Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa
File:                     ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa (raw, json)
Hash identifier:          W0r+SMpkn64I3sQ/XFQtg43KyHBkhvP9LJxZkvRuGVE=
Subject key identifier:   34:C4:69:4B:16:B5:D1:38:6B:50:B8:78:B7:15:CD:C6:17:2B:71:DA
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858496A19A52F8B05820FA1BA1F80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     5769
IP address blocks:        96.20.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:a5:2f:8b:05:82:0f:a1:ba:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=7b9664b3-3806-4fa5-8193-c25bac7d5de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:b1:63:08:59:8d:21:38:26:55:ad:b0:12:
                    18:78:f5:da:a2:76:46:f0:b7:22:cd:bb:56:6b:92:
                    83:95:6f:82:26:28:b8:07:f6:09:7a:eb:ba:04:e6:
                    71:06:c9:b1:17:7d:25:ee:fe:16:e5:d3:a3:94:fe:
                    38:fa:3e:6d:69:eb:ef:8e:60:81:89:8b:25:df:0a:
                    b8:96:8e:f4:fd:a7:01:5a:64:87:9a:ea:1d:e8:cf:
                    6d:3b:ce:54:80:54:33:69:bd:5c:8f:af:8c:78:c5:
                    ce:7e:4f:73:47:e6:17:8f:73:bf:3c:51:6e:70:a7:
                    0a:0b:e4:24:59:48:42:55:af:5b:55:8c:a7:b7:8d:
                    97:92:15:38:19:b3:1a:59:4e:44:0a:fe:20:2d:e8:
                    01:12:20:9b:50:b9:59:b9:dd:c5:3f:47:5e:7c:56:
                    63:68:16:24:35:54:54:4f:e7:bd:40:14:f5:41:f5:
                    a6:30:38:a9:e0:f7:3b:39:af:f8:ac:cb:47:a6:37:
                    ab:4c:a6:66:9a:1c:9a:89:28:7d:32:fd:ed:50:47:
                    e8:7d:32:81:3c:48:01:b4:d7:fc:df:f0:9a:0b:71:
                    16:2c:68:b1:83:d3:f5:4d:05:ec:86:e3:5b:20:de:
                    0d:9d:6c:49:cd:f4:8f:b4:b6:81:1b:de:19:d8:f8:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C4:69:4B:16:B5:D1:38:6B:50:B8:78:B7:15:CD:C6:17:2B:71:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/ea7b0631-1324-38ba-9568-5f3ed1a7d4f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.20.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:6b:63:50:46:dc:51:b4:09:ed:3a:df:05:8c:f2:cf:aa:
         63:c5:d3:f5:dc:1e:a5:57:a5:5e:00:76:78:bd:81:ad:80:c5:
         fc:82:02:6c:6e:c1:d7:a1:02:73:fa:99:4a:80:fb:5d:73:f2:
         13:0d:d8:61:4e:f4:e0:d7:94:ff:b6:be:89:9b:62:e6:86:21:
         f4:af:a7:a6:96:d4:f4:3a:3c:62:31:c8:11:5e:e8:b2:5a:fb:
         85:d9:41:57:08:83:d6:e7:5c:40:46:a3:55:35:74:18:c9:b8:
         77:54:cd:aa:39:99:20:73:0d:5c:b0:fd:70:e7:7a:80:a0:bf:
         5b:1c:65:e3:e8:7e:04:ab:9a:02:20:b8:36:94:d7:2e:30:5f:
         b5:b9:82:e0:40:bb:60:2e:72:68:2e:9f:31:87:e0:61:74:86:
         90:da:6d:5f:6c:51:9c:8e:5f:0c:a3:48:a7:08:82:d3:3e:94:
         ff:51:d2:fd:eb:5e:fa:73:5a:30:2a:d4:8b:0a:25:48:1b:51:
         86:ca:69:bb:86:90:be:e8:70:50:09:db:17:6b:f0:2c:fd:03:
         14:9d:94:f6:26:ba:c1:4d:65:a2:8f:75:a0:86:2b:41:1b:29:
         60:aa:5b:38:4a:1b:c3:ce:09:0f:d2:ca:b8:53:21:cb:e1:df:
         92:3c:3a:87
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElqGaUviwWCD6G6H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
N2I5NjY0YjMtMzgwNi00ZmE1LTgxOTMtYzI1YmFjN2Q1ZGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTWxYwhZjSE4JlWtsBIYePXaonZG8LcizbtW
a5KDlW+CJii4B/YJeuu6BOZxBsmxF30l7v4W5dOjlP44+j5taevvjmCBiYsl3wq4
lo70/acBWmSHmuod6M9tO85UgFQzab1cj6+MeMXOfk9zR+YXj3O/PFFucKcKC+Qk
WUhCVa9bVYynt42XkhU4GbMaWU5ECv4gLegBEiCbULlZud3FP0defFZjaBYkNVRU
T+e9QBT1QfWmMDip4Pc7Oa/4rMtHpjerTKZmmhyaiSh9Mv3tUEfofTKBPEgBtNf8
3/CaC3EWLGixg9P1TQXshuNbIN4NnWxJzfSPtLaBG94Z2PjwGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDTEaUsWtdE4a1C4eLcVzcYXK3HaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZWE3YjA2MzEtMTMyNC0z
OGJhLTk1NjgtNWYzZWQxYTdkNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCYBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAE6FrY1BG3FG0Ce063wWM8s+qY8XT9dwepVelXgB2eL2BrYDF/IICbG7B
16ECc/qZSoD7XXPyEw3YYU704NeU/7a+iZti5oYh9K+nppbU9Do8YjHIEV7oslr7
hdlBVwiD1udcQEajVTV0GMm4d1TNqjmZIHMNXLD9cOd6gKC/Wxxl4+h+BKuaAiC4
NpTXLjBftbmC4EC7YC5yaC6fMYfgYXSGkNptX2xRnI5fDKNIpwiC0z6U/1HS/ete
+nNaMCrUiwolSBtRhsppu4aQvuhwUAnbF2vwLP0DFJ2U9ia6wU1loo91oIYrQRsp
YKpbOEobw84JD9LKuFMhy+Hfkjw6hw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:38 2025 by rpki-client on console.sobornost.net