Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa
File:                     deb3d6bf-d629-3854-ab53-853046a69a9d.roa (raw, json)
Hash identifier:          Jr/E+1djNDSEPwqVAy3Ce2txUGtmgR5IJI/jt1WBTY4=
Subject key identifier:   DA:15:AB:F8:6D:39:C4:BB:E2:07:95:7D:BC:B8:B2:4E:01:7F:6A:12
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F432858495EEEE588CA2AFDE5B891D560
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     16276
IP address blocks:        192.31.246.0/24 maxlen: 24
                          192.82.115.0/24 maxlen: 24
                          192.240.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e5:88:ca:2a:fd:e5:b8:91:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=2dfa5f49-177d-4911-b17b-a47242291959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:e4:f4:8f:1e:a6:1b:56:c0:34:4d:53:92:
                    b5:68:79:13:ea:cf:28:33:83:21:fc:13:57:46:0d:
                    27:be:3d:58:58:01:17:86:bf:9a:2d:9a:1f:f1:5c:
                    51:cc:31:7b:9c:47:31:b8:9b:9d:6c:2f:6b:3a:de:
                    8f:8a:82:a9:c0:08:80:e8:38:5a:dd:1a:6e:b8:f0:
                    86:b3:78:f7:8c:8c:c4:a8:82:6c:96:c6:d3:17:6a:
                    92:dc:ed:b7:04:4b:15:ff:8d:e7:62:b7:57:b1:31:
                    8e:a9:d2:25:4c:8a:a9:e9:4b:52:2a:71:72:cb:9b:
                    35:a4:21:01:83:21:a1:6e:20:da:51:f5:1b:14:dd:
                    bf:73:d1:c9:16:0c:67:6f:45:4d:32:2e:91:79:be:
                    4c:53:e8:c5:d5:4e:94:4e:e5:d5:f8:53:e5:f2:82:
                    ef:9d:13:dc:00:f3:1f:59:ba:d5:ba:73:51:b5:8c:
                    03:7a:eb:d9:b2:3c:27:69:26:34:40:3a:d1:0e:21:
                    d5:2a:79:4e:8e:78:51:43:86:14:23:b9:92:0c:42:
                    16:04:08:9e:5a:43:29:0a:37:d2:ca:87:60:44:7a:
                    ca:80:62:ee:1f:05:16:f9:48:70:80:36:24:d2:80:
                    f0:8a:80:13:a6:40:c8:32:b1:a8:53:90:35:a4:3f:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:15:AB:F8:6D:39:C4:BB:E2:07:95:7D:BC:B8:B2:4E:01:7F:6A:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/deb3d6bf-d629-3854-ab53-853046a69a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.246.0/24
                  192.82.115.0/24
                  192.240.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:56:4a:8d:fe:62:ba:b9:b2:f7:10:4e:e1:eb:ef:41:c7:
         3f:8c:18:27:0b:f6:a7:5c:48:45:ac:43:11:51:f7:66:01:65:
         76:ae:de:d6:4c:0b:9b:16:3a:38:e6:d1:47:a5:7f:1b:3a:62:
         1f:3b:2f:f8:d4:3d:58:3d:a4:4a:63:18:84:c2:ce:cb:ab:59:
         92:45:0f:02:af:8e:0d:f7:0c:1a:3d:a1:73:64:d3:79:c8:bf:
         83:2e:5c:29:db:6b:6f:4d:2b:f4:77:cb:14:ae:7f:db:cb:6e:
         5d:8f:e8:0d:e3:ad:c4:d0:ca:33:d3:0a:df:19:b0:0d:b5:d9:
         f1:3c:85:c8:00:ff:8f:6f:6d:54:44:da:6f:48:24:17:97:e1:
         55:32:8d:ec:be:b4:7d:bb:3a:a2:07:75:90:0f:6b:28:0e:80:
         b2:ce:97:26:e7:ae:b4:b7:e6:82:52:32:10:de:d3:57:0b:8c:
         13:99:98:44:16:be:07:42:94:46:c0:b4:21:d5:e9:0f:b4:cb:
         3d:e6:91:6d:dd:70:56:76:15:41:3e:ca:67:88:58:92:fb:d8:
         3e:36:9d:55:71:1b:3b:50:54:22:6d:2e:6d:6a:a6:e5:e4:7e:
         10:01:64:b0:0c:76:45:41:5e:09:f6:e7:3e:25:5d:19:1f:6c:
         d5:5d:5c:38
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEle7uWIyir95biR1WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0
Mjg5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
MmRmYTVmNDktMTc3ZC00OTExLWIxN2ItYTQ3MjQyMjkxOTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhLk9I8ephtWwDRNU5K1aHkT6s8oM4Mh/BNX
Rg0nvj1YWAEXhr+aLZof8VxRzDF7nEcxuJudbC9rOt6PioKpwAiA6Dha3RpuuPCG
s3j3jIzEqIJslsbTF2qS3O23BEsV/43nYrdXsTGOqdIlTIqp6UtSKnFyy5s1pCEB
gyGhbiDaUfUbFN2/c9HJFgxnb0VNMi6Reb5MU+jF1U6UTuXV+FPl8oLvnRPcAPMf
WbrVunNRtYwDeuvZsjwnaSY0QDrRDiHVKnlOjnhRQ4YUI7mSDEIWBAieWkMpCjfS
yodgRHrKgGLuHwUW+UhwgDYk0oDwioATpkDIMrGoU5A1pD9ksQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFNoVq/htOcS74geVfby4sk4Bf2oSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2
ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvZGViM2Q2YmYtZDYyOS0z
ODU0LWFiNTMtODUzMDQ2YTY5YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj
NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm
NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw
M2NjZjQyODkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwB/2AwQA
wFJzAwQDwPCYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAD/8VkqN/mK6ubL3EE7h6+9Bxz+MGCcL9qdcSEWs
QxFR92YBZXau3tZMC5sWOjjm0Uelfxs6Yh87L/jUPVg9pEpjGITCzsurWZJFDwKv
jg33DBo9oXNk03nIv4MuXCnba29NK/R3yxSuf9vLbl2P6A3jrcTQyjPTCt8ZsA21
2fE8hcgA/49vbVRE2m9IJBeX4VUyjey+tH27OqIHdZAPaygOgLLOlybnrrS35oJS
MhDe01cLjBOZmEQWvgdClEbAtCHV6Q+0yz3mkW3dcFZ2FUE+ymeIWJL72D42nVVx
GztQVCJtLm1qpuXkfhABZLAMdkVBXgn25z4lXRkfbNVdXDg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:38 2025 by rpki-client on console.sobornost.net