a0:59:9b:23:cc:cf:
         5b:29:67:d5:b0:7e:3d:bf:54:7b:a3:31:a2:67:f0:78:22:c7:
         b0:d2:04:e0:94:59:2a:9c:f0:37:ce:57:27:51:9b:72:ef:6e:
         46:f4:eb:f2:a4:92:ee:91:5b:71:34:1d:1f:79:8d:15:2f:68:
         00:5f:57:84:2d:73:57:ba:5e:fd:b8:11:d5:2b:b7:a2:72:1d:
         54:ee:d6:1b:29:17:2e:87:f9:ac:f9:23:7c:a2:c3:b0:fa:6b:
         0e:7d:d1:81:a7:0d:bc:58:da:35:6b:57:cd:e4:68:c5:b7:c4:
         3f:49:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net