Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa
File:                     f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa (raw, json)
Hash identifier:          MFQgUBv8Oz5YAioh2mdoou0wTsk1WWu5xdck6kOzg7M=
Subject key identifier:   24:C6:E4:21:FD:1F:35:9E:D0:61:E1:56:E6:8D:D6:8E:C1:B9:69:70
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584976A98EDE07B4DB33548BBA80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     32592
IP address blocks:        64.239.202.0/24 maxlen: 24
                          64.239.203.0/24 maxlen: 24
                          64.239.204.0/24 maxlen: 24
                          64.239.205.0/24 maxlen: 24
                          64.239.206.0/24 maxlen: 24
                          64.239.207.0/24 maxlen: 24
                          64.239.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8e:de:07:b4:db:33:54:8b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=28c1847f-5f57-4429-bc6f-6340736d7063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:79:eb:23:24:0b:be:a6:c2:1e:da:e6:a5:
                    e8:8d:b5:19:3b:a7:dc:b6:b8:84:1b:80:bd:29:34:
                    d6:82:65:5e:bd:08:05:fe:e2:19:0e:9f:b1:e1:1c:
                    9d:7a:9f:30:59:f1:28:24:3d:e8:cf:30:75:a9:e9:
                    c4:91:88:54:13:9c:58:d2:0c:a0:ad:06:26:84:d6:
                    e2:12:8b:3b:3d:ad:71:99:b2:97:d4:2f:b0:8f:ec:
                    2a:f4:0c:f2:24:61:39:9c:bd:46:bc:92:93:5f:3f:
                    c6:01:83:fe:b2:2d:7a:1b:a4:7c:c8:1a:6c:f7:7b:
                    ff:74:47:6a:34:68:53:20:00:e5:e8:f5:ef:3a:27:
                    80:15:f5:94:8f:8b:cc:b6:69:85:5a:bf:d4:f1:ae:
                    d4:e3:8d:e8:e6:db:66:c7:b5:70:ad:18:4f:f8:fd:
                    23:65:ab:8a:10:34:97:86:cc:d6:50:ab:4a:49:eb:
                    2b:0c:e2:98:f6:b1:6c:d2:45:aa:86:ce:96:f6:13:
                    0d:59:79:d7:be:34:7f:b0:24:b5:cf:9b:81:cc:4a:
                    29:bd:74:14:f3:db:0b:61:91:b0:33:0b:e4:24:a9:
                    2d:23:63:4b:e2:79:8c:51:04:7b:cd:4d:52:a0:31:
                    97:b1:cd:f9:44:2a:e2:c4:d3:55:c4:c1:f2:7b:9c:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C6:E4:21:FD:1F:35:9E:D0:61:E1:56:E6:8D:D6:8E:C1:B9:69:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f9d5f7f4-df4e-3d14-95a6-bda70afc631a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.202.0-64.239.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:60:4e:43:6b:51:64:38:e4:4d:67:ed:bc:6c:8a:1d:73:80:
         8d:0a:96:dc:df:02:fd:3b:6a:5c:ba:dc:91:72:ca:1e:a7:d7:
         9d:f8:31:69:06:5b:04:cb:77:f3:84:39:66:e5:39:07:82:75:
         1d:e2:8f:54:6a:b9:55:58:3f:fb:b3:b0:16:52:8f:06:97:c8:
         2f:12:8b:7a:7b:ae:fd:01:ac:ec:cb:8b:a0:32:cc:34:7a:a6:
         1e:47:f8:c1:e4:c0:fa:43:d8:6f:6f:e3:e9:9d:7f:2a:0d:fe:
         f2:e8:ca:e8:ec:1d:af:61:9e:38:36:b4:2f:8d:10:a0:61:4a:
         f3:e3:c4:8b:67:4a:2b:3a:a3:d3:32:74:97:b5:1b:e2:3e:10:
         4b:18:6d:a5:16:14:c8:a8:18:d1:b6:70:35:f3:5a:30:c9:32:
         ea:58:b4:96:11:03:d5:31:7a:ce:20:d8:7d:54:e7:26:cd:28:
         6f:fb:95:ab:b1:af:f3:ef:13:2f:69:31:c9:e7:74:b7:01:01:
         55:13:8a:39:cb:66:47:a3:2b:fc:17:99:19:f2:99:d6:c5:b2:
         12:19:42:3e:40:b2:86:ea:26:e6:fb:c1:04:fd:c7:92:22:29:
         cc:fd:70:14:2b:2c:8f:99:d2:d4:9d:4c:c3:72:56:3f:45:28:
         4c:b0:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:31 2025 by rpki-client on console.sobornost.net