Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/55cb1f71-2a9c-3bc7-b594-b44adab0a197.roa
File:                     55cb1f71-2a9c-3bc7-b594-b44adab0a197.roa (raw, json)
Hash identifier:          njuF4VDSHj7LZx9wIbXEsZhRRBRPxmF04iKK9XUWcQM=
Subject key identifier:   81:04:78:DC:98:4F:97:61:80:83:7B:40:02:6A:AC:D3:6F:77:65:08
Certificate issuer:       /CN=163a632b-ffc2-46ff-89dc-2482e240d862
Certificate serial:       010D0C9F4328584964844622990454E91EB20680
Authority key identifier: 11:CC:31:B9:2B:E4:A3:2F:AD:21:7F:0F:22:B9:9E:5D:3F:6F:C5:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/55cb1f71-2a9c-3bc7-b594-b44adab0a197.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     32281
IP address blocks:        64.37.16.0/23 maxlen: 24
                          64.37.18.0/23 maxlen: 24
                          64.37.20.0/22 maxlen: 24
                          64.37.24.0/23 maxlen: 24
                          64.37.26.0/23 maxlen: 24
                          64.37.28.0/23 maxlen: 24
                          64.37.30.0/24 maxlen: 24
                          192.132.5.0/24 maxlen: 24
                          192.174.24.0/21 maxlen: 24
                          199.87.136.0/21 maxlen: 24
                          199.91.128.0/22 maxlen: 24
                          199.192.70.0/23 maxlen: 24
                          2605:f880::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:46:22:99:04:54:e9:1e:b2:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163a632b-ffc2-46ff-89dc-2482e240d862
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=eca119ee-5cbf-4d07-a0d6-359d4141c303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:83:c2:99:58:35:02:f1:82:4b:5d:4e:38:
                    bb:1b:9d:7f:56:5c:14:24:ee:b1:5f:fc:94:2d:76:
                    70:e8:f4:38:d4:37:53:68:18:72:e3:9a:c3:64:00:
                    f3:46:3f:af:a2:35:1c:25:7d:77:8a:65:32:cf:27:
                    97:88:eb:77:88:7e:43:cc:7c:45:76:7f:ba:50:90:
                    40:1f:84:84:9d:85:ee:ba:39:0e:26:b8:e4:46:86:
                    cc:d3:cc:e6:34:78:92:57:3f:b6:d7:e3:58:1b:7c:
                    0c:98:e6:2e:ae:5d:8e:ee:5c:89:aa:d1:97:bd:6e:
                    2a:f9:05:a3:d8:ad:ce:93:04:a3:d0:b8:0a:47:fb:
                    e9:43:5b:72:a4:fb:c2:12:f6:97:45:81:b9:3d:2c:
                    cd:0b:06:c0:59:6d:78:6a:77:db:c5:8c:43:c7:27:
                    46:2d:a8:41:7c:29:9f:55:2f:ce:db:c9:7b:fa:cc:
                    e9:50:d3:fb:b1:9d:05:28:2e:2f:1b:0f:c4:be:b5:
                    94:73:36:0d:5f:22:09:1a:8c:f8:44:a1:f9:13:64:
                    8f:70:07:7e:fe:59:00:d9:17:7a:7c:f0:fa:cf:c8:
                    e5:9b:3b:8f:df:00:ee:07:02:d0:94:2c:75:d7:b6:
                    5c:46:5c:63:b8:22:b7:a5:55:d1:fb:d7:be:3f:a2:
                    68:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:78:DC:98:4F:97:61:80:83:7B:40:02:6A:AC:D3:6F:77:65:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/55cb1f71-2a9c-3bc7-b594-b44adab0a197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862/163a632b-ffc2-46ff-89dc-2482e240d862.crl

            X509v3 Authority Key Identifier:
