Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
File:                     f16f134d-17d8-31b4-8410-4a72975bc1c0.roa (raw, json)
Hash identifier:          Yj46fbYBftW/rHQ5STA0ZfN99Y93NPfsOHivSdnaq1c=
Subject key identifier:   6A:EF:04:FE:6B:10:0D:C6:21:39:A6:4A:FA:29:BD:9D:A8:9B:C0:19
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584940394DE451734563E34DCE00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        104.218.205.0/24 maxlen: 24
                          104.218.206.0/24 maxlen: 24
                          104.218.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4d:e4:51:73:45:63:e3:4d:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=6d82d1fb-e3d0-4aaa-bb23-494789792d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:55:2e:b9:4d:50:c1:ca:66:c6:f4:3a:fd:
                    2b:3f:9b:f6:d8:15:b2:e7:c7:2d:e4:51:8d:ef:0a:
                    f3:14:2c:e9:65:ff:7e:a0:c2:b0:16:86:a8:44:c0:
                    2f:5a:4d:92:6c:47:bd:d7:de:ba:9b:d7:08:6c:2d:
                    05:01:f8:40:aa:c7:53:20:e9:8a:78:73:1d:d2:47:
                    64:86:32:cc:67:db:d5:bc:d2:6d:de:fe:a9:ef:24:
                    48:a6:ae:5f:18:79:a8:db:22:22:0a:bd:05:0f:cf:
                    7a:ce:19:20:5d:1d:ce:80:27:3b:4c:a0:04:3f:18:
                    d4:09:26:3a:41:78:a9:64:e3:1d:96:88:d2:3b:05:
                    bd:cb:12:00:ba:87:e3:ac:9e:74:a2:98:77:a4:96:
                    1f:02:95:07:c4:83:f4:41:97:87:13:fe:da:98:de:
                    a7:f1:e7:2c:60:5d:6e:2c:77:4f:20:37:46:b2:7d:
                    04:5b:c1:63:1a:6f:8b:3f:31:cc:a4:f6:08:e0:30:
                    5c:54:1c:01:ea:9a:fc:97:90:72:84:e0:ae:c3:60:
                    05:90:6b:39:9c:13:b5:5e:21:fa:61:7b:89:15:79:
                    db:ec:8c:2e:b3:8f:15:2a:4b:7b:96:e3:e5:79:50:
                    b9:81:c9:e3:ce:16:55:7b:3c:5d:f7:66:5d:dc:e1:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:04:FE:6B:10:0D:C6:21:39:A6:4A:FA:29:BD:9D:A8:9B:C0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.205.0-104.218.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:a5:50:23:27:7b:cd:22:1c:25:14:00:db:20:80:b0:e6:
         82:51:41:44:f5:23:a3:2f:99:c9:7c:fd:eb:7e:b2:cf:41:12:
         ed:b2:d8:17:56:dc:f0:99:98:28:87:e2:f5:ce:3f:bf:d8:36:
         96:94:72:2f:27:d4:9f:91:30:8d:a0:37:6b:a9:a3:0e:28:bf:
         76:0a:d7:5f:f9:e3:fb:90:60:c9:e2:87:f9:a0:ee:df:ee:6d:
         e8:b8:b2:d5:d6:0d:1b:7a:ca:4c:0e:51:7c:0d:a7:af:03:2f:
         10:e5:83:e8:c1:f9:8b:0a:34:d2:7c:d1:cb:2d:89:ad:a9:d2:
         58:17:06:3a:9b:f8:6b:3a:3b:f9:5d:82:1d:93:db:84:49:36:
         98:68:fe:f8:11:e9:8a:45:0d:08:a8:73:62:c4:96:06:bb:dd:
         4b:06:f5:c3:d9:76:29:72:a2:bb:66:b1:5e:bf:5c:eb:c7:96:
         ea:ba:e7:34:c3:56:d3:5e:12:1d:0b:54:a5:5f:f9:2b:1b:2f:
         a8:e5:eb:e0:b7:5a:cc:ea:67:23:80:3c:95:b1:87:14:fe:88:
         f7:09:1e:b7:2b:7a:1d:7e:e7:e7:b7:73:38:21:3a:e5:ba:e7:
         e7:6f:26:32:cb:31:6c:d7:15:9e:77:14:fd:59:2a:7f:a2:e1:
         bc:ab:5a:da
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElAOU3kUXNFY+NNzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
NmQ4MmQxZmItZTNkMC00YWFhLWJiMjMtNDk0Nzg5NzkyZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVVLrlNUMHKZsb0Ov0rP5v22BWy58ct5FGN
7wrzFCzpZf9+oMKwFoaoRMAvWk2SbEe91966m9cIbC0FAfhAqsdTIOmKeHMd0kdk
hjLMZ9vVvNJt3v6p7yRIpq5fGHmo2yIiCr0FD896zhkgXR3OgCc7TKAEPxjUCSY6
QXipZOMdlojSOwW9yxIAuofjrJ50oph3pJYfApUHxIP0QZeHE/7amN6n8ecsYF1u
LHdPIDdGsn0EW8FjGm+LPzHMpPYI4DBcVBwB6pr8l5ByhOCuw2AFkGs5nBO1XiH6
YXuJFXnb7Iwus48VKkt7luPleVC5gcnjzhZVezxd92Zd3OGFmQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFGrvBP5rEA3GITmmSvopvZ2om8AZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvZjE2ZjEzNGQtMTdkOC0z
MWI0LTg0MTAtNGE3Mjk3NWJjMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABo2s0D
BARo2sAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAXMilUCMne80iHCUUANsggLDmglFBRPUjoy+ZyXz9636y
z0ES7bLYF1bc8JmYKIfi9c4/v9g2lpRyLyfUn5EwjaA3a6mjDii/dgrXX/nj+5Bg
yeKH+aDu3+5t6Liy1dYNG3rKTA5RfA2nrwMvEOWD6MH5iwo00nzRyy2JranSWBcG
Opv4azo7+V2CHZPbhEk2mGj++BHpikUNCKhzYsSWBrvdSwb1w9l2KXKiu2axXr9c
68eW6rrnNMNW014SHQtUpV/5KxsvqOXr4LdazOpnI4A8lbGHFP6I9wketyt6HX7n
57dzOCE65brn528mMssxbNcVnncU/Vkqf6LhvKta2g==
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:44 2025 by rpki-client on console.sobornost.net