Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa
File:                     486b3896-2841-391a-bebe-039803db5d71.roa (raw, json)
Hash identifier:          tNbeAgrp8A8T8iX+84VKuXRvdaZXy9tKkB7ezUq6OF0=
Subject key identifier:   0F:98:7A:54:5C:CB:F3:F7:15:72:90:C8:FF:33:0E:79:1D:29:BF:CF
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858496CE447912C1632EE2D94DA80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     6643
IP address blocks:        199.87.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:47:91:2c:16:32:ee:2d:94:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=7d5d4854-de7b-4ce8-8c90-4d6b91b80866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d2:3f:68:67:6a:ee:f4:de:2d:7d:8f:e7:15:
                    bf:c5:47:64:7e:93:f5:76:6b:28:dc:c0:dc:2c:c4:
                    ba:cd:89:ac:69:50:03:69:c8:8a:f0:35:4c:33:08:
                    56:c8:43:d9:9e:10:cc:64:08:39:1e:40:5d:cc:37:
                    2f:64:d8:ca:fe:9b:97:2f:ed:fd:b7:84:93:72:2f:
                    1c:87:a3:ac:a5:f9:70:39:22:01:ac:0d:04:bc:3f:
                    e2:79:79:63:3f:b7:11:a6:0d:bd:e8:14:e9:bb:68:
                    dd:0f:77:ab:76:19:18:b7:63:93:e0:72:bc:ee:53:
                    cd:c2:ad:3d:18:b5:8b:c9:b9:20:de:3b:52:02:b9:
                    cb:99:bf:d1:82:bc:f3:f5:39:73:7f:0f:60:38:44:
                    50:93:9f:17:c7:9f:74:73:c6:c9:08:1e:8f:a5:ca:
                    11:51:e4:0b:c5:84:19:7a:47:61:de:90:57:ef:44:
                    a9:3f:a8:28:43:2d:76:1f:8b:29:86:24:e8:40:11:
                    64:ac:18:a2:b5:be:6f:11:ca:38:50:25:d9:38:8d:
                    e8:1e:bc:8c:e9:09:f9:dc:b7:87:a8:11:9b:36:b3:
                    ba:9d:31:76:be:f0:4d:58:12:fa:3d:b9:95:a6:29:
                    20:2d:67:03:95:c7:a0:68:a9:be:ce:a0:45:68:37:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:7A:54:5C:CB:F3:F7:15:72:90:C8:FF:33:0E:79:1D:29:BF:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:92:90:18:b2:92:5a:85:46:da:71:77:16:c4:62:f6:f6:
         fd:fa:f1:11:a3:b7:74:fc:bb:5e:5f:9d:68:db:ed:a8:06:72:
         0f:d2:6e:e6:6e:f5:31:e7:99:3d:aa:6a:4f:14:af:6e:c7:0d:
         d6:34:86:60:0e:15:0b:39:c8:43:6f:4c:d7:58:03:72:af:2e:
         ca:b5:29:d3:13:74:b7:9c:16:11:20:82:b1:fb:6d:48:8a:09:
         e5:18:f5:84:7a:ac:e1:01:68:3b:1d:ea:54:7a:99:35:da:f2:
         2b:5e:fb:d5:7c:9c:44:84:26:eb:1a:57:f0:3b:76:ec:b8:97:
         f6:c7:8c:2d:f1:35:68:47:d3:d3:a0:c7:19:cf:68:6b:8f:40:
         ce:fa:e4:10:0e:93:62:38:41:64:99:02:3d:7f:60:78:06:78:
         44:55:0b:4b:22:b4:1f:fa:33:e3:d4:d7:37:94:06:4b:28:a1:
         1b:95:51:ad:91:89:11:2d:16:14:15:a6:38:ba:38:95:85:01:
         91:18:74:dd:ac:84:df:21:c8:c0:81:1c:5b:05:20:5b:d2:63:
         eb:39:49:40:b1:60:fa:11:b5:85:ab:86:51:90:0c:77:53:77:
         6c:99:2a:80:c1:db:81:82:bf:80:11:56:f8:e7:4f:8d:9b:a9:
         de:95:18:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:19 2025 by rpki-client on console.sobornost.net