Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/11adcb4c-8ee1-3c2b-86c9-9e053ea536ec.roa
File:                     11adcb4c-8ee1-3c2b-86c9-9e053ea536ec.roa (raw, json)
Hash identifier:          Naq9KzktXiuBHkZ2e3bTif/7KtbJRvnF6MuLEB5oqRg=
Subject key identifier:   F0:0A:DC:0A:84:CC:04:2A:6C:54:F9:08:74:65:8B:99:3F:EE:30:5C
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F432858496A199DAFF152904BB5BEEC40
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/11adcb4c-8ee1-3c2b-86c9-9e053ea536ec.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        198.176.120.0/24 maxlen: 24
                          198.176.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9d:af:f1:52:90:4b:b5:be:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=962d0351-1033-4fd6-812e-920025ac6b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:e8:55:1c:4a:02:0b:7b:3a:6b:55:30:78:
                    10:ff:d3:56:ed:d7:2a:fc:e1:7a:69:8b:6f:38:e9:
                    92:d5:09:b2:81:8b:37:81:a7:f8:44:46:7a:76:fc:
                    97:36:10:a2:04:6e:46:82:d6:ef:bd:85:ff:de:ad:
                    30:d4:f6:d3:e0:3c:7f:25:3b:08:cf:ac:ea:34:06:
                    1a:14:94:81:b5:9a:f8:7e:5f:65:57:ec:42:7f:45:
                    91:0d:c5:45:27:9e:4c:f4:9a:b2:ec:d4:17:fd:76:
                    78:b2:7f:c3:43:bf:ad:e7:2f:ee:1b:ba:42:02:95:
                    d9:59:b9:07:fb:85:08:43:f0:50:c6:7a:5e:27:6e:
                    98:5c:da:9b:5d:7b:4e:b2:b6:c5:99:9e:db:37:bb:
                    0c:72:67:8e:27:bb:1d:b3:ba:d6:40:b1:f8:e2:6d:
                    9a:5d:40:ef:9f:8f:fe:c8:97:96:53:7f:37:e2:ba:
                    1d:4c:33:9a:1a:61:6a:3a:7a:7c:b2:26:0f:47:ca:
                    04:30:9f:bf:a7:3b:73:f6:82:dc:9b:4e:a8:1d:78:
                    9b:38:83:e2:5b:6b:d7:42:23:70:27:8a:ba:32:62:
                    0d:e7:aa:bb:14:d8:8d:19:92:a6:3e:c0:d4:1e:b3:
                    13:9e:2f:98:28:84:49:75:27:4e:9a:8b:52:47:eb:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0A:DC:0A:84:CC:04:2A:6C:54:F9:08:74:65:8B:99:3F:EE:30:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/11adcb4c-8ee1-3c2b-86c9-9e053ea536ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:79:e1:fb:94:e9:66:30:fa:ab:53:a5:a7:3a:24:39:75:2a:
         2d:26:43:2a:6f:ff:d1:b1:eb:6c:c0:9e:98:1d:eb:95:60:b4:
         8f:c7:c5:c5:6b:74:f7:e4:a8:f6:f7:eb:d2:f2:2b:3c:75:72:
         e1:2f:ea:93:aa:6e:8a:c5:a3:a7:2e:10:fe:94:19:ff:7b:5e:
         74:77:7e:6c:8e:84:62:32:c2:d6:c8:c1:9f:16:cf:c0:87:cc:
         dd:d8:c9:0d:76:ab:f6:8e:ae:86:50:13:90:27:34:60:7d:ad:
         7c:33:cf:2a:87:6f:a2:a6:f4:ae:64:dd:7a:fe:58:68:5f:91:
         61:76:b1:aa:2f:7a:70:a0:a3:23:d4:af:8d:9c:30:22:72:48:
         ff:64:9f:75:8f:2f:3b:86:8d:31:50:8d:a9:d7:30:92:73:af:
         c7:c4:f3:2d:8e:d9:da:d7:d0:62:4a:6e:35:68:d5:fd:07:36:
         cf:9a:91:12:e1:36:7b:49:b8:70:20:1c:d2:61:7f:e3:ff:8b:
         03:c2:34:8f:c7:28:bb:b7:8f:9a:62:6a:18:5e:b8:fa:ad:ac:
         ec:da:47:a1:2d:9c:c3:3d:a9:0e:fa:29:a5:fe:ce:27:bb:01:
         31:ab:77:aa:f4:b3:67:29:6b:76:9e:2b:7e:c0:7d:07:40:ba:
         30:bf:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:19 2025 by rpki-client on console.sobornost.net