Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e22de594-f43f-3e91-b6b9-55fefb5df820.roa
File:                     e22de594-f43f-3e91-b6b9-55fefb5df820.roa (raw, json)
Hash identifier:          4pRhPxmT63uR7+wQ1hgddXBsKgcDEszKdrNbmpFNUF4=
Subject key identifier:   00:61:C2:D4:5B:26:D6:C9:6D:33:21:97:B6:EC:8C:74:AB:A2:CB:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA6A9E8950E2F28E2B4D180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e22de594-f43f-3e91-b6b9-55fefb5df820.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33491
IP address blocks:        50.171.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:a9:e8:95:0e:2f:28:e2:b4:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=1142dad7-e57e-48cb-834e-d33b31d8afdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:fe:66:cf:4b:b1:c2:ba:63:b0:10:9f:18:
                    98:85:af:31:bb:8c:0a:35:4d:8b:d3:39:07:5a:8a:
                    cc:d0:c5:b3:aa:93:78:69:62:eb:fb:8b:d1:0b:dc:
                    75:b8:be:cf:7e:da:52:a3:3d:3c:76:a0:b5:47:c6:
                    cc:f3:5a:50:cb:7b:70:85:55:9a:97:c7:fb:90:5f:
                    9c:f6:5a:dc:66:0d:79:ce:cb:f1:0e:2b:c3:b5:70:
                    14:1c:ff:95:32:73:db:12:21:bf:1a:19:df:97:fc:
                    46:b9:e4:3d:a0:fa:92:62:a5:c0:d1:25:2e:0a:f2:
                    73:fb:ca:aa:91:b6:3d:7d:7f:ed:21:b9:26:dc:23:
                    63:3d:85:da:0e:15:49:89:95:ca:a2:b2:5e:56:31:
                    38:46:28:5f:59:82:a4:60:dd:d7:4f:a0:e1:92:0b:
                    16:f1:01:e0:05:01:bb:b9:31:18:cf:ee:0b:96:78:
                    3f:a8:b9:5f:31:4b:06:1b:5b:dd:88:c6:14:8c:61:
                    87:65:42:f8:72:99:84:c4:c5:7e:f4:19:12:c8:fd:
                    55:a1:4a:6b:3a:ed:35:90:46:24:33:d7:e7:02:3e:
                    84:dd:7b:0a:54:ac:10:7b:6c:f8:bd:8f:65:80:41:
                    51:66:1d:4f:14:14:97:ed:49:af:e0:2e:75:cd:cb:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:61:C2:D4:5B:26:D6:C9:6D:33:21:97:B6:EC:8C:74:AB:A2:CB:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e22de594-f43f-3e91-b6b9-55fefb5df820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.171.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:2e:ed:38:78:a0:21:9b:8f:47:5b:35:28:e9:9c:3a:45:5d:
         ee:93:c4:09:af:8a:ed:fb:a4:08:16:e5:dd:8c:ef:e4:ee:58:
         b1:67:29:ca:df:21:75:7a:51:f0:ad:c4:39:07:da:97:4c:db:
         83:cf:d6:d5:11:93:ad:e0:46:ef:90:58:7b:2d:56:35:1f:71:
         02:fb:95:c7:7b:be:22:6a:b7:60:ff:f0:1b:83:40:96:e3:69:
         50:d2:d0:eb:0d:74:fa:5c:87:16:31:96:56:83:ac:50:85:ca:
         b2:a5:ca:b3:8f:eb:46:96:74:6d:a9:28:54:06:95:21:21:47:
         86:22:7a:24:7c:d0:e5:87:61:ec:31:39:1b:66:bd:a7:12:7e:
         e5:8e:7d:e2:b7:25:62:6c:15:93:9b:0e:8a:f8:46:40:0b:a7:
         62:d0:1d:54:2f:5c:4e:c3:ef:21:5e:91:47:94:0b:c0:22:34:
         17:7a:46:8c:36:77:b3:88:69:8d:16:cc:38:d7:2a:55:fe:4c:
         2e:70:92:e0:50:80:70:5e:56:d3:e0:29:76:fc:28:49:99:cc:
         8f:c0:c4:95:df:fa:9d:47:bd:f3:53:39:11:c1:8b:73:f3:b4:
         94:c6:69:9f:59:67:d2:9e:34:26:64:69:39:6e:f1:65:13:9f:
         00:c4:28:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pqnolQ4vKOK00YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
MTE0MmRhZDctZTU3ZS00OGNiLTgzNGUtZDMzYjMxZDhhZmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfH+Zs9LscK6Y7AQnxiYha8xu4wKNU2L0zkH
WorM0MWzqpN4aWLr+4vRC9x1uL7PftpSoz08dqC1R8bM81pQy3twhVWal8f7kF+c
9lrcZg15zsvxDivDtXAUHP+VMnPbEiG/Ghnfl/xGueQ9oPqSYqXA0SUuCvJz+8qq
kbY9fX/tIbkm3CNjPYXaDhVJiZXKorJeVjE4RihfWYKkYN3XT6DhkgsW8QHgBQG7
uTEYz+4Llng/qLlfMUsGG1vdiMYUjGGHZUL4cpmExMV+9BkSyP1VoUprOu01kEYk
M9fnAj6E3XsKVKwQe2z4vY9lgEFRZh1PFBSX7Umv4C51zctg2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABhwtRbJtbJbTMhl7bsjHSrosuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTIyZGU1OTQtZjQzZi0z
ZTkxLWI2YjktNTVmZWZiNWRmODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMqsfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEu7Th4oCGbj0dbNSjpnDpFXe6TxAmviu37pAgW5d2M7+TuWLFnKcrf
IXV6UfCtxDkH2pdM24PP1tURk63gRu+QWHstVjUfcQL7lcd7viJqt2D/8BuDQJbj
aVDS0OsNdPpchxYxllaDrFCFyrKlyrOP60aWdG2pKFQGlSEhR4YieiR80OWHYewx
ORtmvacSfuWOfeK3JWJsFZObDor4RkALp2LQHVQvXE7D7yFekUeUC8AiNBd6Row2
d7OIaY0WzDjXKlX+TC5wkuBQgHBeVtPgKXb8KEmZzI/AxJXf+p1HvfNTORHBi3Pz
tJTGaZ9ZZ9KeNCZkaTlu8WUTnwDEKIc=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:18:37 2025 by rpki-client on console.sobornost.net