Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa
File:                     8808243b-e157-3244-aedd-40c5f2daae58.roa (raw, json)
Hash identifier:          jpON2mgOfqQGRejda6SRTQFYazEk0TuCXOlidMIgD44=
Subject key identifier:   41:50:29:3D:5B:90:B3:DC:B3:8A:56:21:FF:B2:F7:46:72:69:DA:56
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F43285849780F0B5AA7A381F3AFAECF00
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     19381
IP address blocks:        192.88.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0b:5a:a7:a3:81:f3:af:ae:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=17fa7379-2cbe-44ae-afa3-5c10c84413de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:e1:5d:d5:98:44:6c:bd:ec:dd:a8:79:3d:
                    f5:ce:b0:5e:eb:41:76:1c:11:b2:ac:87:b8:2a:02:
                    24:00:30:48:61:e3:6d:23:59:2e:bf:ba:be:6e:1c:
                    fc:9d:62:65:09:d5:a5:82:3a:ca:26:34:e1:c1:42:
                    2e:25:d5:1c:26:88:15:6f:2a:dc:5c:0a:51:a7:28:
                    47:b8:db:01:1c:d1:2f:d9:b0:09:a7:98:5f:86:29:
                    fb:3d:0b:40:a1:95:63:d8:4a:fd:64:5e:98:18:02:
                    a9:a1:be:c0:63:89:a2:ee:c4:32:ba:71:90:30:29:
                    3d:e1:6d:a5:74:38:bf:19:f2:98:d8:bb:56:f0:2b:
                    90:0f:95:44:30:95:ce:a6:47:79:f7:24:44:20:5c:
                    cd:f4:38:fd:70:20:c6:db:7f:8b:f0:5d:a9:f1:d5:
                    ff:38:65:93:57:2c:35:4b:97:2c:0c:f0:b7:6e:c0:
                    f0:5a:06:7e:31:de:a1:59:12:e4:6b:32:8f:64:48:
                    96:4b:65:21:80:09:15:64:4b:c1:78:67:77:5e:6d:
                    df:bd:24:60:91:08:53:f5:fc:86:22:95:cc:b3:ef:
                    53:82:04:5f:06:ed:64:34:11:57:02:84:9e:b5:66:
                    de:8c:8a:1b:e0:2f:87:ea:47:f6:3d:4e:98:3b:56:
                    18:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:50:29:3D:5B:90:B3:DC:B3:8A:56:21:FF:B2:F7:46:72:69:DA:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:26:6d:68:c4:6c:ab:05:57:3d:a2:5b:f1:c0:1e:18:7c:0c:
         4c:88:9c:df:24:a9:d0:a3:9a:1d:0f:be:ff:ed:48:3e:f3:16:
         bb:51:93:a5:bf:65:36:b8:c4:61:c3:85:0c:2a:e4:78:d7:86:
         f5:bb:f8:d1:ca:08:ce:78:64:2c:7d:f6:23:d5:82:de:54:37:
         0b:e6:ce:57:87:02:07:7f:66:6b:2e:97:e5:86:c9:e4:47:5e:
         1e:30:f7:9e:7d:6c:81:54:91:e1:8b:d2:0a:c7:ec:57:53:b8:
         98:2e:4c:3d:b6:a7:3d:0b:6e:2b:5c:79:38:00:69:42:48:3d:
         25:b7:db:64:05:8d:28:aa:e5:09:28:eb:fd:05:13:4c:14:70:
         d1:36:1d:1a:f3:93:f6:56:33:91:d2:0a:ce:1a:39:dc:c7:b6:
         ec:81:d8:e2:ff:2e:95:d6:eb:79:d8:3c:e3:ae:76:3d:ea:7e:
         7e:6d:8e:fe:04:91:61:63:ec:03:ae:de:5d:96:c0:86:89:90:
         57:9c:fd:cf:24:64:07:45:87:97:76:e7:5b:51:aa:c8:cd:25:
         f9:eb:1e:d6:52:0f:39:85:22:81:38:e3:ad:d4:a3:4c:3b:c7:
         d2:ed:de:b1:42:67:9d:c7:07:2d:0b:cb:07:78:cd:7c:3b:23:
         b0:7a:93:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dwtap6OB86+uzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl
Njc0MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
MTdmYTczNzktMmNiZS00NGFlLWFmYTMtNWMxMGM4NDQxM2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMbhXdWYRGy97N2oeT31zrBe60F2HBGyrIe4
KgIkADBIYeNtI1kuv7q+bhz8nWJlCdWlgjrKJjThwUIuJdUcJogVbyrcXApRpyhH
uNsBHNEv2bAJp5hfhin7PQtAoZVj2Er9ZF6YGAKpob7AY4mi7sQyunGQMCk94W2l
dDi/GfKY2LtW8CuQD5VEMJXOpkd59yREIFzN9Dj9cCDG23+L8F2p8dX/OGWTVyw1
S5csDPC3bsDwWgZ+Md6hWRLkazKPZEiWS2UhgAkVZEvBeGd3Xm3fvSRgkQhT9fyG
IpXMs+9TggRfBu1kNBFXAoSetWbejIob4C+H6kf2PU6YO1YYaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFQKT1bkLPcs4pWIf+y90ZyadpWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy
MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvODgwODI0M2ItZTE1Ny0z
MjQ0LWFlZGQtNDBjNWYyZGFhZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl
YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2
ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1
NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcmbWjEbKsFVz2iW/HAHhh8DEyInN8kqdCjmh0Pvv/tSD7zFrtRk6W/
ZTa4xGHDhQwq5HjXhvW7+NHKCM54ZCx99iPVgt5UNwvmzleHAgd/Zmsul+WGyeRH
Xh4w9559bIFUkeGL0grH7FdTuJguTD22pz0LbitceTgAaUJIPSW322QFjSiq5Qko
6/0FE0wUcNE2HRrzk/ZWM5HSCs4aOdzHtuyB2OL/LpXW63nYPOOudj3qfn5tjv4E
kWFj7AOu3l2WwIaJkFec/c8kZAdFh5d251tRqsjNJfnrHtZSDzmFIoE4463Uo0w7
x9Lt3rFCZ53HBy0Lywd4zXw7I7B6k4I=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:24:59 2025 by rpki-client on console.sobornost.net