Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/45813344-3d35-3040-afc1-d95e99a3500e.roa
File:                     45813344-3d35-3040-afc1-d95e99a3500e.roa (raw, json)
Hash identifier:          2VQY3WgPECWRD94CSWCQJyLYJba3CV5JHSmwn1eGkLY=
Subject key identifier:   FF:A7:72:50:AC:F1:05:7C:C6:D7:BF:07:4A:F9:D6:80:0E:B8:70:6D
Certificate issuer:       /CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
Certificate serial:       010D0C9F43285843B4A023D79D64055B76110D00
Authority key identifier: D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/45813344-3d35-3040-afc1-d95e99a3500e.roa
Signing time:             Sun 29 Oct 2023 01:00:15 +0000
ROA not before:           Sun 29 Oct 2023 01:00:15 +0000
ROA not after:            Sat 27 Jan 2024 02:00:15 +0000
asID:                     13830
IP address blocks:        142.202.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b4:a0:23:d7:9d:64:05:5b:76:11:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90e0e2fb-b856-4bab-b967-a8918ce1cb29
        Validity
            Not Before: Oct 29 01:00:15 2023 GMT
            Not After : Jan 27 02:00:15 2024 GMT
        Subject: CN=8e16f2a0-3879-424e-baa4-e888afbf843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:61:ad:28:d6:5a:79:c3:0d:35:db:3b:f5:
                    63:da:80:44:fb:5d:f4:85:a6:86:a4:91:b3:0a:e6:
                    ef:25:7a:c1:f7:26:f3:3f:82:17:57:be:00:40:ba:
                    71:aa:a1:14:e7:57:21:05:73:f0:53:3b:04:cf:57:
                    4f:78:d3:0d:8f:19:30:67:eb:69:e1:53:71:5a:36:
                    91:2a:59:81:d8:24:6a:b2:75:61:b4:6d:eb:b2:a3:
                    92:7c:15:d3:cc:a9:ae:3f:c2:d0:89:81:c2:f5:e0:
                    5d:df:56:c1:85:70:88:f0:86:32:52:05:fd:a9:4b:
                    2a:4c:78:15:ea:e8:94:72:05:dc:de:e6:16:0d:56:
                    ad:46:05:e1:b1:05:6a:24:8f:44:df:8c:c3:6a:cb:
                    90:c1:42:b9:2e:f5:72:67:2b:a4:b7:f4:5d:94:99:
                    c0:42:9a:05:ae:1e:bd:e2:40:0f:63:64:f5:9b:29:
                    ad:58:65:36:a8:f8:a1:1b:9c:fb:1e:48:c1:14:9a:
                    31:40:e1:52:7a:37:f2:9b:6d:38:e9:41:4e:b5:46:
                    ce:17:e5:67:c9:b3:42:34:db:75:42:3a:35:22:32:
                    b0:84:30:14:26:74:e3:05:8d:6b:c2:1f:19:f1:51:
                    c5:e3:d1:3f:5c:f2:d6:e8:71:9f:eb:af:1f:1f:92:
                    ad:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:72:50:AC:F1:05:7C:C6:D7:BF:07:4A:F9:D6:80:0E:B8:70:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/45813344-3d35-3040-afc1-d95e99a3500e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29/90e0e2fb-b856-4bab-b967-a8918ce1cb29.crl

            X509v3 Authority Key Identifier:
