Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f606e78-5b45-355d-a77b-4bb0077716f5.roa
File:                     3f606e78-5b45-355d-a77b-4bb0077716f5.roa (raw, json)
Hash identifier:          EO3tIVJd0IHetJU7sOVAvktcwoFFrYh0W52YCirautg=
Subject key identifier:   37:B5:D1:63:0D:1B:7A:90:33:14:30:C2:82:86:43:58:3B:7C:92:BC
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848E59BBB5C5F62D27CCF202088
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f606e78-5b45-355d-a77b-4bb0077716f5.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     401152
IP address blocks:        50.114.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:bb:5c:5f:62:d2:7c:cf:20:20:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=a64b1f85-2596-4777-8530-b93c2515ff89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:d9:f0:6f:64:27:19:d4:5b:da:f0:c5:0d:
                    11:9d:ca:10:c3:1a:c9:ba:66:e7:22:54:d5:25:0f:
                    c1:33:6b:db:98:19:04:5f:ec:81:98:32:53:d8:e2:
                    84:6a:db:11:43:07:16:6a:8e:52:e5:1e:b1:b6:c7:
                    ed:72:dd:10:04:8d:39:ae:96:64:4e:b7:2b:ed:06:
                    dc:d1:d1:36:85:fb:99:34:38:2e:92:57:df:36:ea:
                    bb:a8:6d:41:b4:71:23:09:ec:a5:b4:68:f3:6a:14:
                    d0:2a:5c:5d:da:08:d8:1c:00:83:02:39:b4:ba:24:
                    c3:1c:76:6b:95:0f:ff:a7:53:6f:f6:ca:97:f1:bd:
                    b1:96:88:f3:f2:09:6d:1b:17:27:d6:5d:fd:8c:b1:
                    41:72:50:71:26:1d:90:93:ac:8e:d5:45:14:f0:2e:
                    00:33:3b:23:db:3f:9f:9e:20:a4:2d:bb:da:c5:b6:
                    09:97:00:fc:8a:36:e8:76:15:88:74:8a:81:61:de:
                    e2:62:73:c3:e7:6a:7d:39:b7:2f:42:31:89:93:89:
                    b5:48:5e:8f:3f:4b:15:19:be:01:fd:48:1e:77:86:
                    18:d8:43:fd:dc:8b:32:68:74:d2:66:95:a7:d3:a1:
                    74:2b:6f:41:e0:98:12:f1:9b:45:32:8d:51:0e:6d:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:D1:63:0D:1B:7A:90:33:14:30:C2:82:86:43:58:3B:7C:92:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3f606e78-5b45-355d-a77b-4bb0077716f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c7:6d:2f:12:1a:7d:04:7b:8f:ca:8a:50:93:1a:10:e7:5e:
         7b:06:94:aa:4f:01:36:26:5b:2a:0b:50:de:fd:8c:63:99:d0:
         cd:7a:e6:99:fc:49:27:59:15:51:1d:48:fc:f9:ac:c7:ea:c3:
         cc:02:1d:b2:44:cb:3e:26:00:9b:0c:cd:9d:04:1b:4b:a3:ab:
         7d:b4:4a:b0:f4:c7:41:a3:60:54:98:00:14:28:70:69:01:2f:
         54:bc:88:b9:92:bf:03:ec:36:e1:55:b7:01:ef:4c:60:18:37:
         4a:24:55:d6:f0:01:55:04:d9:94:f4:a1:56:a2:32:7e:6e:e6:
         6e:8c:41:68:90:22:ec:a1:d5:22:83:51:35:60:f1:80:af:3d:
         9e:89:a8:f3:80:4d:73:43:72:61:6f:50:6f:25:b0:69:7f:46:
         1b:2a:de:dd:79:d2:ea:ba:01:bf:9b:0c:62:a2:98:71:b9:e2:
         cc:14:c1:ef:0c:8c:c1:06:bc:37:1c:2d:29:a1:f8:d6:b4:59:
         23:4d:68:a3:2a:a3:df:2e:16:35:f2:4c:6b:ba:5c:c8:37:58:
         a1:b7:da:c4:ca:bf:f3:dc:ac:4d:d2:77:3d:65:e3:ec:ce:10:
         3a:bd:61:ee:f2:b3:50:d6:f5:f3:e5:33:c6:63:11:f8:8e:09:
         0a:80:79:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7tcX2LSfM8gIIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
YTY0YjFmODUtMjU5Ni00Nzc3LTg1MzAtYjkzYzI1MTVmZjg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOzZ8G9kJxnUW9rwxQ0RncoQwxrJumbnIlTV
JQ/BM2vbmBkEX+yBmDJT2OKEatsRQwcWao5S5R6xtsftct0QBI05rpZkTrcr7Qbc
0dE2hfuZNDguklffNuq7qG1BtHEjCeyltGjzahTQKlxd2gjYHACDAjm0uiTDHHZr
lQ//p1Nv9sqX8b2xlojz8gltGxcn1l39jLFBclBxJh2Qk6yO1UUU8C4AMzsj2z+f
niCkLbvaxbYJlwD8ijbodhWIdIqBYd7iYnPD52p9ObcvQjGJk4m1SF6PP0sVGb4B
/Uged4YY2EP93IsyaHTSZpWn06F0K29B4JgS8ZtFMo1RDm1vRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDe10WMNG3qQMxQwwoKGQ1g7fJK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvM2Y2MDZlNzgtNWI0NS0z
NTVkLWE3N2ItNGJiMDA3NzcxNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMnIeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAITHbS8SGn0Ee4/KilCTGhDnXnsGlKpPATYmWyoLUN79jGOZ0M165pn8
SSdZFVEdSPz5rMfqw8wCHbJEyz4mAJsMzZ0EG0ujq320SrD0x0GjYFSYABQocGkB
L1S8iLmSvwPsNuFVtwHvTGAYN0okVdbwAVUE2ZT0oVaiMn5u5m6MQWiQIuyh1SKD
UTVg8YCvPZ6JqPOATXNDcmFvUG8lsGl/Rhsq3t150uq6Ab+bDGKimHG54swUwe8M
jMEGvDccLSmh+Na0WSNNaKMqo98uFjXyTGu6XMg3WKG32sTKv/PcrE3Sdz1l4+zO
EDq9Ye7ys1DW9fPlM8ZjEfiOCQqAefU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:06 2025 by rpki-client on console.sobornost.net