Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa
File:                     574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json)
Hash identifier:          CRKluW2vTcomgay17zrvUW8WLc8RYYbT1oplA03/hAM=
Subject key identifier:   1A:C2:43:37:F0:0F:73:32:45:F0:B2:C1:B6:4D:C7:74:F1:A9:0D:15
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849631ECEB36590723DAD519540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa
Signing time:             Wed 02 Apr 2025 01:00:46 +0000
ROA not before:           Wed 02 Apr 2025 01:00:46 +0000
ROA not after:            Tue 01 Jul 2025 01:00:46 +0000
asID:                     15169
IP address blocks:        142.251.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:1e:ce:b3:65:90:72:3d:ad:51:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr  2 01:00:46 2025 GMT
            Not After : Jul  1 01:00:46 2025 GMT
        Subject: CN=91d31af8-1761-4a07-afed-098a3d5fd68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:6c:07:c5:d0:b1:d7:3f:23:d4:57:4c:fb:
                    26:e4:8b:ff:91:4f:a8:9f:59:ea:07:2e:b3:2d:b2:
                    3e:68:c9:a2:c7:53:0e:a5:08:4f:37:fc:c9:e7:0a:
                    95:2a:d4:d0:bd:0b:a1:b4:49:f9:e0:1d:1e:f6:47:
                    52:f2:93:4d:23:7a:c1:38:8f:cf:1f:24:31:12:ad:
                    a3:94:e5:0b:c0:22:69:7d:cd:9e:46:85:49:29:62:
                    1d:e9:21:df:4c:0c:73:1b:69:85:7c:d8:cb:8a:69:
                    b8:19:c0:12:82:fa:ac:cf:78:30:d5:e1:29:8d:7a:
                    c0:9d:68:c5:7a:f0:12:78:b4:47:1b:0f:83:7b:4b:
                    01:e0:7f:b6:50:e0:d8:ae:74:28:bd:39:d9:cb:dd:
                    61:d3:cd:a6:61:d9:d4:79:4a:05:d4:60:bb:e9:80:
                    be:61:25:36:e9:94:68:21:a9:f1:dc:02:74:6a:12:
                    65:14:76:00:dc:aa:a0:21:ef:41:6d:12:13:7f:57:
                    a8:c6:ab:59:b7:89:20:f7:ba:2d:80:04:88:71:27:
                    7b:15:be:e3:ee:0d:0a:fc:25:9d:ec:47:56:6a:66:
                    fa:d7:ff:9b:02:50:d2:d2:e3:71:4d:6b:d8:63:09:
                    38:72:e6:cf:5e:a7:a1:4f:5b:60:e0:64:e9:9b:d1:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:43:37:F0:0F:73:32:45:F0:B2:C1:B6:4D:C7:74:F1:A9:0D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:53:4f:b1:9c:62:34:34:c3:fa:ab:0a:af:6c:e1:8c:66:68:
         f8:ee:b5:4c:c4:12:91:72:d0:44:42:25:e8:3b:c6:c1:29:20:
         4d:f4:a8:a4:3b:1c:61:63:53:8b:33:e9:6f:1c:c6:c1:2d:b4:
         0c:8a:67:f9:7c:88:2e:50:18:6b:43:29:7c:38:18:6f:57:39:
         05:95:35:76:07:45:08:01:c0:94:7a:2f:37:fa:3d:cf:c3:fa:
         73:8d:bf:3c:43:d4:b2:2d:c7:69:2b:87:c0:42:92:96:87:42:
         f7:cb:2b:62:8e:77:26:ee:35:0d:f1:4c:bf:f1:fd:88:02:e2:
         b4:86:0d:78:eb:55:13:b9:98:ad:50:45:92:f3:00:0b:4e:77:
         77:0e:b3:21:3d:1a:86:25:96:9b:db:91:26:37:cf:95:66:98:
         34:e9:c8:b4:05:88:30:aa:fa:9c:eb:58:dc:3f:d4:e0:a3:24:
         37:d4:a8:b2:eb:e4:e6:bb:47:11:35:5c:97:6f:3a:50:86:d0:
         42:fe:94:d5:0f:73:28:53:f3:f4:cf:31:74:5a:e4:bd:2b:eb:
         b2:66:84:e0:bc:00:82:0b:28:8f:c9:0b:a1:fe:4c:65:2d:8c:
         0f:d9:97:ca:2f:66:ea:a4:fb:b8:a3:70:b0:e5:a6:0c:0a:f2:
         26:03:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:04 2025 by rpki-client on console.sobornost.net