Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa
File:                     a83e6f24-07d1-3db4-b07b-ee14911a684f.roa (raw, json)
Hash identifier:          oiBRgT+qllFfaXzgnaiz2IgNu9pRh+0sVOGS0UYH6mE=
Subject key identifier:   8F:C9:DD:6A:33:8F:4A:0F:2F:D2:D2:45:E3:90:E6:85:A0:4E:37:A2
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858497DA472ED8585AB86C2AF9568
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     14061
IP address blocks:        104.131.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:72:ed:85:85:ab:86:c2:af:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=368e7a63-6624-41c9-afd9-8aa46eed6bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:84:93:d5:0b:56:de:2f:fc:2e:f8:ef:f5:
                    ae:71:f9:45:db:d1:36:94:61:e9:63:9e:12:3c:28:
                    59:0c:6e:30:b2:ec:26:d8:14:46:ab:5c:40:f5:97:
                    76:e0:7a:35:ac:d4:69:57:81:c2:88:7c:d0:1b:59:
                    6f:1a:50:b7:3f:16:77:c4:74:b3:df:60:f7:fc:0a:
                    a5:c6:92:3f:81:cc:df:15:04:1f:ba:73:ce:6b:41:
                    58:a9:b3:4c:3a:72:a9:35:f7:db:87:05:90:68:12:
                    2c:a9:91:b2:e4:e9:b8:a1:cb:dc:09:35:48:5c:b0:
                    83:e5:73:37:83:c6:10:2e:f3:e6:42:b9:69:33:60:
                    ff:0c:92:ed:2d:35:d7:d9:d7:b0:b8:70:1a:75:3f:
                    c2:3a:b6:8b:b4:be:ac:cb:39:d0:98:8b:c3:04:35:
                    cf:f1:a5:a5:83:de:ed:1b:d0:49:6f:a2:60:8a:b2:
                    d7:c3:79:df:16:c1:f5:91:75:a4:99:7a:c2:69:2e:
                    81:70:3c:ab:06:db:8e:47:9d:e8:38:ac:77:10:90:
                    ba:e6:66:7c:a5:10:a5:e7:dd:a5:ec:af:ff:de:4e:
                    ff:7c:ff:a7:9f:ff:7d:29:99:19:fc:40:3f:71:f7:
                    41:c2:5e:11:c8:96:59:70:eb:cc:a5:d6:e3:d7:ba:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C9:DD:6A:33:8F:4A:0F:2F:D2:D2:45:E3:90:E6:85:A0:4E:37:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:0d:ed:5c:95:cc:ce:e2:d6:9e:71:c1:4c:bb:e5:e8:bd:6d:
         4c:d9:6e:cf:0b:7c:53:56:0e:07:12:e0:38:99:af:6d:2a:30:
         64:35:cc:1d:cf:fd:6e:92:09:8f:0b:af:19:07:4d:5e:d6:5e:
         f3:c4:65:d6:2f:0c:e8:4b:5a:ba:88:a5:55:4b:58:ee:05:73:
         e5:20:c7:8a:07:d2:db:e6:e3:a2:a1:69:96:89:8d:9a:b4:12:
         a7:06:33:fa:5e:b2:51:1a:3f:36:05:70:d6:e4:be:22:53:84:
         33:f4:18:2b:df:2e:b1:5c:62:96:0e:b7:46:46:00:dd:8b:81:
         a0:bd:2c:a1:fa:e6:40:5d:f8:f6:de:4f:ab:0e:4b:dc:83:d8:
         0b:05:59:77:99:fb:f1:b2:fc:ce:3b:3a:83:ab:e4:d8:aa:2b:
         e5:37:40:e6:57:a5:32:9f:18:ba:2c:b0:26:80:74:fa:2b:4a:
         cf:c5:f7:a5:34:1f:4d:ee:e3:6a:91:d8:58:09:b4:5f:dc:1e:
         68:ba:d3:2c:c9:24:42:74:54:e0:a3:e0:a7:99:9d:41:5b:7a:
         7a:44:fe:39:9c:58:f6:10:88:70:5a:58:a1:cc:eb:f1:92:b9:
         41:41:b3:79:94:03:c6:40:5e:91:8e:65:fe:ed:74:4b:c5:72:
         41:0e:e2:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEl9pHLthYWrhsKvlWgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MzY4ZTdhNjMtNjYyNC00MWM5LWFmZDktOGFhNDZlZWQ2YmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeKEk9ULVt4v/C747/WucflF29E2lGHpY54S
PChZDG4wsuwm2BRGq1xA9Zd24Ho1rNRpV4HCiHzQG1lvGlC3PxZ3xHSz32D3/Aql
xpI/gczfFQQfunPOa0FYqbNMOnKpNffbhwWQaBIsqZGy5Om4ocvcCTVIXLCD5XM3
g8YQLvPmQrlpM2D/DJLtLTXX2dewuHAadT/COraLtL6syznQmIvDBDXP8aWlg97t
G9BJb6JgirLXw3nfFsH1kXWkmXrCaS6BcDyrBtuOR53oOKx3EJC65mZ8pRCl592l
7K//3k7/fP+nn/99KZkZ/EA/cfdBwl4RyJZZcOvMpdbj17p++QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI/J3Wozj0oPL9LSReOQ5oWgTjeiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYTgzZTZmMjQtMDdkMS0z
ZGI0LWIwN2ItZWUxNDkxMWE2ODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAaIMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAuw3tXJXMzuLWnnHBTLvl6L1tTNluzwt8U1YOBxLgOJmvbSowZDXMHc/9
bpIJjwuvGQdNXtZe88Rl1i8M6EtauoilVUtY7gVz5SDHigfS2+bjoqFplomNmrQS
pwYz+l6yURo/NgVw1uS+IlOEM/QYK98usVxilg63RkYA3YuBoL0sofrmQF349t5P
qw5L3IPYCwVZd5n78bL8zjs6g6vk2Kor5TdA5lelMp8YuiywJoB0+itKz8X3pTQf
Te7japHYWAm0X9weaLrTLMkkQnRU4KPgp5mdQVt6ekT+OZxY9hCIcFpYoczr8ZK5
QUGzeZQDxkBekY5l/u10S8VyQQ7ibA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net