Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa
File:                     125998d1-5641-3c1f-8af4-69cb241cad63.roa (raw, json)
Hash identifier:          m6TNnaTMmqH5mt8OWjGS/dEkq/RF3FXa/4SiaAlbbsM=
Subject key identifier:   9C:3F:B6:5B:6D:FF:A8:15:B7:F6:F2:9F:F5:F3:EB:8B:5A:39:64:67
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584981D453AF738F6B4B1953EB00
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa
Signing time:             Sun 13 Apr 2025 01:00:44 +0000
ROA not before:           Sun 13 Apr 2025 01:00:44 +0000
ROA not after:            Sat 12 Jul 2025 01:00:44 +0000
asID:                     393336
IP address blocks:        64.40.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d4:53:af:73:8f:6b:4b:19:53:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Apr 13 01:00:44 2025 GMT
            Not After : Jul 12 01:00:44 2025 GMT
        Subject: CN=a875c8c5-5860-4712-b489-4e46df1c4bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:36:15:2e:1c:ff:05:d8:7b:6a:7a:9a:43:
                    8e:10:90:bc:6c:58:fe:d8:c4:64:fa:f6:e3:1a:3e:
                    5a:fe:0f:16:1e:d2:cf:1f:21:95:60:94:a1:df:cd:
                    77:82:f1:df:3d:4b:5e:15:fe:16:64:1e:8b:34:3e:
                    9d:39:0e:74:bb:b5:49:32:0e:87:28:a7:7b:3a:33:
                    37:06:61:00:de:28:41:f4:d6:a8:f4:e3:03:14:cd:
                    e7:54:03:22:36:e0:eb:0f:e8:2d:8a:75:9c:c6:64:
                    81:ee:f6:c2:b9:cb:1a:a6:57:af:12:24:1c:8c:66:
                    2f:b1:5a:a5:e3:96:33:37:91:ab:a3:9c:2d:09:90:
                    51:4e:e0:0a:1d:95:21:95:ea:a7:8c:72:43:8b:b1:
                    be:07:b3:6b:f4:a1:6d:f1:16:9c:6b:bc:28:1f:a0:
                    1e:35:8a:a6:6e:aa:e7:7e:03:56:2f:73:f7:9e:da:
                    a3:09:f9:0e:5f:b9:d3:72:72:57:8a:e9:90:bd:d5:
                    6f:86:32:a4:91:18:76:0b:7b:0a:3b:38:25:6b:c1:
                    3d:2f:26:bd:71:c2:41:32:8e:8d:3d:91:46:74:33:
                    ad:69:6f:98:c7:bb:21:f0:da:af:ed:9a:70:ca:a9:
                    0a:c8:87:b3:cf:7b:f3:5b:b9:eb:46:c1:68:a7:9c:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:B6:5B:6D:FF:A8:15:B7:F6:F2:9F:F5:F3:EB:8B:5A:39:64:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/125998d1-5641-3c1f-8af4-69cb241cad63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:8b:74:84:f6:ae:24:5e:61:8d:94:4b:14:fb:5e:5f:85:d5:
         6b:33:e7:59:16:da:62:23:6a:bd:e8:15:de:9a:71:e6:43:91:
         c2:82:cc:e4:ef:eb:62:f8:af:84:07:1f:8b:87:50:77:78:51:
         76:28:2f:94:4e:f3:dc:5c:ac:71:62:6b:e1:ed:4c:38:c1:e5:
         61:59:c3:e2:69:49:f6:5e:f2:74:23:1f:93:eb:94:b9:94:1c:
         7d:2e:ce:da:4c:ff:b6:f0:93:31:3b:05:53:67:29:5d:86:44:
         f6:c7:06:25:06:d7:48:39:14:f7:13:7a:ef:f2:fa:a6:84:1e:
         67:fe:df:90:75:0c:f5:30:18:fe:f2:53:5b:07:05:63:35:da:
         50:2a:14:2e:07:d2:89:f9:80:33:d7:5b:23:39:ea:f6:3a:63:
         91:58:99:b5:a0:61:76:f3:3a:56:1d:a3:30:3f:43:c4:e6:2f:
         f5:08:c0:59:02:cf:c0:8e:e9:9d:a9:d2:ba:b8:05:b4:99:7d:
         b6:c1:e0:e4:46:7c:7d:b4:ae:4f:68:dc:4f:e9:09:e5:22:bc:
         d1:1a:db:5d:e4:99:fd:b4:04:0a:53:06:77:a0:7b:95:35:ad:
         f4:7d:18:c6:8c:6c:fd:d3:05:8c:31:4b:26:ce:f9:fd:9b:0f:
         5d:a6:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net