Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
File:                     7e78a36f-6ca2-389b-8ebf-ef4880929330.roa (raw, json)
Hash identifier:          EMUqNs9nYidY2GzTDzXsO2ogtcbBN5059UNGBvN5YAk=
Subject key identifier:   3D:EF:50:4A:C8:F3:B8:39:8D:BA:1C:4E:C9:43:C9:12:BF:95:D3:A9
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584930DE725A8ED54F966F569480
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     393336
IP address blocks:        104.193.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:72:5a:8e:d5:4f:96:6f:56:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=bafa8303-2498-4982-b4dd-a982dfcd481b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:20:20:05:61:7a:e1:5c:d7:9d:c6:44:20:
                    db:5f:b4:dd:3f:09:7b:d8:68:e0:0a:8b:63:8d:ca:
                    d2:a8:af:bd:80:ba:50:7c:99:2f:0b:ad:58:31:13:
                    f1:ea:29:3b:c7:cd:98:88:ed:b8:93:75:a7:ab:68:
                    0d:4d:7a:7f:04:a6:80:65:f8:f3:2a:81:7f:f3:a6:
                    33:5d:78:53:05:9c:26:6a:3b:68:ef:5e:ce:ca:e1:
                    ee:6a:66:3a:8c:52:68:1f:c9:ed:90:91:77:7f:55:
                    5a:e3:b7:4c:b0:0d:4c:ee:75:4f:85:1a:ca:74:4b:
                    3d:27:c7:a2:c6:85:c0:57:3c:cd:a7:74:78:9f:34:
                    a5:cc:85:65:f4:30:52:b0:41:a3:d6:e7:4c:d4:a2:
                    5f:84:98:e8:33:34:52:06:a3:ef:f0:55:3d:c2:ce:
                    59:54:08:cc:54:1c:14:c4:21:4c:14:de:2f:8c:d9:
                    68:b8:0a:67:c1:c0:8c:81:fc:9c:dc:25:75:af:fe:
                    c1:77:bd:e5:23:72:37:94:db:b9:82:08:a2:db:b0:
                    fe:a2:a7:9b:7a:8e:d6:bf:8e:5c:3f:31:11:4b:88:
                    75:b6:d0:05:17:71:43:37:85:08:2d:00:7e:20:f8:
                    1d:1b:9d:98:e1:49:79:9a:df:e8:3e:df:b3:ed:54:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EF:50:4A:C8:F3:B8:39:8D:BA:1C:4E:C9:43:C9:12:BF:95:D3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ec:f1:74:b1:9d:d2:6f:f6:bf:ff:b2:e3:66:7f:24:7f:9e:
         21:9f:a5:a5:ba:a6:b3:6d:a4:39:de:46:6f:f3:af:08:4a:c0:
         37:57:71:52:08:87:13:4e:00:29:f6:b5:2a:57:bd:33:31:82:
         8c:de:0b:0b:f5:ce:c8:99:bc:cb:ff:c0:b8:08:49:35:84:9b:
         27:98:5e:6e:cd:8b:8a:46:34:58:5f:87:8b:7b:a8:b2:06:29:
         d8:8d:a1:90:dd:b5:7a:b8:e7:ac:a7:c5:94:4d:e7:7e:03:2d:
         47:dc:3f:80:fa:82:c5:ae:9b:ff:25:6f:04:fe:26:ff:6d:45:
         aa:05:b2:6b:64:35:2b:14:53:55:fd:2d:8c:6c:61:02:e1:fd:
         0b:b1:c7:d7:e5:00:4d:42:4a:e0:8c:86:3f:2b:1b:ef:39:1f:
         e4:45:44:9e:88:e3:f5:17:f0:21:d6:f6:3c:67:e4:62:1e:18:
         51:b4:30:aa:62:4b:ec:ee:5f:f0:fc:96:48:ac:f7:38:7f:9c:
         50:0c:b9:f8:1c:bc:05:41:53:f0:64:89:5c:1d:2c:8d:ae:f4:
         3e:5b:59:7e:3a:ff:d0:af:e6:6c:3d:c5:45:d9:a2:5e:af:20:
         20:3d:0e:c9:9b:24:95:d5:b3:e2:1d:6c:43:08:db:36:f9:24:
         bb:38:ac:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net