Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa
File:                     614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa (raw, json)
Hash identifier:          jApQjaWC9GVyeo7qbcr6Y25R8UUh1JNKDRrIid151es=
Subject key identifier:   AC:4D:E0:BB:4E:D0:DD:5D:B6:C8:94:EB:E5:93:E4:10:16:AB:28:45
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C2478D2B68EEF26A2B87C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.157.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:78:d2:b6:8e:ef:26:a2:b8:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=d3ffca17-65cb-4de7-ba0d-7a053c96bd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:34:5d:1e:84:c5:85:1d:55:1c:e3:1f:4b:
                    a1:06:84:3e:99:6f:52:e1:36:23:e2:d5:a2:30:6d:
                    f9:4f:04:5e:4a:83:5c:e1:ae:d5:d8:c6:44:34:88:
                    f7:c9:9a:2c:9e:a3:aa:c4:9f:0a:a8:f6:e0:05:18:
                    fc:38:89:d7:2e:dd:bd:2b:7e:81:88:2a:08:09:58:
                    b3:b4:9a:38:e0:58:77:32:01:d6:a7:37:23:9c:f7:
                    bb:9e:1f:46:1c:d7:13:39:89:7a:f7:8c:0d:8c:4c:
                    57:e9:7d:5b:cc:5c:ce:bf:f5:c3:69:da:8f:91:91:
                    c4:0a:7a:ba:f0:b2:fd:9d:4b:37:e0:b4:f1:45:aa:
                    d5:cc:71:9a:ed:12:6c:9e:ac:98:ea:18:d5:d3:35:
                    ce:bb:20:ec:d2:07:9f:b7:e6:4b:6f:fe:68:46:07:
                    73:5d:db:13:51:e9:6e:d2:35:7b:02:a5:dc:31:c4:
                    02:3e:3d:5b:7e:33:ec:84:14:8f:82:cf:47:b7:f8:
                    27:d9:f9:8e:27:5e:dd:e6:85:eb:0f:41:54:4d:53:
                    e6:34:5d:b0:dd:45:d7:76:a8:35:76:08:96:41:ee:
                    0f:8b:28:a7:67:29:42:69:3f:0c:93:dd:a4:e6:8c:
                    3f:4c:9a:27:3c:e1:53:1c:5f:8a:3b:70:c8:9a:fd:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:E0:BB:4E:D0:DD:5D:B6:C8:94:EB:E5:93:E4:10:16:AB:28:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/614fb17f-f57c-39ea-9eaf-7770a50b5f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.157.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:85:f2:54:75:75:e0:d8:9e:f4:48:59:80:14:18:9a:46:21:
         82:38:fa:33:2a:19:97:b4:ea:ba:b7:45:a1:d5:28:7f:f5:e6:
         48:ff:1a:cd:d4:06:a1:7d:51:49:dc:c0:18:b6:15:cd:6d:68:
         3f:8f:5b:d4:cb:c9:90:5e:84:0c:38:9a:6e:c8:28:8f:49:91:
         47:a2:5a:23:45:0b:d7:fe:4e:60:62:3b:a2:f9:dc:4e:09:34:
         55:bd:20:96:e0:11:31:9c:f1:39:c0:ee:98:0f:42:43:a3:ba:
         12:06:57:24:81:d6:60:51:7e:a6:b3:a8:ad:ca:7f:60:b1:88:
         f4:28:99:80:1d:2e:f5:0b:ce:00:fb:6c:d5:b1:13:4c:46:e0:
         4a:db:eb:af:7c:9a:64:be:bb:45:a6:a1:b2:71:db:8d:3f:7e:
         f6:59:c4:3a:6a:9e:fd:90:08:2d:d6:65:25:1e:61:a0:30:1e:
         88:29:03:1c:a9:48:40:13:fb:af:54:9f:5a:fa:02:91:d0:cc:
         8e:7c:07:69:37:08:4a:f7:31:c2:bf:ed:76:bd:0b:e2:1f:1a:
         68:df:0c:9d:66:b1:9e:4f:50:78:73:94:fb:a7:da:7e:4c:69:
         59:aa:34:56:df:83:3e:6c:7e:90:d6:ad:41:38:65:1d:af:fd:
         a4:02:e2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:44 2025 by rpki-client on console.sobornost.net