Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa
File:                     17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa (raw, json)
Hash identifier:          VXInIhY+5jVyGUUvAYnY/G4hHIrWH+d0p5AxGDvJjhc=
Subject key identifier:   C5:8A:21:7B:28:1E:F6:B1:1F:FA:78:01:37:F7:A8:98:8A:EE:78:F2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2479AAFC35215ED335DF80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.158.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:79:aa:fc:35:21:5e:d3:35:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=a0c49d0e-a0c8-4a42-adf1-3c5d75e133c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:86:3f:24:37:2e:91:59:0a:ee:75:2d:a5:
                    7c:8f:2f:49:bf:ba:17:5c:a7:18:a0:47:6c:28:9d:
                    d8:ee:2f:22:6c:bf:17:bf:82:fc:8b:be:25:a9:0d:
                    bf:f5:c0:ab:f1:a5:6e:58:4d:55:2d:8e:fa:b9:9a:
                    f7:ef:27:25:81:d6:32:41:fe:43:8f:77:0d:d2:97:
                    35:09:69:65:22:11:42:95:cc:ad:5e:7c:ca:77:e8:
                    e1:3c:30:1c:8a:e7:a4:5c:a9:b4:44:ca:6b:e7:ae:
                    67:d7:fb:c5:89:f9:b0:e2:48:61:60:a9:ac:fa:94:
                    af:9a:1d:8b:9d:1d:69:42:aa:ef:b9:25:dd:21:b8:
                    76:c9:87:fd:1a:2a:a5:9f:20:fe:d7:22:ba:37:d5:
                    45:05:34:53:0f:e2:92:73:dc:59:5d:13:41:6a:e6:
                    cc:fe:f8:9f:15:32:af:34:80:1f:cf:24:34:5d:8e:
                    14:37:95:8b:51:5b:9e:b6:c8:52:65:d6:75:af:d0:
                    1d:36:02:ee:73:f1:0a:b3:dd:83:6c:32:b2:c2:36:
                    2d:98:a0:56:d9:0a:a2:d2:01:67:58:8a:e0:6f:e2:
                    58:1a:f0:00:c8:bc:1a:0f:2b:b7:06:49:a0:85:47:
                    0f:68:ff:98:f5:39:d3:8f:74:56:27:bb:2d:89:2d:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8A:21:7B:28:1E:F6:B1:1F:FA:78:01:37:F7:A8:98:8A:EE:78:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.158.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:fe:3f:fb:00:1d:50:84:8a:72:1b:90:08:b1:60:15:6d:
         55:d6:e3:80:16:df:f1:e8:bd:3f:48:07:e3:ea:7e:dc:2e:08:
         73:4b:96:1c:97:db:84:0f:59:ec:59:24:45:95:c9:44:a7:3a:
         c6:8e:90:1b:53:b4:9b:2c:6d:55:d6:40:01:e5:47:44:cf:41:
         15:2a:c9:43:19:29:c0:f2:2b:81:56:90:40:69:f2:9a:5e:4c:
         24:0b:41:5e:ca:7e:f7:60:ba:cb:06:24:b4:64:61:14:86:9b:
         6d:3e:93:8f:d7:bd:2b:2b:db:bf:c6:89:02:d6:d7:c7:05:f9:
         00:04:0b:48:90:3b:ec:8d:f5:a2:cb:61:aa:8d:55:80:e9:11:
         58:01:7c:01:08:2e:60:47:88:d8:30:fe:44:48:21:49:7c:43:
         97:10:ad:0f:6e:41:98:7e:ec:bb:23:c0:0a:05:ed:42:a1:74:
         08:f8:b0:6c:b0:bc:b1:59:61:dd:ae:42:c2:78:42:05:ab:1c:
         bb:59:3b:9d:b1:f0:5a:94:aa:d4:3b:ef:73:b2:95:8a:91:ab:
         d2:7a:e1:6e:51:c6:69:1c:c1:c4:96:86:a6:0d:5c:a8:99:a6:
         0a:2e:ac:00:ef:05:b2:5e:9e:46:11:c5:28:c4:e8:5b:05:a1:
         dc:fe:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:23 2025 by rpki-client on console.sobornost.net