Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa
File:                     33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa (raw, json)
Hash identifier:          0oVirBk/vVwVxVsqjiH5mvXsuWH3K78WVt8Hi6ajgmI=
Subject key identifier:   BF:E6:7B:96:8F:A9:22:69:38:91:9D:73:60:ED:03:29:42:7D:8B:A0
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F432858494E2EB0B53A2F1A915461D570
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        207.202.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b0:b5:3a:2f:1a:91:54:61:d5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=b8139112-e3a6-4bf5-b96c-2d4f12d84a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0e:44:ec:aa:1f:d9:84:05:0f:39:f4:9b:48:
                    df:fb:92:c2:02:cd:97:f2:1b:55:92:a2:b6:d4:9c:
                    12:15:eb:c6:ac:6c:83:ab:58:21:2d:37:59:ab:50:
                    9a:aa:42:21:e4:a6:74:a1:46:8a:bd:18:05:84:3f:
                    7e:96:e0:a9:48:0e:b2:a8:0c:8d:af:eb:c9:ae:13:
                    fa:ee:b0:5d:d0:d7:81:d7:4d:c7:97:0b:2c:2a:cd:
                    8a:29:ba:02:56:f5:9c:f4:82:d7:04:61:89:52:fe:
                    bb:08:ed:17:95:a3:98:d0:3e:6e:a3:7c:62:7f:54:
                    6e:13:22:43:dc:d5:3f:9c:b0:b6:a2:6e:b6:e7:e2:
                    cd:e2:e8:74:8b:d2:ac:a8:8b:8f:3d:01:0b:60:f1:
                    44:33:49:ae:b1:8c:4e:41:9b:1b:ae:76:ea:de:52:
                    40:4f:f5:2b:1f:5a:aa:e3:7a:ad:fd:01:2c:cd:d7:
                    66:83:e9:22:83:22:9f:1a:34:e7:a9:ca:23:21:81:
                    a6:18:05:c4:24:9d:a2:7e:f8:1d:f4:49:67:63:1c:
                    73:dd:94:a9:a5:bb:2f:06:b5:30:8a:df:c6:54:32:
                    3f:ca:7f:b6:26:a6:df:f4:a0:07:44:b3:4f:f5:ad:
                    37:d6:7b:47:f1:be:f1:46:6e:ff:02:41:f0:0d:34:
                    4c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E6:7B:96:8F:A9:22:69:38:91:9D:73:60:ED:03:29:42:7D:8B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/33a0e937-3e8b-355e-8fc9-41b8d50dd070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:4e:57:ae:80:1c:66:d3:53:aa:15:2e:cb:3c:02:c1:d8:
         9a:6a:37:bd:57:4b:2a:46:f7:49:f4:96:eb:50:57:4d:1c:8a:
         63:b5:d6:10:44:aa:4d:3b:aa:ed:a4:2d:f7:14:d2:58:e3:2a:
         f3:97:1d:94:17:86:ad:31:de:70:57:e0:b5:41:ff:cd:6f:d5:
         e3:71:c3:63:1c:e1:3f:a6:bc:19:2a:fd:23:42:db:9c:81:d1:
         34:13:0c:a8:73:0a:9d:1b:5b:10:5e:cc:87:04:48:b7:b8:1f:
         b4:00:0a:ff:28:a8:58:d8:4a:f6:92:22:7e:82:9e:f5:7f:6e:
         73:e9:0b:55:52:2c:18:ac:f8:af:aa:df:f9:32:cf:95:61:03:
         53:cb:93:68:68:a5:03:98:c3:9a:3d:42:44:a9:cc:70:80:bc:
         be:a0:17:c5:6f:63:11:39:43:ce:7f:d7:0e:f7:2d:88:38:99:
         e6:56:4c:ed:ae:85:fb:25:3e:92:1c:69:38:09:21:38:ee:21:
         e2:49:75:e0:e1:b8:85:38:3c:76:39:89:4b:6e:8b:69:05:b1:
         04:20:a1:bf:a7:89:10:98:13:fb:0e:1e:da:7c:8d:f2:9e:17:
         11:d5:b0:08:a4:9e:e0:45:ef:59:63:d6:af:f7:08:fa:cc:50:
         e6:5e:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:01 2025 by rpki-client on console.sobornost.net