Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
File:                     05d53889-8629-3f75-b779-6895e4c540d0.roa (raw, json)
Hash identifier:          TCMnEdKhFnruXuYw/xWSiZpBh1xLTZQ6iULZNRmfUcM=
Subject key identifier:   25:19:B6:3B:4C:AA:85:10:74:0A:10:50:78:53:54:D1:02:4C:F0:DB
Certificate issuer:       /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
Certificate serial:       010D0C9F4328584908816119318182C1CEEE8F20
Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     32329
IP address blocks:        52.119.112.0/20 maxlen: 24
                          104.193.168.0/22 maxlen: 24
                          104.244.24.0/22 maxlen: 24
                          148.64.96.0/20 maxlen: 24
                          158.247.68.0/22 maxlen: 24
                          162.217.72.0/22 maxlen: 24
                          162.245.20.0/22 maxlen: 24
                          176.108.136.0/21 maxlen: 24
                          192.195.80.0/22 maxlen: 24
                          199.83.220.0/22 maxlen: 24
                          199.116.72.0/22 maxlen: 24
                          199.188.192.0/22 maxlen: 24
                          199.230.10.0/23 maxlen: 24
                          199.241.200.0/22 maxlen: 24
                          207.53.252.0/22 maxlen: 24
                          208.69.40.0/22 maxlen: 24
                          208.90.212.0/22 maxlen: 24
                          2607:f598::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:61:19:31:81:82:c1:ce:ee:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=deb35849-81bb-4da0-a2f4-9bebcea85cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:de:3e:c7:ff:ef:58:15:0d:b7:af:f3:54:
                    6a:ed:d7:59:f8:db:91:42:db:ea:28:0d:af:88:2f:
                    86:ef:48:dc:8f:e1:e8:1d:e2:88:73:10:24:f6:af:
                    5b:73:06:dc:bf:cd:8d:ff:48:95:65:3b:4e:61:2c:
                    f7:38:1a:ad:c9:4a:60:f7:29:24:7d:55:06:f3:68:
                    07:f5:a5:b8:aa:e8:fc:7b:fe:c8:59:5f:bf:b2:04:
                    8e:48:a0:61:79:7c:9d:54:45:c3:38:ac:11:18:70:
                    54:86:c9:33:6e:db:4f:9f:4f:85:f8:87:28:8e:ec:
                    f8:42:db:92:3f:39:8b:1e:7d:5b:ca:34:70:63:c5:
                    69:47:3d:81:b2:39:5b:a7:b2:de:56:4b:b1:bf:85:
                    ec:9f:9b:d2:db:13:3a:7e:65:8a:3c:6f:d1:24:ea:
                    2d:e5:c2:71:5f:56:d8:d1:15:55:eb:97:22:11:a2:
                    61:29:de:4d:16:00:9c:2d:02:99:85:88:8c:41:11:
                    72:59:9e:41:7a:bb:7b:66:67:f2:7c:11:e9:c7:da:
                    e1:bf:f0:26:e5:93:d6:68:12:32:ab:52:cb:f1:4b:
                    8c:63:af:30:87:e2:94:1d:33:4a:19:67:ed:3e:91:
                    30:c5:c8:67:0b:3c:3d:2c:a7:97:7d:7d:42:79:76:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:B6:3B:4C:AA:85:10:74:0A:10:50:78:53:54:D1:02:4C:F0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/05d53889-8629-3f75-b779-6895e4c540d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl

            X509v3 Authority Key Identifier:
                keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.119.112.0/20
                  104.193.168.0/22
                  104.244.24.0/22
                  148.64.96.0/20
                  158.247.68.0/22
                  162.217.72.0/22
                  162.245.20.0/22
                  176.108.136.0/21
                  192.195.80.0/22
                  199.83.220.0/22
                  199.116.72.0/22
                  199.188.192.0/22
                  199.230.10.0/23
                  199.241.200.0/22
                  207.53.252.0/22
                  208.69.40.0/22
                  208.90.212.0/22
                IPv6:
                  2607:f598::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:9e:20:89:81:9c:82:60:7f:d3:95:05:22:ae:e1:35:bd:30:
         67:5e:43:13:b3:89:72:43:00:ff:1d:da:f5:3c:8d:57:ca:7f:
         dc:f3:c9:be:f1:b4:57:76:3a:ad:4a:e0:ef:7a:f9:98:e6:aa:
         24:a1:da:9f:a7:2e:84:3c:7f:af:dd:48:9c:84:69:20:7e:19:
         7b:84:6f:cf:d4:c1:25:69:e7:ce:63:3e:72:c5:36:32:d0:60:
         7f:c2:d1:c9:13:5f:d1:0a:5f:d0:9a:13:2c:b7:06:18:93:b3:
         ff:57:4c:ea:1f:05:9a:4b:3a:38:48:29:76:1b:0c:56:fa:79:
         50:5e:64:4f:ff:9b:b4:fa:be:e7:7a:80:c2:30:61:18:e5:43:
         35:e6:38:ea:9b:37:65:15:10:19:06:d3:27:86:28:5a:1a:0b:
         8e:2c:ef:7e:00:96:2a:3c:3a:c5:79:ad:f2:a6:58:79:31:35:
         1a:18:2c:22:fa:6d:bc:fb:f6:73:c7:6e:84:57:a6:50:7b:f0:
         59:d5:dd:69:f1:6a:3d:bc:74:2a:38:6b:e5:cb:be:f7:0c:7e:
         fb:41:1a:c3:9c:64:31:a4:90:97:52:2a:eb:55:da:01:ee:a3:
         2f:2a:ac:39:37:ef:b8:df:01:25:00:10:8d:a7:a5:eb:5a:42:
         89:37:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:11 2025 by rpki-client on console.sobornost.net