Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa
File:                     2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa (raw, json)
Hash identifier:          V9j2ZS6u8WaXypu83P7lWHATQ8w7c/3V2QZpggngdRk=
Subject key identifier:   C7:52:88:9B:08:B6:93:1F:E2:CE:4A:3E:86:EE:6E:54:EC:B8:E4:32
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858496A19AEE400F460B92A293000
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     30103
IP address blocks:        161.199.136.0/23 maxlen: 24
                          198.251.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:ae:e4:00:f4:60:b9:2a:29:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=4b7b6f27-eb2c-4be6-855a-07711b349900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:86:04:30:df:fe:30:63:bf:cc:fd:6c:40:
                    cf:e1:7f:bb:c2:48:e1:56:9c:7e:88:a9:9c:80:90:
                    73:db:37:45:a8:88:6f:99:69:5d:6e:58:4e:76:07:
                    b1:27:fc:30:b4:d3:bf:ba:a8:10:af:28:68:db:54:
                    df:04:1c:14:c2:f1:56:d1:1f:d7:07:10:d1:d7:3d:
                    9b:b4:1f:f1:33:3f:36:f2:22:5c:0d:56:b9:81:70:
                    f3:a9:cf:55:d7:cc:51:c8:88:57:88:be:74:32:2a:
                    af:16:fb:ab:3b:dc:66:38:95:9b:10:96:2a:98:cc:
                    b7:c6:03:fc:ff:cb:a5:e3:fa:27:1f:7f:e6:89:df:
                    1a:26:0a:30:10:16:10:0f:68:67:ac:ae:a7:6f:53:
                    66:70:e5:4e:7b:fd:f1:1d:cc:e1:ca:b8:90:8a:44:
                    12:97:9b:d1:75:ee:d4:66:02:9a:64:dd:f2:19:c7:
                    6f:cb:96:fe:bb:3f:0b:d2:ea:f8:78:8d:00:dd:c6:
                    0c:2f:e0:b6:32:09:4b:18:c2:c7:e6:71:2d:31:f1:
                    76:51:89:38:c9:54:58:4e:4c:1d:50:f4:0d:68:58:
                    c1:ab:3a:ec:5a:de:ef:17:db:ec:09:5d:1e:74:db:
                    39:d5:0c:f6:67:35:eb:e1:a2:a3:6a:58:17:f0:5f:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:88:9B:08:B6:93:1F:E2:CE:4A:3E:86:EE:6E:54:EC:B8:E4:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/2a09daeb-2ab1-3c62-9d92-99d6784da46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.136.0/23
                  198.251.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:5e:6b:4b:54:e2:db:1a:72:9b:b1:d0:2d:94:2f:d0:41:
         88:f9:b2:37:50:a5:ca:7a:2f:5b:82:48:98:ac:02:77:c7:dd:
         a9:d4:7a:22:2b:29:ae:1c:71:ec:76:b6:12:76:1d:fd:79:c9:
         05:04:c9:1e:26:ad:27:59:52:a1:2f:b0:f7:ef:01:d7:48:93:
         3a:63:62:0f:5c:b2:aa:cf:f8:bb:9e:7f:9e:f1:67:40:36:7a:
         af:fb:2d:e6:ca:c1:e8:b8:72:24:ad:9a:16:d7:51:9d:53:17:
         b2:64:8e:61:99:3a:b1:44:02:d6:de:45:8c:99:b6:1e:f5:2d:
         bc:b4:2b:99:8e:62:4a:9b:84:ef:2f:9c:12:97:5d:40:05:4a:
         3d:1b:94:cf:67:6a:31:88:af:c5:ef:1f:75:f4:4c:37:07:79:
         97:55:33:40:1b:ad:0b:ab:51:eb:15:fc:00:07:e3:f8:66:68:
         9c:d7:91:4d:ea:e6:79:35:a9:59:27:19:97:8f:84:58:11:ce:
         69:91:8b:83:f5:fe:32:91:32:57:8f:89:8e:3b:67:3b:20:a7:
         63:0c:2e:10:71:3a:87:dc:8f:20:68:40:11:94:3d:5d:b0:c9:
         b1:f6:50:33:88:47:db:e3:69:2d:60:f6:8d:e2:aa:25:70:04:
         b9:11:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:37 2025 by rpki-client on console.sobornost.net