Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
File:                     a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa (raw, json)
Hash identifier:          ZjpWCarfdzMsWJw8k/g5LfGRknxLtLpv2t1Qypr7CUI=
Subject key identifier:   06:81:38:7B:11:0C:AD:3A:92:5F:6A:14:93:98:D8:76:03:96:5A:66
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24809241A088C210FE3D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     0
IP address blocks:        198.133.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:80:92:41:a0:88:c2:10:fe:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=68457b5f-dfc1-45c6-8eb6-887ab73bf1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:fb:d2:a1:13:6f:63:42:96:b2:dd:45:46:
                    e1:88:e7:d0:81:87:f4:e1:b5:9e:85:7d:17:74:a9:
                    dd:1c:18:75:52:1a:64:85:df:51:fa:2d:75:61:0f:
                    ea:92:1a:cb:c4:05:1b:63:bc:d7:2d:d8:d8:fb:e2:
                    fc:79:eb:b9:4f:82:f6:e4:2d:b9:8a:99:0b:31:2f:
                    b1:a3:e2:6a:c9:29:7a:24:15:06:b4:16:47:b1:b9:
                    f1:23:f0:3f:6b:65:f7:c6:4a:96:59:ab:b6:ca:af:
                    48:bd:9a:70:02:d9:b2:3d:e8:24:a1:62:a1:a2:c0:
                    63:99:49:78:9c:8e:84:f5:c1:3e:24:4d:ee:ff:c8:
                    0c:64:89:be:fb:6e:65:83:1b:80:53:ac:ed:90:8c:
                    25:39:52:b6:8b:ea:df:87:36:ac:08:83:77:fc:b1:
                    fc:8b:ca:58:04:e6:4a:d5:76:0a:01:23:8a:1c:00:
                    dd:61:31:b1:c4:90:d7:f8:49:11:9a:bb:35:06:64:
                    c5:13:36:40:a3:e6:bb:78:cc:ff:8d:5f:ee:e0:a0:
                    8d:f9:fc:01:79:de:14:77:67:b6:7b:de:91:ef:66:
                    d2:74:5b:73:26:8b:45:87:45:ae:f3:91:a2:a7:a5:
                    44:3b:41:8a:fa:a8:30:80:63:ef:94:d0:0d:9d:f0:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:81:38:7B:11:0C:AD:3A:92:5F:6A:14:93:98:D8:76:03:96:5A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a4d68352-6473-37ff-9a59-1c8f3dd785a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:a5:9d:10:fc:39:73:62:16:60:dd:e9:a8:31:93:04:23:
         87:70:00:85:62:17:c6:6d:c2:e9:13:4f:85:11:6f:fc:5e:02:
         1e:77:b6:a0:5d:83:e6:ce:e0:2a:bb:50:1e:7a:c3:82:49:aa:
         e1:00:7f:43:d9:f2:03:ea:45:e1:78:d8:24:23:5c:95:c3:16:
         cc:5b:99:6b:53:44:e7:6b:08:35:4f:93:14:33:ea:dd:0c:0b:
         e8:0d:e6:30:ae:a6:b2:01:df:63:e2:cd:4d:d2:59:a3:d7:53:
         a7:07:48:33:5c:b2:d2:a3:20:b5:45:50:2a:05:99:39:2a:60:
         19:71:41:ed:f8:5e:e5:a8:eb:fc:b5:c6:11:16:1b:f6:0b:6d:
         46:6e:42:73:e4:86:d7:fa:0c:cf:c4:33:4f:bf:70:80:0a:45:
         6a:0b:f2:8a:43:96:b1:f4:7e:4f:7c:5c:9c:71:73:f2:09:dd:
         4a:ee:42:3a:76:95:08:e0:e0:cd:fc:40:62:b2:f9:4d:50:c2:
         59:7c:98:b2:d9:b5:fe:99:7d:47:c6:e5:ea:83:6d:35:79:91:
         fe:e6:11:98:99:96:cc:00:93:40:98:b5:ae:4c:c6:89:76:7f:
         73:98:cd:8a:09:1d:0d:f7:3c:ac:a2:13:99:ce:0b:d4:72:0c:
         ea:11:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:53 2025 by rpki-client on console.sobornost.net