Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70efa942-90d2-34c5-b9b0-d282c0907f53.roa
File:                     70efa942-90d2-34c5-b9b0-d282c0907f53.roa (raw, json)
Hash identifier:          NXC9PUNwaK7KI5GLRAhtl+45mamtYgKtgxvHcMO8TI0=
Subject key identifier:   E0:13:F6:BB:91:2E:2E:83:F5:FF:C8:3B:84:78:7C:E4:B8:43:24:4A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858496484616B88FECCB6229F2020
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70efa942-90d2-34c5-b9b0-d282c0907f53.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     6167
IP address blocks:        75.205.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:61:6b:88:fe:cc:b6:22:9f:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=a69cd1f1-33f1-4037-a58f-02b210b1c791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:54:26:83:9a:ca:34:5f:50:07:64:92:48:
                    dd:62:07:2d:71:ec:0c:42:03:52:9c:e0:bb:15:5d:
                    a1:90:c9:72:0a:b6:1f:fe:c6:5c:70:19:b1:0e:24:
                    44:77:42:ad:f6:32:a8:30:aa:47:e0:37:b0:be:85:
                    fc:4b:b2:6d:fd:0e:8e:de:45:87:10:8a:78:4d:bd:
                    e2:fa:f8:9e:d1:77:6c:cc:b3:34:dd:b8:e1:61:60:
                    3a:fd:47:4c:42:83:f9:f3:e4:7d:e6:55:ee:24:fb:
                    48:50:e5:aa:f1:68:4a:0a:55:1a:e9:45:05:0f:ee:
                    16:9a:b8:ff:fa:a6:2b:ec:07:6c:66:3a:a6:ab:a0:
                    54:2a:bc:56:21:d5:44:75:55:3f:ec:93:b7:44:0a:
                    3f:be:11:7c:53:af:8e:b6:c8:c4:50:90:12:b2:22:
                    15:9c:a1:80:27:1b:11:1e:66:b5:84:45:9a:df:97:
                    7d:f1:8d:48:51:0d:ac:ce:49:da:8e:4c:93:87:07:
                    75:6b:b4:59:c5:04:db:19:4b:5b:96:69:69:2c:d4:
                    66:61:43:b2:1e:c5:7f:29:0f:cd:67:66:47:bc:9e:
                    45:ca:17:b5:c8:60:2e:8e:5d:97:93:e5:15:6b:1e:
                    00:0c:d7:72:90:2a:62:5d:7f:c1:5a:53:d5:a2:17:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:13:F6:BB:91:2E:2E:83:F5:FF:C8:3B:84:78:7C:E4:B8:43:24:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70efa942-90d2-34c5-b9b0-d282c0907f53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:40:ec:aa:39:13:cf:4d:c2:af:b2:23:10:00:09:09:54:38:
         4e:88:ec:e8:08:e3:c1:6f:c9:ad:3c:be:d0:b7:47:f1:89:97:
         19:04:27:50:1f:32:aa:30:96:ee:09:04:0e:16:c1:1a:0f:d3:
         e2:51:c1:a5:b0:c7:9a:14:66:9a:d9:8f:38:24:5c:3a:a4:b4:
         39:8a:37:3f:65:fb:b0:74:a8:45:bb:65:d7:08:38:1d:ac:04:
         cb:44:93:a9:e8:e7:7f:e9:fe:fc:09:c1:12:43:3d:57:e0:f2:
         3b:5b:b7:46:60:ab:42:06:77:7f:0b:25:49:9f:2d:61:82:3e:
         a0:b0:5b:76:b5:75:8a:3f:05:51:12:e7:b1:26:83:73:8f:25:
         0f:bd:de:d2:b0:99:85:9f:0a:3a:80:4e:6a:eb:ea:84:a8:08:
         9b:f3:4c:1f:e9:0e:83:d1:37:08:f6:94:ab:87:a0:80:ba:f5:
         99:68:c9:3d:5c:71:de:7b:ef:b9:45:b8:fd:47:10:f1:9f:b1:
         b6:ce:1e:72:e2:11:c2:38:33:68:38:1c:ee:a2:15:35:83:5e:
         c8:52:65:24:eb:e6:5f:80:17:08:a7:6f:b1:5e:54:29:53:12:
         9a:c2:52:74:fc:df:14:e7:4e:66:c1:53:a1:fd:d7:7d:52:d9:
         83:53:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:47 2025 by rpki-client on console.sobornost.net