Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0b6dd30-1cc5-3446-8992-b22649ca2286.roa
File:                     e0b6dd30-1cc5-3446-8992-b22649ca2286.roa (raw, json)
Hash identifier:          ZKa0cLYd6GdchZlRUkq2poGxlQ7qZKLUvRZqx/Wh7Ak=
Subject key identifier:   E4:94:2C:73:3F:08:FD:E8:E0:E8:CF:60:5D:90:25:82:BA:6C:A2:0A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584902EC31CF52F8B60F3FB3CD60
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0b6dd30-1cc5-3446-8992-b22649ca2286.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     701
IP address blocks:        199.45.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:31:cf:52:f8:b6:0f:3f:b3:cd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=4291590e-cb1e-46df-9fe1-3de1ece45cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:22:57:45:15:2e:d2:5d:0b:08:57:6c:8c:57:
                    64:07:7f:bf:d2:27:9e:f3:45:86:a9:24:d1:a7:9e:
                    e7:45:61:a1:68:b9:82:32:70:7f:80:09:11:8c:d0:
                    10:ab:1d:db:54:5c:7e:80:0b:dc:fb:c1:7a:f1:49:
                    48:3b:6b:77:08:49:4c:ab:51:89:70:dd:b9:2e:da:
                    a0:06:d4:4f:06:a6:76:33:46:d7:7d:55:c7:b3:0c:
                    98:ce:05:ec:1a:97:7e:56:08:a9:b3:70:dc:e6:0b:
                    b8:9e:5f:d9:ae:d1:df:70:0d:ee:85:e0:d0:b2:1f:
                    9c:43:6c:04:17:4c:b9:5d:f0:05:8b:58:60:65:8e:
                    45:72:38:f3:e6:04:a4:7e:be:4b:2c:8b:66:b3:a3:
                    88:7e:2f:ed:c9:73:2c:41:a4:8e:1d:0e:13:09:ea:
                    6c:8c:1e:10:39:ea:56:87:b9:56:7b:df:7b:ac:c9:
                    38:e6:a2:a0:f7:f8:52:c4:52:4a:55:84:a1:ab:55:
                    53:cb:15:cc:75:46:62:43:5a:f8:c2:f0:fd:34:6c:
                    ab:d9:23:d4:c3:ec:c2:d5:4a:08:9f:89:d5:e1:46:
                    27:c0:7d:4f:9e:f2:d7:a8:d7:ae:6c:5c:7c:11:a2:
                    c7:29:c0:fc:b9:c7:6b:9d:c4:e0:99:99:d2:ae:85:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:94:2C:73:3F:08:FD:E8:E0:E8:CF:60:5D:90:25:82:BA:6C:A2:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0b6dd30-1cc5-3446-8992-b22649ca2286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.45.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:c1:91:ac:f8:1a:41:5a:f8:3b:5b:a9:35:ee:13:c1:c3:
         7b:6a:db:47:ae:3a:71:2e:a7:68:4c:c5:f4:ba:15:c2:16:19:
         24:9a:5c:7b:2e:a7:fb:c0:cc:c0:bd:2a:5d:f4:02:80:dc:4d:
         6c:2e:72:0d:0d:96:46:64:99:6e:d3:7d:a1:40:ac:b8:1d:51:
         8e:ea:62:aa:76:ca:a9:81:00:04:df:96:d4:5b:0a:cc:36:df:
         b9:f7:8b:38:77:52:5e:42:f3:82:60:45:54:d2:97:a4:86:10:
         b5:6a:73:6e:e2:04:31:a3:91:60:bb:6d:79:8b:a3:c6:f6:7c:
         9a:35:31:6a:ad:32:bb:f4:2d:fb:b7:9e:8e:cd:d3:df:a6:0b:
         a3:4b:a1:71:e2:cd:e3:b6:f3:5b:ec:15:70:d9:cf:a3:64:c6:
         29:72:b1:c5:96:bf:43:c6:39:e5:a4:1d:f3:7a:f6:5b:fb:75:
         b8:ed:a8:ec:18:1d:4b:63:5d:aa:06:fd:dc:43:fc:eb:e7:21:
         99:46:d9:c6:ae:e8:df:55:76:d9:64:dd:7b:2a:5e:c5:a5:c8:
         69:7c:00:16:10:48:ee:64:dd:a5:10:a8:ae:de:99:a6:05:83:
         97:f2:9b:1f:eb:4f:3f:47:14:d8:4f:9d:e9:9e:81:97:33:03:
         66:75:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:07 2025 by rpki-client on console.sobornost.net