Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa
File:                     0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa (raw, json)
Hash identifier:          h4xjw9QAjNAvpNUTBmGA78HW0LVUQMrM3zTTeGFXk4A=
Subject key identifier:   7D:51:46:80:BC:C6:EA:C8:70:EB:8C:25:81:1C:DE:03:AE:0E:DD:07
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285848F65BF53DEFFD25484D469A40
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        216.157.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:f5:3d:ef:fd:25:48:4d:46:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=e8302db4-37f8-4c74-abb9-06b6d56133e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:2e:34:a5:28:9e:a7:d7:09:13:0b:48:6f:
                    90:a8:4c:4a:75:55:2b:6f:62:b2:d7:a0:9a:08:25:
                    54:f4:3c:df:94:a1:5f:99:7c:f4:69:66:2c:5f:68:
                    bc:57:30:1d:aa:e8:6c:54:39:b4:a7:6a:84:97:63:
                    ba:21:32:11:6c:5e:7c:7b:db:c2:ee:d8:af:5b:01:
                    77:58:ad:77:02:1f:41:b5:80:91:af:85:0f:25:67:
                    1e:3a:24:ae:94:c1:26:e8:9a:60:14:87:e5:60:c5:
                    e6:19:57:0b:5e:ba:03:43:b1:60:5a:c5:22:63:5f:
                    3d:92:91:bf:29:c6:0c:59:70:57:07:e1:b9:de:69:
                    c4:b5:ca:86:fe:fa:35:99:ef:c9:b9:f5:0c:80:0c:
                    38:ce:3b:ad:e4:b6:31:ff:f4:c7:1d:8a:b0:b1:e5:
                    88:b7:53:98:40:dc:4d:15:f7:38:b0:56:4c:f0:78:
                    ff:ed:5f:4e:0d:c6:f5:eb:6a:35:ed:01:44:a8:f3:
                    3f:3c:65:79:21:b6:31:c0:21:6f:96:77:42:f4:5c:
                    c2:25:8f:5d:64:fb:dc:40:24:04:56:f5:ce:ea:d6:
                    96:8a:46:d2:cf:46:8c:65:e2:b6:29:9a:ca:82:a2:
                    41:8f:46:69:67:0e:a2:95:8c:91:b6:41:aa:71:c1:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:51:46:80:BC:C6:EA:C8:70:EB:8C:25:81:1C:DE:03:AE:0E:DD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/0c2bc4c0-ae4d-3304-b80b-880903a735ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:11:43:93:90:71:76:aa:38:e9:d6:72:aa:eb:d3:8f:d9:cd:
         38:8c:8d:7e:08:04:06:28:de:46:1e:dd:53:c5:fa:db:42:c3:
         64:b4:24:98:bf:6d:37:69:7a:62:ad:0d:30:63:35:0b:36:d7:
         ce:f3:38:84:ae:5b:f4:98:93:66:74:16:b8:76:15:3f:9d:dc:
         c0:cf:7d:ae:10:54:1d:9f:e6:bb:95:78:10:0e:96:c1:81:20:
         53:f6:1d:ca:9e:f5:5b:41:94:1f:3d:f2:9a:16:4c:74:fa:d3:
         48:b0:8f:f5:aa:7a:03:19:e2:31:4e:fb:8c:bf:ff:18:35:4f:
         4b:94:58:59:58:7a:b9:89:ca:fb:9e:0b:02:47:6d:69:90:5d:
         d2:92:ae:47:16:44:bb:11:26:e5:f9:83:5a:b2:3f:08:2a:9a:
         a2:87:86:4b:c3:ab:42:61:09:db:e9:6a:d0:88:a5:48:f4:fe:
         5a:46:04:9b:46:0a:e4:a8:69:3f:28:4c:2e:28:ad:fd:ab:92:
         47:1e:40:2a:14:55:0e:86:9c:f0:4a:56:1f:c6:9f:70:9b:70:
         7b:0b:e1:c7:92:ad:5d:b2:3d:2f:d8:32:06:db:a1:83:0e:c1:
         08:85:de:89:e5:a3:de:57:8a:d4:a6:1c:d5:69:b8:16:d8:fe:
         cd:18:7e:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/U97/0lSE1GmkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
ZTgzMDJkYjQtMzdmOC00Yzc0LWFiYjktMDZiNmQ1NjEzM2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHguNKUonqfXCRMLSG+QqExKdVUrb2Ky16Ca
CCVU9DzflKFfmXz0aWYsX2i8VzAdquhsVDm0p2qEl2O6ITIRbF58e9vC7tivWwF3
WK13Ah9BtYCRr4UPJWceOiSulMEm6JpgFIflYMXmGVcLXroDQ7FgWsUiY189kpG/
KcYMWXBXB+G53mnEtcqG/vo1me/JufUMgAw4zjut5LYx//THHYqwseWIt1OYQNxN
Ffc4sFZM8Hj/7V9ODcb162o17QFEqPM/PGV5IbYxwCFvlndC9FzCJY9dZPvcQCQE
VvXO6taWikbSz0aMZeK2KZrKgqJBj0ZpZw6ilYyRtkGqccHKFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH1RRoC8xurIcOuMJYEc3gOuDt0HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMGMyYmM0YzAtYWU0ZC0z
MzA0LWI4MGItODgwOTAzYTczNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFARQ5OQcXaqOOnWcqrr04/ZzTiMjX4IBAYo3kYe3VPF+ttCw2S0JJi/
bTdpemKtDTBjNQs2187zOISuW/SYk2Z0Frh2FT+d3MDPfa4QVB2f5ruVeBAOlsGB
IFP2Hcqe9VtBlB898poWTHT600iwj/WqegMZ4jFO+4y//xg1T0uUWFlYermJyvue
CwJHbWmQXdKSrkcWRLsRJuX5g1qyPwgqmqKHhkvDq0JhCdvpatCIpUj0/lpGBJtG
CuSoaT8oTC4orf2rkkceQCoUVQ6GnPBKVh/Gn3CbcHsL4ceSrV2yPS/YMgbboYMO
wQiF3onlo95XitSmHNVpuBbY/s0YfrY=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:56 2025 by rpki-client on console.sobornost.net