Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/76641220-74f1-30a0-9d59-bfa4a692530b.roa
File:                     76641220-74f1-30a0-9d59-bfa4a692530b.roa (raw, json)
Hash identifier:          8pQe6GCJnnjkUr02XGwz66JF1CEGVJbmq3IwYigmPq0=
Subject key identifier:   DF:44:4D:43:5E:EE:D9:95:F1:11:64:9A:48:41:6F:49:3D:B2:34:8C
Certificate issuer:       /CN=c42cfaea-6b46-494e-95ea-944662b8624b
Certificate serial:       010D0C9F43285849674EEB809E3D2E004C8B7780
Authority key identifier: 3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/76641220-74f1-30a0-9d59-bfa4a692530b.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        198.232.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:eb:80:9e:3d:2e:00:4c:8b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42cfaea-6b46-494e-95ea-944662b8624b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=dc0f3213-42d9-4c2c-8e21-14c71e9bf9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e8:68:2f:0b:2b:f0:65:c2:f9:80:da:20:8e:
                    10:6e:92:91:9b:6f:16:3b:bf:02:db:38:19:ea:a7:
                    51:b0:b5:af:da:ac:38:35:03:17:c3:b3:fa:bb:9f:
                    f9:c4:51:85:e2:f4:85:18:8f:0f:6e:67:08:b8:60:
                    4a:54:70:7b:c1:65:30:b1:bd:33:71:8d:8b:3a:eb:
                    24:e4:5e:f0:4d:41:a6:77:0a:0e:1e:85:55:95:c5:
                    fd:57:7d:6d:2a:93:21:fd:93:ba:13:d8:7b:7d:23:
                    2c:ac:60:a7:ec:3c:eb:53:40:35:c4:e3:01:6f:a0:
                    fd:cc:7c:d4:8d:90:ac:a2:67:94:55:45:0a:a3:bd:
                    82:b2:02:29:d9:0e:3f:1c:47:94:f3:54:24:b9:a0:
                    a0:2f:07:aa:8c:06:aa:d7:f3:65:c1:6e:4a:50:c7:
                    d6:5b:f5:82:8c:5a:3e:f5:e2:27:31:b2:50:3a:d0:
                    e1:67:55:4a:cb:87:7f:30:f1:c0:de:19:20:8e:44:
                    4b:70:a9:9a:75:6b:3c:ab:d8:91:36:e7:5d:5a:f6:
                    3d:08:06:db:d6:37:9e:7e:e6:78:7c:d3:11:76:e2:
                    9f:b7:36:f8:e3:b0:94:11:bd:56:44:71:55:37:b3:
                    3d:ed:7a:6e:81:35:ac:f3:e9:30:f6:fc:fc:5f:62:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:4D:43:5E:EE:D9:95:F1:11:64:9A:48:41:6F:49:3D:B2:34:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/76641220-74f1-30a0-9d59-bfa4a692530b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b/c42cfaea-6b46-494e-95ea-944662b8624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AF:58:9A:D1:8F:65:47:CD:5A:B7:57:C6:B6:EA:CD:2D:AB:6A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c42cfaea-6b46-494e-95ea-944662b8624b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.232.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:d4:ce:7d:7c:8e:52:bc:f9:e8:d6:31:cf:47:d9:e7:df:
         73:df:a8:b9:f3:46:b4:47:da:a1:ee:27:b5:d6:d5:21:44:69:
         42:d9:97:8a:82:f4:66:2b:bf:bc:f7:55:33:bb:cf:28:3f:a2:
         06:1b:9d:10:b9:76:26:33:bb:a9:f2:f0:48:4d:14:05:bc:8d:
         22:33:a1:df:a7:5a:63:11:a9:09:2b:d6:51:6c:3d:3d:21:86:
         29:3e:88:74:54:12:33:cc:c7:83:21:d5:6a:e4:98:7a:66:33:
         6e:01:9d:a1:4d:b2:b6:b0:23:87:6b:5f:0e:91:f2:99:fd:a5:
         1c:0b:72:8c:0d:f5:76:f9:b4:43:b6:74:34:c4:0e:57:5a:b4:
         10:f5:f4:2b:b6:96:44:67:ca:6a:c3:42:9c:f6:bd:04:fe:19:
         26:0e:eb:87:15:88:e4:63:12:30:db:e4:47:23:2c:4a:d3:a3:
         5d:2f:57:18:57:e7:dc:30:ad:6b:c7:6a:16:a6:5a:3b:98:17:
         ea:89:84:e9:45:2a:d9:c6:af:12:a9:5b:b4:7d:fd:e8:1d:3e:
         e4:fe:c4:14:a7:b0:d1:ef:a9:b7:e4:c8:45:b5:a9:12:ff:25:
         f2:9a:0b:18:00:9d:a3:96:dc:e1:f1:31:26:1f:06:7e:44:65:
         02:e2:4c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:35 2025 by rpki-client on console.sobornost.net