Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa
File:                     30143748-7ffc-3def-9c7b-2eed49513669.roa (raw, json)
Hash identifier:          0H0uKYQkg9Sj03pJu+eMFkLBOBWTS+KVvEZ6P1Xe8HA=
Subject key identifier:   2D:A2:A1:36:F5:FB:FC:79:C7:CE:CE:99:BB:51:8F:E4:F2:71:CC:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849806F35238C062D9C4AAD0D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     36183
IP address blocks:        172.224.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:35:23:8c:06:2d:9c:4a:ad:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=a06d9774-7118-43ac-8a93-b4d25f8f321c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:3c:10:a6:8e:84:0d:b7:24:43:e2:29:f5:
                    df:9c:e5:5c:47:f1:ad:f3:ba:34:42:d2:e0:11:39:
                    62:a3:bc:4a:67:d0:e0:75:53:33:b0:ff:57:42:fe:
                    c3:f4:69:ba:ca:ec:b1:b2:c2:f0:6d:1f:21:31:22:
                    de:a0:a6:46:5b:2b:50:20:9c:e6:55:60:e6:73:d5:
                    2e:f2:5f:20:7a:2c:26:7b:be:95:8d:78:0b:6b:77:
                    93:ae:00:49:9f:1e:4c:af:f7:10:68:3a:5e:45:de:
                    00:af:b7:b7:ed:39:85:88:47:dc:69:51:52:e0:91:
                    31:f2:7b:ca:6d:92:fd:dd:28:19:98:cf:b2:e6:c9:
                    c8:a3:0b:b9:c6:80:31:1f:55:c9:96:81:53:cd:7a:
                    87:a7:ff:c8:f8:1a:64:7c:e4:67:6f:89:e7:ed:e6:
                    8e:a6:ba:bf:21:73:fc:2a:86:e3:b7:bc:55:2f:17:
                    11:53:62:7c:b4:53:eb:51:99:3e:13:0c:02:35:ab:
                    27:52:1e:fb:98:f5:b1:01:15:85:c2:e7:99:99:5e:
                    38:2a:a5:60:7f:ad:91:ea:3c:a8:23:b7:f1:b5:44:
                    1e:66:b6:13:4a:e5:85:9d:be:32:fb:87:e5:bb:32:
                    9b:e4:64:ee:fc:64:83:df:6c:52:61:4a:67:37:ef:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A2:A1:36:F5:FB:FC:79:C7:CE:CE:99:BB:51:8F:E4:F2:71:CC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/30143748-7ffc-3def-9c7b-2eed49513669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.224.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:74:3e:2a:d1:72:91:63:86:38:5c:6d:f5:ba:e0:bf:96:e7:
         3f:14:1a:05:c1:e8:ba:2b:da:1e:4d:59:db:ca:26:dc:1f:27:
         45:4e:6e:de:a0:cd:f1:a4:6a:21:b2:80:93:71:b9:5a:84:af:
         71:e7:f0:e2:bc:f5:57:aa:fc:85:83:b3:b3:38:d9:c1:94:fa:
         11:1b:55:92:b2:ac:35:62:b2:1b:9d:e6:ec:8e:87:26:8b:ae:
         aa:88:9e:56:e3:c7:82:45:9c:5f:12:e2:97:ee:a7:05:6b:ca:
         74:8f:11:ea:40:e3:84:b3:94:c4:81:5a:f7:22:26:64:26:37:
         7c:c7:ee:dc:06:c8:c2:bf:f8:8b:0c:16:06:a3:5f:d4:87:34:
         4a:8b:68:0a:15:46:bd:f6:1c:1d:23:52:c0:3a:7c:a1:a2:9e:
         c1:dd:88:92:17:3c:25:93:c1:ac:0e:1d:a4:de:3e:ea:3a:b8:
         d5:95:12:9c:60:c2:0d:07:28:92:ff:51:8e:f2:5a:da:3d:86:
         89:a6:28:47:c3:c7:12:83:20:c7:db:bb:49:a9:f3:af:5b:f1:
         09:72:5f:d0:ed:33:d6:4e:91:fa:36:6d:c3:9b:c1:99:a1:7c:
         45:5c:18:50:91:db:d9:10:07:f1:9c:04:04:0d:78:54:31:66:
         da:07:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:40 2025 by rpki-client on console.sobornost.net