Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa
File:                     012553be-cadc-391f-be02-761ff5c3fe9c.roa (raw, json)
Hash identifier:          DRdyzmyL03n4CJtCiAtkiKn+pxa3kn2B4+yn83EUzQY=
Subject key identifier:   40:88:F5:73:C5:0A:21:5D:2F:62:B2:F5:76:A2:39:80:0A:0A:53:21
Certificate issuer:       /CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
Certificate serial:       010D0C9F432858493C0928CE683ACDE4F3083280
Authority key identifier: 79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     26269
IP address blocks:        160.223.176.0/22 maxlen: 24
                          162.216.232.0/22 maxlen: 24
                          173.45.176.0/20 maxlen: 24
                          198.135.144.0/21 maxlen: 24
                          199.58.144.0/22 maxlen: 24
                          199.241.220.0/22 maxlen: 24
                          2602:ff89::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:28:ce:68:3a:cd:e4:f3:08:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4877b41-a7e3-491a-a87e-56a8cf46d169
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=f45b0c7a-63ed-4d66-aa6b-20ef849bfda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:79:1b:6e:e4:da:c4:63:32:38:72:33:b5:
                    9e:98:45:ca:46:42:11:00:7f:28:2a:43:2b:e4:1d:
                    11:aa:63:b1:fa:7a:86:69:d6:c7:a0:c7:e6:bb:33:
                    65:9f:3a:0d:fa:9d:eb:07:8c:32:30:e6:12:e4:73:
                    3f:9e:9b:d0:8b:15:35:99:26:e5:b3:15:1f:08:21:
                    fb:d0:6a:8f:ad:5e:dc:75:e4:10:7c:35:5a:9c:bc:
                    9c:27:3f:e0:40:90:10:5c:86:99:7a:81:1f:15:03:
                    98:fa:47:e8:61:95:28:89:fb:e9:54:62:7a:42:83:
                    8d:3a:0f:0a:a2:f3:93:fc:a4:fb:fc:5a:d0:7d:0c:
                    d2:1f:cf:07:42:29:db:5f:d2:1e:3f:9d:43:0a:40:
                    3b:ec:c7:89:13:cd:9e:8d:15:c1:a5:d6:72:5f:3b:
                    16:89:02:d4:c0:49:11:7e:27:8f:98:b4:f6:b3:ef:
                    91:9a:29:ee:e6:fb:66:80:fa:f1:e1:18:11:b2:68:
                    cd:62:9a:15:10:fe:c3:02:e6:eb:4e:49:77:d1:9d:
                    db:18:23:db:c7:3e:cf:fe:76:73:b7:05:de:1b:5e:
                    71:f2:76:0a:ec:8c:42:a2:f8:0d:d0:be:18:02:f1:
                    20:86:84:33:df:c8:39:05:78:64:6c:d1:b9:79:b4:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:F5:73:C5:0A:21:5D:2F:62:B2:F5:76:A2:39:80:0A:0A:53:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/012553be-cadc-391f-be02-761ff5c3fe9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169/e4877b41-a7e3-491a-a87e-56a8cf46d169.crl

            X509v3 Authority Key Identifier:
                keyid:79:4F:EC:F4:5F:EC:2D:CF:3D:FC:8E:E4:60:BF:D0:94:46:D5:26:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4877b41-a7e3-491a-a87e-56a8cf46d169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.176.0/22
                  162.216.232.0/22
                  173.45.176.0/20
                  198.135.144.0/21
                  199.58.144.0/22
                  199.241.220.0/22
                IPv6:
                  2602:ff89::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:35:30:99:38:3a:93:f2:a4:93:5b:19:ce:e1:69:9d:0e:2a:
         26:57:56:44:0e:78:d8:11:ad:bf:28:4b:a4:b4:50:fb:09:c4:
         d8:66:77:3f:bb:73:2f:5a:48:53:96:41:ce:3e:01:9c:95:97:
         23:99:af:7a:39:ba:ce:06:89:04:a3:de:69:27:26:6c:29:d8:
         a2:71:52:00:58:ae:ec:f8:83:c5:97:94:cf:72:bc:e3:84:d1:
         88:11:4c:7c:22:46:15:5d:9b:3f:90:15:2b:e2:fc:01:ee:bd:
         db:e3:93:37:a7:c3:05:05:35:c5:db:cc:85:18:1b:e5:6b:4a:
         d2:4a:88:f0:4f:c2:3e:4f:15:04:c2:29:b9:8d:cf:11:6e:16:
         c5:35:11:80:77:76:c4:12:d0:de:dd:bf:ce:41:85:17:5d:aa:
         ca:b0:5e:46:08:2b:fa:08:b5:1a:d9:69:fe:84:cf:2e:2b:b0:
         b4:9a:9a:1a:57:bc:55:72:df:80:d1:c3:94:e9:2b:26:09:df:
         8d:cc:6a:cb:2d:6e:24:de:fc:f3:f0:49:d0:4d:01:45:0c:ae:
         dd:a5:d7:b6:c6:17:0c:59:c8:91:e0:87:37:09:c2:a9:ca:8d:
         f9:e5:be:34:cc:3a:fa:8e:f1:38:54:30:c6:e2:e1:24:b2:a7:
         6d:2a:e0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:38 2025 by rpki-client on console.sobornost.net