Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
File:                     aabe01d2-6b84-3a4c-a160-177c79696872.roa (raw, json)
Hash identifier:          6iaqiDHgvMUrRSTimpHRHdXymRsa+455YvRHihphfEE=
Subject key identifier:   46:1E:6E:5F:85:02:18:28:AB:97:E5:B8:C8:C3:33:8C:95:31:5E:5A
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F432858496B7ED58B1A8AC344476E4B80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     902
IP address blocks:        131.148.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d5:8b:1a:8a:c3:44:47:6e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=271112ce-cc39-4dcf-9f14-84d3ef6b0323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:8d:b8:6d:8b:6f:b5:da:44:ee:87:87:fa:
                    f1:83:59:1b:ca:fd:91:19:38:c5:fb:5c:5b:19:ad:
                    f4:02:90:fb:f9:85:65:08:48:8d:0f:6e:58:30:fe:
                    ea:af:0a:1b:0e:26:cd:26:76:61:20:7e:fe:3e:4d:
                    7a:a9:cd:48:c9:2c:9c:6a:13:43:3f:0c:74:9a:0c:
                    61:1b:8a:01:29:1e:fc:02:b8:9b:26:3d:69:78:41:
                    17:1e:70:50:6a:a7:6d:79:7f:0a:b8:9f:70:f5:6d:
                    52:3c:a5:b0:3e:f8:34:20:dd:dd:98:bb:c6:95:36:
                    2b:d6:3e:2a:0a:1d:d0:4b:ff:c5:93:de:17:3c:98:
                    ab:e3:d8:df:1f:a6:3b:bd:c4:4f:8b:a8:0f:9d:2b:
                    8a:4e:c6:f9:2c:6c:a2:28:81:f5:9e:46:92:19:ad:
                    e4:65:1d:fe:48:73:1c:39:a0:0f:58:fe:48:f2:c6:
                    3a:95:f6:4e:fb:b0:3b:9d:11:5f:be:27:49:64:0f:
                    ae:f0:02:76:0a:b0:dc:bc:c8:14:f5:cd:77:95:ad:
                    9c:0e:f0:94:b0:20:be:a4:f4:7c:c8:8d:7b:1c:58:
                    e0:4e:01:3f:cc:38:78:90:6f:f2:3a:fa:e5:56:1a:
                    de:e6:e0:b7:75:fb:ec:c9:f4:ae:a3:1d:97:f0:78:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:6E:5F:85:02:18:28:AB:97:E5:B8:C8:C3:33:8C:95:31:5E:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.148.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:90:de:96:be:51:f3:73:54:5b:72:fd:20:5c:08:fe:d4:
         f7:99:8a:f3:92:35:b6:c2:40:1b:b2:c6:48:87:f5:7a:a0:f0:
         0f:f9:bb:e8:bd:a9:3c:1e:f4:21:96:85:19:11:88:9a:ea:2a:
         65:b0:a5:f4:3c:44:4f:ab:cf:4c:0e:9d:b5:9e:9d:fc:bb:68:
         4c:9e:c1:32:25:f2:2b:12:2b:d7:93:d1:b0:dc:35:6a:f5:9d:
         ce:ab:12:1e:6b:0d:a9:6e:c9:90:f9:da:5f:47:25:e7:4e:a5:
         f2:63:e2:8a:eb:01:cd:17:6a:42:eb:44:d9:86:2c:39:01:f9:
         26:3b:3c:a0:48:43:87:23:b5:41:1d:19:34:11:5b:f9:0a:6f:
         72:f8:d5:65:6c:19:6c:6b:80:26:97:c1:d0:bd:9d:87:62:08:
         ff:57:e4:f5:c2:f5:2d:54:1e:13:10:08:b9:31:ac:d4:89:bb:
         c6:c4:e0:6e:f5:f3:c7:38:b3:34:55:f9:13:23:d3:1a:88:07:
         1e:89:6a:44:de:fb:59:1e:7d:65:a1:bc:ed:7e:b5:52:1c:1b:
         4c:82:61:da:11:f1:01:64:26:55:bf:27:c0:bf:c4:83:be:55:
         e0:98:01:18:5a:08:77:37:ad:2e:9e:4c:71:4f:31:28:d3:c6:
         83:fb:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:45 2025 by rpki-client on console.sobornost.net