Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/2ae604f4-32be-3a15-a72f-fa029bf93d68.roa
File:                     2ae604f4-32be-3a15-a72f-fa029bf93d68.roa (raw, json)
Hash identifier:          nJr159BLMEOtkS4IOb1zaNVrzKm2HV0c4uEwmv5xUjA=
Subject key identifier:   5C:A1:27:06:B3:2B:16:D1:19:E5:07:5C:D6:C5:23:49:17:73:C4:E3
Certificate issuer:       /CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
Certificate serial:       010D0C9F4328584957F413F17BFF3EDF173BF800
Authority key identifier: 6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/2ae604f4-32be-3a15-a72f-fa029bf93d68.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        204.15.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:13:f1:7b:ff:3e:df:17:3b:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7c3819-41ee-4cfb-b484-d4f3f475a19b
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=cb141f93-959a-48af-a47d-b22741400cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:a2:e6:a9:e1:ca:84:c4:7e:36:16:e0:7d:
                    85:f8:93:7b:26:d8:b2:dc:57:93:f5:0f:7b:f5:2e:
                    24:b8:90:24:a5:88:9f:37:f0:6c:4e:64:8b:b8:84:
                    8a:a6:75:66:ca:c2:c8:80:1a:7f:c5:35:31:06:10:
                    a6:36:8a:aa:b1:49:e3:f0:8e:a1:ff:45:1f:72:2b:
                    b3:30:bb:1f:0a:bc:6d:05:ea:66:d1:50:07:3b:53:
                    00:12:7b:88:5b:f9:d8:a9:ff:22:04:8f:4e:72:21:
                    47:95:b5:40:e4:e0:4b:77:86:fb:82:a2:9d:7b:bc:
                    e6:08:8c:28:2c:af:5c:c8:38:23:9b:4b:39:e6:17:
                    89:e1:2b:07:72:c5:55:74:fb:5a:82:39:16:df:f2:
                    67:3e:f6:73:8a:f0:03:a7:ed:71:22:80:b7:c8:3c:
                    7b:d8:aa:42:43:f0:95:a6:35:b1:40:18:3b:31:fd:
                    3f:89:a7:af:ab:e9:59:ec:08:b3:78:d0:a8:ed:8e:
                    a8:bc:dd:f0:b3:22:87:17:93:82:35:40:4a:e2:28:
                    67:87:ac:da:15:ec:3b:de:23:5a:fd:11:19:cc:50:
                    81:b3:af:76:fb:a4:82:79:39:f5:62:73:59:23:30:
                    84:9b:ed:27:6e:d9:7b:49:d6:12:5e:53:62:40:0c:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A1:27:06:B3:2B:16:D1:19:E5:07:5C:D6:C5:23:49:17:73:C4:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/2ae604f4-32be-3a15-a72f-fa029bf93d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:CC:5F:32:F9:9C:E9:37:D5:0F:A8:FA:96:DE:8D:BA:70:2C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8b7c3819-41ee-4cfb-b484-d4f3f475a19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:77:93:43:82:b8:76:a6:8c:84:5b:64:dd:38:89:5b:a5:
         ee:e7:fc:3c:f4:5b:f0:b5:77:a6:0d:2b:73:1c:0b:de:fd:f1:
         b3:89:fd:20:45:a5:cf:39:27:a4:ef:0e:ee:4f:34:fa:ff:b9:
         9e:67:a3:1a:4c:86:21:16:32:c8:6d:d2:16:59:97:74:86:a4:
         55:38:ae:dc:4a:9c:b7:85:5b:e5:d1:97:44:14:f2:1a:14:4e:
         14:46:ac:68:64:2b:a1:56:6d:32:26:bf:c4:9d:70:1d:67:c7:
         9c:36:f7:51:2e:54:36:5b:ee:73:6a:dc:1d:97:81:0f:e1:75:
         94:ca:55:2f:27:f7:c4:d0:3b:fe:11:9d:d5:f1:5c:0f:a1:ec:
         7a:bf:a0:fd:63:03:48:7f:79:1b:0b:b2:f5:b5:05:37:23:9d:
         ad:29:bf:a6:ff:9f:84:f8:8b:dd:f1:89:00:5e:e2:3d:c8:ad:
         20:4c:f4:7d:8b:24:82:6a:e0:9e:62:ba:3e:b0:00:56:54:00:
         54:86:b3:10:40:fe:0b:ef:e8:84:cc:12:04:5f:c7:a7:2e:3b:
         cf:3c:13:19:b2:ed:fe:88:40:7a:0e:96:88:b4:07:d8:64:f5:
         11:81:98:ee:c7:e8:05:0d:54:77:ae:11:2b:68:dd:39:e2:45:
         c8:0e:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:07 2025 by rpki-client on console.sobornost.net