Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/ab9d8505-baa2-3551-a4df-649745afeb42.roa
File:                     ab9d8505-baa2-3551-a4df-649745afeb42.roa (raw, json)
Hash identifier:          fpICduP701ZP/0kdW4Q+YSwwc86Ynf9VmtOUw0XvPHE=
Subject key identifier:   4F:CC:DE:F9:69:5D:43:C5:67:0C:7E:B1:E1:F1:B2:C4:52:24:1E:8F
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858497279AFFABF7EFFE5D3F34100
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/ab9d8505-baa2-3551-a4df-649745afeb42.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     13760
IP address blocks:        142.190.80.0/23 maxlen: 23
                          142.190.82.0/23 maxlen: 23
                          142.190.84.0/23 maxlen: 23
                          142.190.86.0/23 maxlen: 23
                          142.190.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:af:fa:bf:7e:ff:e5:d3:f3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=32866313-414d-438e-8fa7-171c4f89098b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:30:61:6c:e8:92:97:62:9f:40:75:03:97:
                    26:84:11:f4:93:64:72:df:ed:cd:57:e4:d9:2a:a1:
                    42:8a:e2:33:ad:38:48:bf:f1:d9:ce:1d:46:02:6e:
                    6b:db:67:c7:a5:b9:9e:85:ae:34:d0:c3:cb:e9:5b:
                    22:ad:30:ca:a5:0b:0f:5e:4d:e2:e6:46:d2:4c:32:
                    4d:01:d6:00:f1:cd:5d:84:8f:09:de:0e:4d:d6:ae:
                    c1:e4:2a:c1:0c:41:0f:18:db:d2:0d:3f:56:e4:32:
                    8e:72:29:c5:b8:1a:82:ed:6b:67:0d:f8:43:2f:64:
                    7a:59:5a:61:43:49:27:24:c0:d2:b0:44:a2:da:1d:
                    b4:59:35:2b:66:0e:e5:8b:d4:47:a9:d7:24:27:a3:
                    b7:05:91:fe:6c:dc:62:d0:83:90:79:f3:45:35:78:
                    aa:e9:e1:ad:f4:23:9c:5d:d6:02:cd:cc:93:cb:1d:
                    6b:fe:fb:80:64:8f:45:4d:99:18:ab:45:db:15:0d:
                    c5:3c:25:1f:6a:1c:17:37:5e:de:e4:6b:1e:e0:ec:
                    b5:7a:fa:47:26:e8:63:a7:e9:a8:c1:88:da:15:9e:
                    48:18:ae:74:e6:21:b9:46:29:ff:27:97:f6:4c:45:
                    71:ce:f0:36:58:28:97:61:ec:8a:6e:78:cd:d0:ae:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:DE:F9:69:5D:43:C5:67:0C:7E:B1:E1:F1:B2:C4:52:24:1E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/ab9d8505-baa2-3551-a4df-649745afeb42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.80.0-142.190.89.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:23:a4:28:15:3d:9c:af:e2:4c:3e:71:24:45:37:d3:4f:e2:
         c4:2a:60:97:f4:6b:73:fc:5b:b8:0f:b7:fa:de:6e:ef:c5:25:
         13:77:ab:d6:3c:4c:28:f1:4e:4b:ac:d9:e9:25:03:cb:84:4c:
         34:83:fe:40:c1:4c:b3:f0:fd:f7:1f:14:06:99:02:f7:7d:c9:
         4f:a2:16:bb:5b:f0:62:ec:25:84:d6:68:d1:a0:1b:1a:24:62:
         44:e4:17:83:71:0d:bc:45:9f:93:c0:4d:6e:93:ab:3a:3b:8e:
         05:09:aa:5a:0a:aa:b8:24:24:71:c5:7a:62:23:3f:a3:bd:c1:
         6a:ad:b9:6d:a5:5f:11:4c:f0:e3:b4:fa:aa:16:47:e3:cc:58:
         02:e6:04:6c:1f:9c:a8:9b:21:72:c5:93:36:e4:8b:f6:40:68:
         78:3a:2d:90:e8:09:d9:02:fd:b1:c3:a7:78:dd:64:97:75:01:
         a6:8a:1a:99:cf:d7:43:1c:dc:9b:72:0c:3b:d3:74:54:bf:86:
         3f:e6:b5:4c:4f:c7:60:69:0b:2e:fe:01:a8:75:3b:e7:7d:15:
         b9:3e:20:3a:50:b4:d7:a2:b6:d4:fb:a7:ac:17:7b:91:10:8e:
         7f:cc:27:66:36:75:f8:d2:2a:4d:7b:eb:86:45:94:1b:de:f9:
         a7:ab:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net