                keyid:D9:F0:59:7D:DD:E5:0B:71:70:E9:D9:96:27:EB:07:0D:E8:54:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/90e0e2fb-b856-4bab-b967-a8918ce1cb29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:69:8d:ff:aa:dc:b9:c6:72:77:2a:6a:a0:8d:1f:30:24:4d:
         05:a2:03:93:7e:fb:49:7f:80:ad:2c:ae:fd:72:a7:2c:5b:82:
         06:40:43:2f:1c:f2:01:1b:21:99:c6:1e:a8:e2:6a:0c:6e:25:
         7b:2d:4d:31:59:30:66:ba:0f:43:87:bb:e5:6a:20:3e:6f:08:
         9c:6f:09:9c:9a:c8:67:3e:81:dd:fd:e5:13:2e:94:6c:eb:d5:
         a3:b4:8d:12:7d:d3:95:5b:22:e0:20:63:06:c4:05:7e:00:0a:
         b2:64:cd:81:34:80:4c:b9:13:4c:fe:72:ae:cc:db:c2:11:2e:
         16:da:8d:24:37:e3:aa:d2:3d:f8:62:9b:06:61:4a:6e:e6:a6:
         e2:bc:9c:65:43:bf:a8:6d:37:80:b5:fb:70:30:a8:88:4f:f2:
         86:fe:85:1f:7d:ae:81:41:ea:68:0f:85:e3:71:6e:c0:b4:0b:
         3e:5d:ef:50:be:01:8f:61:9b:ea:8d:b1:9a:52:51:87:ff:cd:
         5f:8e:a7:73:04:3d:b5:41:ab:67:2e:d6:ec:04:7d:4f:df:c9:
         87:63:34:32:cb:66:e4:a4:ca:18:01:8d:7d:a5:44:97:b5:d4:
         37:5c:46:4c:7b:96:20:e5:b1:23:68:cc:20:56:36:42:50:73:
         f7:2a:8b:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEO0oCPXnWQFW3YRDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBlMGUyZmItYjg1Ni00YmFiLWI5NjctYTg5MThjZTFj
YjI5MB4XDTIzMTAyOTAxMDAxNVoXDTI0MDEyNzAyMDAxNVowLzEtMCsGA1UEAxMk
OGUxNmYyYTAtMzg3OS00MjRlLWJhYTQtZTg4OGFmYmY4NDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW9hrSjWWnnDDTXbO/Vj2oBE+130haaGpJGz
CubvJXrB9ybzP4IXV74AQLpxqqEU51chBXPwUzsEz1dPeNMNjxkwZ+tp4VNxWjaR
KlmB2CRqsnVhtG3rsqOSfBXTzKmuP8LQiYHC9eBd31bBhXCI8IYyUgX9qUsqTHgV
6uiUcgXc3uYWDVatRgXhsQVqJI9E34zDasuQwUK5LvVyZyukt/RdlJnAQpoFrh69
4kAPY2T1mymtWGU2qPihG5z7HkjBFJoxQOFSejfym2046UFOtUbOF+VnybNCNNt1
Qjo1IjKwhDAUJnTjBY1rwh8Z8VHF49E/XPLW6HGf668fH5KtFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+nclCs8QV8xte/B0r51oAOuHBtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MGUw
ZTJmYi1iODU2LTRiYWItYjk2Ny1hODkxOGNlMWNiMjkvNDU4MTMzNDQtM2QzNS0z
MDQwLWFmYzEtZDk1ZTk5YTM1MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTBlMGUyZmItYjg1Ni00YmFiLWI5
NjctYTg5MThjZTFjYjI5LzkwZTBlMmZiLWI4NTYtNGJhYi1iOTY3LWE4OTE4Y2Ux
Y2IyOS5jcmwwHwYDVR0jBBgwFoAU2fBZfd3lC3Fw6dmWJ+sHDehUIHIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MGUwZTJmYi1iODU2LTRiYWItYjk2Ny1hODkx
OGNlMWNiMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjsrcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFpjf+q3LnGcncqaqCNHzAkTQWiA5N++0l/gK0srv1ypyxbggZAQy8c
8gEbIZnGHqjiagxuJXstTTFZMGa6D0OHu+VqID5vCJxvCZyayGc+gd395RMulGzr
1aO0jRJ905VbIuAgYwbEBX4ACrJkzYE0gEy5E0z+cq7M28IRLhbajSQ346rSPfhi
mwZhSm7mpuK8nGVDv6htN4C1+3AwqIhP8ob+hR99roFB6mgPheNxbsC0Cz5d71C+
AY9hm+qNsZpSUYf/zV+Op3MEPbVBq2cu1uwEfU/fyYdjNDLLZuSkyhgBjX2lRJe1
1DdcRkx7liDlsSNozCBWNkJQc/cqi0Y=
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:07 2024 by rpki-client on console.sobornost.net