                keyid:11:CC:31:B9:2B:E4:A3:2F:AD:21:7F:0F:22:B9:9E:5D:3F:6F:C5:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/163a632b-ffc2-46ff-89dc-2482e240d862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.16.0-64.37.30.255
                  192.132.5.0/24
                  192.174.24.0/21
                  199.87.136.0/21
                  199.91.128.0/22
                  199.192.70.0/23
                IPv6:
                  2605:f880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:10:90:39:42:e3:6b:84:05:ef:22:e5:dd:b5:cf:1f:b2:
         ca:1c:90:6b:a2:0c:03:94:b5:fe:92:23:3c:79:b4:45:e9:96:
         04:dc:cb:28:59:4e:f0:a6:c7:88:a9:54:12:72:f1:3a:5d:9a:
         ec:8b:33:62:f2:a7:c1:25:8e:88:17:14:74:8d:19:98:f6:b6:
         15:96:54:8b:3f:8f:ae:07:02:89:6b:58:0f:cd:ed:89:47:fc:
         0c:c3:11:9c:a0:96:04:7d:ea:54:20:79:32:e8:4d:f6:b3:5d:
         11:70:de:5a:35:e9:85:b3:9f:d1:7c:a8:40:58:50:a4:6e:5e:
         93:f5:40:31:2c:b0:85:bd:06:6d:45:ab:6b:df:c4:fb:00:8a:
         bb:c9:bc:cb:14:ce:6c:3e:ee:d3:44:2e:fa:33:40:01:28:6e:
         f0:2d:76:d4:f4:33:ef:25:3d:75:47:91:6a:ab:ac:17:96:19:
         70:f7:9e:b3:9b:bf:8b:35:a7:0b:60:9e:2e:2f:e6:22:43:47:
         6d:6a:27:b9:8f:3c:e8:e7:e2:b2:9e:bd:87:60:64:3d:3b:f8:
         b6:27:97:91:6a:d7:c9:d5:fc:c0:d4:9a:02:18:8b:f9:fd:51:
         77:31:3f:2a:9d:ff:26:1e:fe:af:14:21:db:cf:e4:38:c2:7e:
         de:ee:a1:c5
-----BEGIN CERTIFICATE-----
MIIGeDCCBWCgAwIBAgIUAQ0Mn0MoWElkhEYimQRU6R6yBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYzYTYzMmItZmZjMi00NmZmLTg5ZGMtMjQ4MmUyNDBk
ODYyMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
ZWNhMTE5ZWUtNWNiZi00ZDA3LWEwZDYtMzU5ZDQxNDFjMzAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/iDwplYNQLxgktdTji7G51/VlwUJO6xX/yU
LXZw6PQ41DdTaBhy45rDZADzRj+vojUcJX13imUyzyeXiOt3iH5DzHxFdn+6UJBA
H4SEnYXuujkOJrjkRobM08zmNHiSVz+21+NYG3wMmOYurl2O7lyJqtGXvW4q+QWj
2K3OkwSj0LgKR/vpQ1typPvCEvaXRYG5PSzNCwbAWW14anfbxYxDxydGLahBfCmf
VS/O28l7+szpUNP7sZ0FKC4vGw/EvrWUczYNXyIJGoz4RKH5E2SPcAd+/lkA2Rd6
fPD6z8jlmzuP3wDuBwLQlCx117ZcRlxjuCK3pVXR+9e+P6JorQIDAQABo4IDijCC
A4YwHQYDVR0OBBYEFIEEeNyYT5dhgIN7QAJqrNNvd2UIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNjNh
NjMyYi1mZmMyLTQ2ZmYtODlkYy0yNDgyZTI0MGQ4NjIvNTVjYjFmNzEtMmE5Yy0z
YmM3LWI1OTQtYjQ0YWRhYjBhMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTYzYTYzMmItZmZjMi00NmZmLTg5
ZGMtMjQ4MmUyNDBkODYyLzE2M2E2MzJiLWZmYzItNDZmZi04OWRjLTI0ODJlMjQw
ZDg2Mi5jcmwwHwYDVR0jBBgwFoAUEcwxuSvkoy+tIX8PIrmeXT9vxR0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNjNhNjMyYi1mZmMyLTQ2ZmYtODlkYy0yNDgy
ZTI0MGQ4NjIuY2VyMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsMAwDBARAJRAD
BABAJR4DBADAhAUDBAPArhgDBAPHV4gDBALHW4ADBAHHwEYwDQQCAAIwBwMFACYF
+IAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAPUUQkDlC42uEBe8i5d21zx+yyhyQa6IMA5S1/pIjPHm0RemW
BNzLKFlO8KbHiKlUEnLxOl2a7IszYvKnwSWOiBcUdI0ZmPa2FZZUiz+PrgcCiWtY
D83tiUf8DMMRnKCWBH3qVCB5MuhN9rNdEXDeWjXphbOf0XyoQFhQpG5ek/VAMSyw
hb0GbUWra9/E+wCKu8m8yxTObD7u00Qu+jNAAShu8C121PQz7yU9dUeRaqusF5YZ
cPees5u/izWnC2CeLi/mIkNHbWonuY886Ofisp69h2BkPTv4tieXkWrXydX8wNSa
AhiL+f1RdzE/Kp3/Jh7+rxQh28/kOMJ+3u6hxQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net