Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba69b1ff-5b0b-3add-94b6-7366abcb9560.roa
File:                     ba69b1ff-5b0b-3add-94b6-7366abcb9560.roa (raw, json)
Hash identifier:          leX8uTZ175qaptRsitOv7JaMenntHN54pp7xZVKwxDQ=
Subject key identifier:   01:B1:C9:45:4E:1F:FC:23:38:7E:DD:92:5D:A8:37:1C:0C:86:8E:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA47A8135594EAEDF90B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba69b1ff-5b0b-3add-94b6-7366abcb9560.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        68.34.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:7a:81:35:59:4e:ae:df:90:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=98e63baf-356b-4d7c-a756-522375decf6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f9:93:56:be:fa:5c:22:02:6b:10:eb:ec:a5:
                    b4:7b:85:7d:a5:b5:c1:3c:08:18:8b:61:16:88:72:
                    60:46:97:02:5d:3a:b1:f0:65:40:67:a9:47:66:e7:
                    56:e1:39:c1:d0:3f:d1:d6:9c:78:f3:3d:a6:04:5a:
                    c9:0a:03:3e:c1:52:e0:6f:b8:54:00:78:63:d8:fd:
                    e7:b6:bc:e8:1b:bc:a6:f2:54:2a:fa:4e:bd:41:2f:
                    a2:b9:09:8c:a4:51:31:53:c7:78:8f:19:b7:15:e7:
                    fa:dc:c6:56:ad:ba:5b:a7:3b:8f:b6:3e:de:a9:fa:
                    a2:2f:79:74:98:e9:2d:ff:f3:73:55:e2:63:b8:81:
                    f0:aa:b7:8d:5b:5a:17:c7:af:9f:ac:fa:5e:d5:d6:
                    66:89:3e:8f:76:37:1c:50:cd:f3:2e:08:8b:1e:14:
                    28:0a:9f:47:ff:df:1b:f5:c8:9f:01:da:dc:95:6d:
                    04:f7:c4:31:aa:15:12:40:e2:ea:92:c0:59:a7:c6:
                    5a:b7:f8:f1:4a:bc:11:fe:58:94:cc:85:ca:77:1c:
                    52:79:e6:1e:11:2e:48:ab:0c:d4:ea:da:53:60:bd:
                    dc:c1:0c:25:81:a6:9e:46:d1:62:65:d4:b7:2e:04:
                    cb:43:70:ec:d5:c2:16:28:00:ef:72:25:fa:b4:1a:
                    bd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B1:C9:45:4E:1F:FC:23:38:7E:DD:92:5D:A8:37:1C:0C:86:8E:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba69b1ff-5b0b-3add-94b6-7366abcb9560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.34.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:ad:45:7b:f3:ca:8a:74:4f:a8:1b:35:79:e4:af:13:91:
         4d:55:33:51:bb:31:f4:9e:3f:45:c9:31:07:da:fd:2e:b6:db:
         88:80:1c:03:44:e6:a4:27:39:cc:a6:13:21:52:c8:c9:26:89:
         53:68:75:ef:00:0c:f4:51:c8:ae:e3:8a:3b:cd:f2:d3:08:45:
         08:c7:a0:bd:cb:c7:b8:72:32:ba:12:13:0b:63:76:af:7b:e2:
         8b:8e:61:af:2a:ba:1e:32:ab:49:6a:2f:7f:e2:49:1f:ab:ea:
         0c:87:d5:2f:32:7c:1f:84:59:ff:f0:16:80:71:48:33:04:6b:
         e9:a7:58:f0:9a:30:31:9c:08:7c:3a:39:db:9e:94:84:55:78:
         80:90:83:9b:fc:f3:48:32:9e:d8:f1:5f:b7:5a:b5:e9:7f:a6:
         b6:99:74:74:bb:d7:aa:f7:40:87:63:f9:7e:f8:ab:79:de:fb:
         b1:f0:9f:e0:85:7b:2e:62:4a:57:24:54:3b:9f:8e:82:6a:6f:
         56:cf:fa:af:01:a6:64:27:30:93:94:1e:ce:14:88:ce:10:56:
         c7:fa:4c:05:41:76:f3:0a:90:bb:41:cb:c3:f9:ab:80:95:88:
         4d:80:9a:47:d1:41:03:c4:7a:9c:a6:84:55:d4:e3:1e:63:6d:
         23:d5:2b:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHqBNVlOrt+QtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
OThlNjNiYWYtMzU2Yi00ZDdjLWE3NTYtNTIyMzc1ZGVjZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovmTVr76XCICaxDr7KW0e4V9pbXBPAgYi2EW
iHJgRpcCXTqx8GVAZ6lHZudW4TnB0D/R1px48z2mBFrJCgM+wVLgb7hUAHhj2P3n
trzoG7ym8lQq+k69QS+iuQmMpFExU8d4jxm3Fef63MZWrbpbpzuPtj7eqfqiL3l0
mOkt//NzVeJjuIHwqreNW1oXx6+frPpe1dZmiT6PdjccUM3zLgiLHhQoCp9H/98b
9cifAdrclW0E98QxqhUSQOLqksBZp8Zat/jxSrwR/liUzIXKdxxSeeYeES5IqwzU
6tpTYL3cwQwlgaaeRtFiZdS3LgTLQ3Ds1cIWKADvciX6tBq9BQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGxyUVOH/wjOH7dkl2oNxwMho4jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE2OWIxZmYtNWIwYi0z
YWRkLTk0YjYtNzM2NmFiY2I5NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRCKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAONrUV788qKdE+oGzV55K8TkU1VM1G7MfSeP0XJMQfa/S6224iAHANE
5qQnOcymEyFSyMkmiVNode8ADPRRyK7jijvN8tMIRQjHoL3Lx7hyMroSEwtjdq97
4ouOYa8quh4yq0lqL3/iSR+r6gyH1S8yfB+EWf/wFoBxSDMEa+mnWPCaMDGcCHw6
OduelIRVeICQg5v880gyntjxX7datel/praZdHS716r3QIdj+X74q3ne+7Hwn+CF
ey5iSlckVDufjoJqb1bP+q8BpmQnMJOUHs4UiM4QVsf6TAVBdvMKkLtBy8P5q4CV
iE2AmkfRQQPEepymhFXU4x5jbSPVKxo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:07:18 2025 by rpki-client on console.sobornost.net