Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa
File:                     47306951-0aab-380f-84d2-7a9c11e67870.roa (raw, json)
Hash identifier:          HdL5rK1l5BCp5gWPhSL05F7h8tpGBAgTqqwhUlLkk+4=
Subject key identifier:   01:CC:5F:8E:4E:7F:55:2B:A3:C0:92:71:FA:A2:93:47:45:28:36:FE
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858496FAF13EBD943E68C770CB000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     1742
IP address blocks:        199.94.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:13:eb:d9:43:e6:8c:77:0c:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=ac6ce315-ea41-49d1-9eb3-91b8850129fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:4f:ab:8c:9c:f3:63:33:48:1d:15:95:e5:
                    08:01:80:59:1f:89:4b:f1:82:7a:9f:63:1c:cf:c8:
                    2d:ad:95:c9:60:9c:2f:76:d1:0c:42:59:e7:67:16:
                    80:85:68:09:af:01:82:9b:eb:76:34:f6:e8:da:43:
                    f9:f9:2a:1e:a2:1e:0d:a1:55:48:7f:b6:c4:cb:a0:
                    78:9c:25:0d:ad:07:be:79:23:4f:4d:ea:fd:7e:ed:
                    e2:90:8e:be:21:8d:f5:64:bf:38:1b:c6:cf:f6:56:
                    44:2a:27:9a:f7:98:60:2d:a0:be:e8:32:6b:02:c3:
                    dd:d0:1b:ce:6e:e4:10:7e:b7:26:9e:a6:ce:39:fa:
                    1b:e1:f0:57:4a:e7:6e:14:79:1d:41:3a:26:32:53:
                    a1:7c:aa:33:54:4d:c3:e9:2d:6a:b8:8c:04:04:94:
                    80:18:68:c3:29:4d:93:0b:73:29:60:00:2c:60:b2:
                    ae:ca:12:bb:85:9d:1a:6b:41:90:9a:ae:43:d3:2f:
                    a6:d4:f2:8b:f7:63:bb:9e:b1:02:75:57:05:0f:69:
                    48:58:2d:28:7a:af:7d:59:c4:48:d7:76:00:d4:22:
                    bf:f4:eb:90:a2:76:f9:f1:36:c2:11:22:9f:f1:6f:
                    5e:3c:d2:eb:a0:de:6b:1a:68:38:7c:3c:59:00:03:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CC:5F:8E:4E:7F:55:2B:A3:C0:92:71:FA:A2:93:47:45:28:36:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47306951-0aab-380f-84d2-7a9c11e67870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:8a:37:ac:7c:26:45:8e:58:15:1d:b8:43:a3:ae:ab:ef:
         ad:b5:3a:a9:81:8a:89:02:53:be:5d:20:1c:5f:f0:46:a2:19:
         d8:2e:bb:6b:05:39:28:67:04:7d:8e:bf:e4:92:06:50:40:93:
         1d:cc:72:b1:70:4e:82:0c:59:06:5c:e9:6b:b5:60:a2:62:c4:
         2c:4b:bb:f5:24:d9:a6:00:2b:51:2d:65:d3:30:28:71:b9:47:
         e3:60:13:b0:a3:50:47:f9:4e:cf:0a:79:56:cc:ec:4d:f3:00:
         92:b5:fb:bf:d8:d5:bf:9a:58:c4:cc:e9:77:21:1a:19:eb:b7:
         d9:4c:18:37:81:7b:96:0e:e2:4c:48:40:87:a4:15:8b:db:e6:
         82:72:54:b6:c0:f9:33:89:ec:20:67:be:6a:8f:40:4c:78:ec:
         48:45:04:3a:18:f2:7a:18:90:77:5a:ea:a1:96:33:2b:1b:2f:
         02:1f:88:1a:28:17:51:43:15:dd:be:fe:f5:f4:90:42:c0:3e:
         b4:b5:21:7c:c9:07:ff:32:28:d4:79:de:c0:0b:e2:8f:8a:85:
         fa:14:3a:08:11:aa:5f:fd:1e:01:b5:e4:0c:ee:78:a4:47:2e:
         a0:57:72:b7:84:ea:c1:d3:40:10:f8:70:ae:90:4b:25:12:c9:
         6e:e1:e1:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxPr2UPmjHcMsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
YWM2Y2UzMTUtZWE0MS00OWQxLTllYjMtOTFiODg1MDEyOWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxPq4yc82MzSB0VleUIAYBZH4lL8YJ6n2Mc
z8gtrZXJYJwvdtEMQlnnZxaAhWgJrwGCm+t2NPbo2kP5+Soeoh4NoVVIf7bEy6B4
nCUNrQe+eSNPTer9fu3ikI6+IY31ZL84G8bP9lZEKiea95hgLaC+6DJrAsPd0BvO
buQQfrcmnqbOOfob4fBXSuduFHkdQTomMlOhfKozVE3D6S1quIwEBJSAGGjDKU2T
C3MpYAAsYLKuyhK7hZ0aa0GQmq5D0y+m1PKL92O7nrECdVcFD2lIWC0oeq99WcRI
13YA1CK/9OuQonb58TbCESKf8W9ePNLroN5rGmg4fDxZAAMQ8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHMX45Of1Uro8CScfqik0dFKDb+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDczMDY5NTEtMGFhYi0z
ODBmLTg0ZDItN2E5YzExZTY3ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx14AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFtkijesfCZFjlgVHbhDo66r7621OqmBiokCU75dIBxf8EaiGdguu2sF
OShnBH2Ov+SSBlBAkx3McrFwToIMWQZc6Wu1YKJixCxLu/Uk2aYAK1EtZdMwKHG5
R+NgE7CjUEf5Ts8KeVbM7E3zAJK1+7/Y1b+aWMTM6XchGhnrt9lMGDeBe5YO4kxI
QIekFYvb5oJyVLbA+TOJ7CBnvmqPQEx47EhFBDoY8noYkHda6qGWMysbLwIfiBoo
F1FDFd2+/vX0kELAPrS1IXzJB/8yKNR53sAL4o+KhfoUOggRql/9HgG15AzueKRH
LqBXcreE6sHTQBD4cK6QSyUSyW7h4co=
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net