Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a8d5ba-2525-3ca1-8386-5e9cbdfcf48d.roa
File:                     31a8d5ba-2525-3ca1-8386-5e9cbdfcf48d.roa (raw, json)
Hash identifier:          gAnrJMN3mYLBMeAltb2PxbsPodahjAoPd7+T9+i1lNM=
Subject key identifier:   84:F1:F3:2D:A3:9D:BD:C2:89:81:5D:E1:79:D6:C9:D9:A7:DF:23:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584973DEE4D64B243170CAC4D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a8d5ba-2525-3ca1-8386-5e9cbdfcf48d.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     32787
IP address blocks:        72.52.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:e4:d6:4b:24:31:70:ca:c4:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=f1d1996b-a0a1-4243-9680-c631abc20f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:10:b7:dc:ca:fe:49:3a:06:4e:5e:9d:44:
                    68:4b:b0:fa:fe:35:5a:7c:c9:c1:9d:59:e4:7f:4d:
                    ba:18:0b:0c:8c:5e:a9:2c:e6:3c:6f:55:fc:17:d6:
                    19:ba:24:23:dd:92:ad:40:d5:7b:ea:84:b9:db:30:
                    e8:ea:90:22:d0:61:12:70:4d:e9:18:8f:7c:47:e1:
                    c3:1b:95:03:d8:e5:71:96:1e:e3:35:91:37:b3:6c:
                    75:b0:50:a0:da:e9:d2:36:3b:44:11:57:22:bf:a3:
                    87:e9:87:df:f3:0b:b4:73:b2:1a:e7:bc:16:0b:3c:
                    03:44:45:a0:e2:bc:27:a4:2e:6c:21:cd:59:6a:2f:
                    90:b0:14:1e:45:d8:44:f4:4f:66:5f:44:cd:f4:e8:
                    88:b1:c0:2d:a8:1d:a8:f7:86:3c:97:6e:11:ac:ea:
                    d7:c0:35:1d:76:46:31:d1:35:4d:ea:57:aa:a3:b1:
                    63:1b:23:0e:fb:34:0e:f5:99:14:5e:d0:77:c2:b6:
                    2c:f0:38:bd:48:b4:9d:23:e5:e6:e5:b7:b2:a3:99:
                    b7:b4:e7:36:0e:87:3a:3e:9c:d0:1f:da:1a:09:08:
                    2d:5e:2b:d4:7f:cd:da:52:43:cf:83:54:58:38:88:
                    d3:09:b3:3c:5e:a1:93:a4:22:b5:3c:b4:7d:77:60:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:F3:2D:A3:9D:BD:C2:89:81:5D:E1:79:D6:C9:D9:A7:DF:23:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31a8d5ba-2525-3ca1-8386-5e9cbdfcf48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:75:df:58:86:5a:90:35:79:9c:27:c7:98:69:0c:e6:95:
         bf:23:1c:17:d8:b5:2e:1e:02:3c:33:5e:83:66:1e:bd:e2:31:
         09:c7:eb:0e:4f:31:2c:26:36:23:a7:19:65:69:18:8f:70:b4:
         90:9d:5d:55:c6:8e:7d:2a:2e:f7:b9:49:50:50:6a:5c:d3:c0:
         24:ec:ef:31:39:63:da:f6:3a:f2:0f:00:ff:58:4d:d5:62:0e:
         79:0e:0c:21:61:83:69:c3:91:60:5c:c5:ac:fa:07:1b:5b:5a:
         7d:28:9c:5a:bd:6f:17:4a:2c:e2:a8:cf:2d:d0:8f:5f:81:89:
         c3:a2:a4:97:d2:3c:d6:a4:7e:6c:db:52:41:cc:f5:ad:c9:1a:
         2a:e2:58:f8:8e:61:ba:79:6a:b8:f5:db:d5:35:3b:d0:aa:02:
         a1:43:b8:a3:30:34:78:8e:e6:02:d6:64:a0:d8:48:66:28:34:
         d0:02:14:9e:3a:af:43:45:08:0a:63:5f:49:78:1a:aa:f1:fc:
         ba:fb:99:4c:e4:21:98:96:27:14:5d:24:fa:d5:10:37:91:d6:
         66:5c:10:90:9f:44:f1:20:ab:45:f9:2b:55:ac:ab:88:67:11:
         41:2d:e4:14:44:9a:4a:45:0c:7e:aa:af:af:f3:88:2c:aa:3d:
         16:a5:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:41 2025 by rpki-client on console.sobornost.net