Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa
File:                     f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa (raw, json)
Hash identifier:          YRb9Y1bUQsJgW3FaKhC2ZyoUBcBxhmNp17snc2gB720=
Subject key identifier:   32:46:0D:9B:0A:ED:9B:0A:F9:1D:DF:6B:65:5E:34:80:B3:5B:AE:F4
Certificate issuer:       /CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
Certificate serial:       010D0C9F432858494039486135F3FD44F1250A80
Authority key identifier: 49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     22379
IP address blocks:        149.20.70.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:48:61:35:f3:fd:44:f1:25:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc88207-e7c7-453e-a4ab-77b72152c33a
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=4734a14a-e3a9-41b5-a598-8d1c039f37f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:79:3c:ca:17:64:a9:b3:be:6a:a6:be:af:
                    1f:43:6d:80:ce:10:cc:1a:82:be:86:aa:86:ec:2c:
                    42:3d:55:ea:e5:a8:7a:2b:15:42:cc:9d:b5:aa:bb:
                    70:ab:de:ed:c9:4d:b4:2e:28:4c:f7:e9:f2:02:f4:
                    35:8e:74:94:df:87:c4:e2:24:63:59:2b:3d:20:f6:
                    83:ed:d0:7c:16:5c:ec:48:11:0e:ab:cd:d4:12:8d:
                    99:dc:65:61:65:56:7b:97:5b:73:e4:df:05:e9:77:
                    5e:16:fd:e1:49:ee:2d:e4:50:63:fd:46:02:b6:de:
                    d7:64:35:87:dc:8c:a4:5a:3a:6d:a0:5d:2d:6c:0b:
                    9d:30:2f:70:a9:7b:0a:86:76:3e:c5:c6:33:6b:94:
                    76:1b:9e:18:d7:0c:a2:32:4d:c5:3d:d0:46:ce:7e:
                    8b:8b:e6:ae:f4:c4:4d:87:cb:80:ef:6a:41:2e:9d:
                    dc:15:0b:69:50:55:93:91:77:bb:1a:de:75:be:af:
                    99:c0:6d:68:67:c5:58:01:0b:fb:2b:01:e6:ca:58:
                    89:df:02:57:ca:af:44:7f:c7:dd:db:79:2a:d7:d7:
                    ed:bc:60:9d:52:76:e0:db:ef:fb:1e:9f:da:eb:6c:
                    44:21:68:84:70:5e:5c:4a:ae:7b:bb:00:ac:99:6e:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:46:0D:9B:0A:ED:9B:0A:F9:1D:DF:6B:65:5E:34:80:B3:5B:AE:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/f85ff5e7-a338-3d57-bcfe-00ac7ef54f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a/9bc88207-e7c7-453e-a4ab-77b72152c33a.crl

            X509v3 Authority Key Identifier:
                keyid:49:30:1E:1C:4D:A2:59:C8:C5:65:AF:94:7B:C5:60:74:D2:96:22:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bc88207-e7c7-453e-a4ab-77b72152c33a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:6f:1a:f9:29:72:81:22:51:fa:78:9a:c2:75:5d:71:d4:
         39:72:ee:01:96:90:54:e3:24:92:9c:4a:0f:6c:8f:ae:7c:8c:
         a5:5d:52:4b:12:de:19:8d:f5:8d:c5:bc:41:f1:b7:68:fc:cb:
         90:83:f2:8a:3e:26:d1:34:ad:e3:f9:e4:c9:54:ab:ba:2f:1e:
         a1:ff:a3:04:a3:9a:29:cc:fb:e0:73:de:11:99:17:1b:76:31:
         80:99:89:d8:fe:2d:e6:a0:2a:b9:1b:cc:a1:c8:df:a3:00:2e:
         d0:f4:4b:57:58:c0:3d:cf:a3:42:58:fd:eb:18:c5:d5:5c:73:
         80:64:e4:91:cf:52:5f:43:6a:26:70:c9:c2:b5:22:fc:29:99:
         f4:96:77:45:20:6b:9c:63:fa:8c:47:26:71:20:a3:a9:a5:a8:
         a9:f7:e4:29:ff:f4:8c:2e:f0:7c:b6:e3:b9:a4:bd:5f:9d:09:
         73:c8:d1:22:31:39:85:eb:2d:18:ed:32:61:bb:80:39:41:72:
         23:bb:29:72:3d:b3:11:a8:78:53:e6:6f:a8:66:72:5b:65:28:
         f8:95:8a:d5:ec:76:e3:2b:f4:44:47:85:74:d4:a9:09:6b:4f:
         21:24:e4:43:3c:35:06:9c:61:ee:dc:9d:32:2f:4b:b9:47:6b:
         4b:1f:51:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:12 2025 by rpki-client on console.sobornost.net