Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
File:                     ab540f08-40ca-362e-a723-f3bf0d53cae8.roa (raw, json)
Hash identifier:          iL4ko11pdH5D53eVrRcnXzyNyPZSWQTGjSTjvTk4AZo=
Subject key identifier:   6C:E2:5A:CF:FB:17:2B:47:15:D9:B1:8C:4E:8A:E6:37:6D:AA:0A:71
Certificate issuer:       /CN=67612b49-91a4-42d2-8352-16977b5d8e8a
Certificate serial:       010D0C9F432858496FAF05AC96FB1515E5168D00
Authority key identifier: 26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     14041
IP address blocks:        198.59.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:05:ac:96:fb:15:15:e5:16:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67612b49-91a4-42d2-8352-16977b5d8e8a
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=3d1253ee-9a81-4f18-ac30-a3955004402c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:b2:c4:83:62:e9:82:85:8b:4a:e8:a6:27:
                    2e:53:2a:68:39:a3:ce:1f:cc:65:47:62:82:c5:6e:
                    ee:04:a1:a1:20:f7:c6:76:59:2d:cb:39:25:2b:13:
                    6b:f4:26:a2:41:f9:90:16:11:fd:f2:7f:a3:dc:4c:
                    1d:57:4b:4e:1d:7c:5b:00:74:a0:fc:47:81:4e:d6:
                    c7:e7:8f:a4:93:b7:3c:e2:f2:25:45:aa:dc:5a:a0:
                    ed:8f:ab:b9:b5:54:4d:f2:59:3f:21:53:4e:04:82:
                    7d:29:6f:b0:64:64:8a:4c:b0:8f:e1:5f:43:9e:35:
                    77:21:ce:aa:47:1e:1a:97:69:95:2e:f4:6b:e4:2e:
                    ea:ce:34:86:29:6a:76:ab:c7:85:bf:eb:f9:f8:02:
                    85:ac:cb:af:d6:d2:d6:2f:85:29:7c:7b:6c:33:e4:
                    00:b9:96:70:54:05:2c:f9:1e:e6:be:18:88:2f:fc:
                    84:49:7e:d9:91:21:33:92:a9:d3:d2:85:87:1a:b4:
                    4a:40:59:27:b2:c5:be:3b:53:e3:2a:50:9c:91:f9:
                    8d:59:ad:45:ee:14:ac:ff:8d:1d:c2:6f:a1:83:c5:
                    ed:d1:f9:d2:b8:e5:63:6a:36:79:f6:63:24:fb:12:
                    20:c1:ec:4a:b6:58:d9:42:ae:14:9e:3d:3c:8a:73:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E2:5A:CF:FB:17:2B:47:15:D9:B1:8C:4E:8A:E6:37:6D:AA:0A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/ab540f08-40ca-362e-a723-f3bf0d53cae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a/67612b49-91a4-42d2-8352-16977b5d8e8a.crl

            X509v3 Authority Key Identifier:
                keyid:26:B9:EA:BA:65:7A:DB:E3:64:D8:3F:BF:D2:FA:77:F6:5B:10:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/67612b49-91a4-42d2-8352-16977b5d8e8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:79:90:06:d2:3f:dc:94:70:2c:68:8b:62:00:3e:bb:36:db:
         57:a5:bd:5a:ec:38:24:1b:86:1a:4d:36:f3:d9:3b:36:a5:51:
         e9:2d:99:ad:ae:d9:da:c0:49:a1:b4:37:c0:0a:e6:a7:52:fa:
         26:02:13:f9:5a:73:52:5d:59:21:4f:41:09:11:8f:32:d5:c7:
         fe:e1:37:c8:50:68:16:fa:cf:80:6d:86:dd:21:40:b8:d1:ff:
         42:f9:dc:ba:5d:43:d9:63:86:a1:5c:51:d2:19:8d:98:d9:14:
         0c:f7:62:28:fe:a1:80:a6:f9:70:12:85:1f:cb:e6:00:27:4f:
         fb:34:56:90:14:66:53:f3:2e:27:96:0d:aa:5a:4f:ad:61:9f:
         1d:6d:49:15:2e:e6:42:f1:7a:20:95:f9:12:6c:a7:43:20:a3:
         e8:1a:a9:7b:0f:bc:61:6e:a5:fe:11:5f:6d:fb:e4:58:2d:54:
         9c:ec:59:a7:f3:4b:1d:e3:13:ae:c5:30:59:67:bc:da:f6:90:
         bf:d2:f1:72:2e:e1:ef:18:e3:df:57:d4:bf:32:f1:d6:48:1a:
         3d:7a:eb:7f:8b:e3:3b:96:ab:d2:e0:dc:35:65:1f:09:92:c8:
         fc:97:e9:86:25:db:0a:fe:f1:c0:86:df:42:ff:e1:96:8a:be:
         cb:3e:21:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwWslvsVFeUWjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjc2MTJiNDktOTFhNC00MmQyLTgzNTItMTY5NzdiNWQ4
ZThhMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
M2QxMjUzZWUtOWE4MS00ZjE4LWFjMzAtYTM5NTUwMDQ0MDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUiyxINi6YKFi0ropicuUypoOaPOH8xlR2KC
xW7uBKGhIPfGdlktyzklKxNr9CaiQfmQFhH98n+j3EwdV0tOHXxbAHSg/EeBTtbH
54+kk7c84vIlRarcWqDtj6u5tVRN8lk/IVNOBIJ9KW+wZGSKTLCP4V9DnjV3Ic6q
Rx4al2mVLvRr5C7qzjSGKWp2q8eFv+v5+AKFrMuv1tLWL4UpfHtsM+QAuZZwVAUs
+R7mvhiIL/yESX7ZkSEzkqnT0oWHGrRKQFknssW+O1PjKlCckfmNWa1F7hSs/40d
wm+hg8Xt0fnSuOVjajZ59mMk+xIgwexKtljZQq4Unj08inPpLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGziWs/7FytHFdmxjE6K5jdtqgpxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzYx
MmI0OS05MWE0LTQyZDItODM1Mi0xNjk3N2I1ZDhlOGEvYWI1NDBmMDgtNDBjYS0z
NjJlLWE3MjMtZjNiZjBkNTNjYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc2MTJiNDktOTFhNC00MmQyLTgz
NTItMTY5NzdiNWQ4ZThhLzY3NjEyYjQ5LTkxYTQtNDJkMi04MzUyLTE2OTc3YjVk
OGU4YS5jcmwwHwYDVR0jBBgwFoAUJrnqumV62+Nk2D+/0vp39lsQDGkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzYxMmI0OS05MWE0LTQyZDItODM1Mi0xNjk3
N2I1ZDhlOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjsCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZ5kAbSP9yUcCxoi2IAPrs221elvVrsOCQbhhpNNvPZOzalUektma2u
2drASaG0N8AK5qdS+iYCE/lac1JdWSFPQQkRjzLVx/7hN8hQaBb6z4Btht0hQLjR
/0L53LpdQ9ljhqFcUdIZjZjZFAz3Yij+oYCm+XAShR/L5gAnT/s0VpAUZlPzLieW
DapaT61hnx1tSRUu5kLxeiCV+RJsp0Mgo+gaqXsPvGFupf4RX2375FgtVJzsWafz
Sx3jE67FMFlnvNr2kL/S8XIu4e8Y499X1L8y8dZIGj1663+L4zuWq9Lg3DVlHwmS
yPyX6YYl2wr+8cCG30L/4ZaKvss+Ia4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net