Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa
File:                     4039d964-03a7-3331-869e-901999556e05.roa (raw, json)
Hash identifier:          XJn98tG+HedE2FbQN1y1l/qbmGvu6S06qjHHxsasTwA=
Subject key identifier:   25:96:15:D5:EA:78:E5:A4:17:4B:12:90:4E:69:32:A2:5B:53:6D:E5
Certificate issuer:       /CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
Certificate serial:       010D0C9F4328584979743C148316716F292BA240
Authority key identifier: 52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     54641
IP address blocks:        216.87.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:3c:14:83:16:71:6f:29:2b:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6bee5d-23d5-44e1-9615-76f9de86f2dd
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=1b9c6a11-3e85-421b-aee7-4d30dde43444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:03:9d:44:94:26:5c:a8:d9:46:13:fb:1e:
                    0c:2e:d6:3a:85:f4:6c:70:9c:99:ca:78:cb:76:86:
                    4d:2a:9a:55:95:c2:70:18:88:ee:c4:ed:c8:9c:d9:
                    96:de:55:80:cc:3d:fe:32:5a:36:9b:2a:13:5c:6f:
                    93:2f:f9:77:42:3d:78:a4:25:d3:36:1b:f5:eb:b3:
                    d7:1a:bd:f2:60:37:c4:19:06:55:b2:d8:5e:69:37:
                    75:83:2b:ca:ec:ed:f7:31:09:8c:5e:67:15:b0:e6:
                    b9:38:0b:f1:ca:d9:3d:ff:dc:8e:f0:2e:97:86:72:
                    93:8b:cc:5d:53:5c:2e:6a:f4:ea:12:e7:59:28:f5:
                    30:6f:34:31:15:d6:b9:fe:50:ff:23:e5:07:b0:d4:
                    ab:95:2a:3a:0b:f8:43:59:d5:c1:58:57:74:b4:17:
                    9d:33:e3:85:12:f3:62:75:43:a7:8d:ab:fc:7d:87:
                    8d:0a:c1:1a:fe:82:a9:37:e5:65:db:7e:23:a5:81:
                    78:43:c0:de:41:dc:92:a7:a6:99:c6:5f:50:7f:ae:
                    76:d0:52:13:ec:08:7e:c1:b4:b2:8d:3b:00:0b:76:
                    f6:39:5b:79:70:3e:3a:06:cf:2f:dc:43:67:7a:57:
                    d9:0e:37:24:77:ca:f3:c9:ff:5a:47:0b:43:ff:af:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:96:15:D5:EA:78:E5:A4:17:4B:12:90:4E:69:32:A2:5B:53:6D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/4039d964-03a7-3331-869e-901999556e05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.crl

            X509v3 Authority Key Identifier:
                keyid:52:51:B6:B9:53:49:BF:16:DC:4B:79:FB:8C:F9:F8:46:0E:8D:5A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ee6bee5d-23d5-44e1-9615-76f9de86f2dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8c:a3:e7:9c:8e:00:57:a5:15:26:ea:c0:5d:93:4b:83:d7:
         59:31:8f:1d:b1:2d:13:a1:62:f7:10:29:e3:3c:db:13:61:f7:
         b2:f3:9b:61:3d:f1:f0:1b:33:aa:86:f6:9a:5c:0e:d7:8a:a2:
         6d:da:78:4a:d8:49:cc:db:72:ab:2f:ca:a0:e7:db:6b:92:af:
         5a:46:10:12:0c:49:1e:73:c2:07:75:85:20:9a:4a:87:f5:39:
         a8:1b:a8:73:58:5b:1f:5a:99:e9:b9:5f:d2:18:ea:74:8e:b3:
         12:d3:a7:91:e8:44:06:e9:a0:e7:33:fe:bd:e6:1b:e9:09:59:
         ad:ef:71:6c:c1:1e:70:e3:40:fe:be:2e:16:08:73:f1:a9:6c:
         22:1b:a6:5b:73:f2:37:0c:7b:f2:c0:d8:65:36:40:56:19:a1:
         df:ad:89:25:bf:45:88:5d:48:23:71:3d:44:5e:c0:55:c7:ca:
         de:b4:eb:a1:c9:79:85:f7:a3:59:25:3d:00:35:72:7c:22:6c:
         bf:d3:78:fb:2d:35:f9:6d:1b:52:38:5e:53:60:3a:82:3a:cb:
         41:18:df:57:7b:7f:f4:30:d0:60:53:d2:27:e7:9a:6c:79:84:
         39:f1:94:26:47:9e:91:4b:6d:5d:19:c8:43:09:ff:cd:e4:ad:
         b0:f6:e5:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dDwUgxZxbykrokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWU2YmVlNWQtMjNkNS00NGUxLTk2MTUtNzZmOWRlODZm
MmRkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
MWI5YzZhMTEtM2U4NS00MjFiLWFlZTctNGQzMGRkZTQzNDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjkDnUSUJlyo2UYT+x4MLtY6hfRscJyZynjL
doZNKppVlcJwGIjuxO3InNmW3lWAzD3+Mlo2myoTXG+TL/l3Qj14pCXTNhv167PX
Gr3yYDfEGQZVstheaTd1gyvK7O33MQmMXmcVsOa5OAvxytk9/9yO8C6XhnKTi8xd
U1wuavTqEudZKPUwbzQxFda5/lD/I+UHsNSrlSo6C/hDWdXBWFd0tBedM+OFEvNi
dUOnjav8fYeNCsEa/oKpN+Vl234jpYF4Q8DeQdySp6aZxl9Qf6520FIT7Ah+wbSy
jTsAC3b2OVt5cD46Bs8v3ENnelfZDjckd8rzyf9aRwtD/6/EVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCWWFdXqeOWkF0sSkE5pMqJbU23lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZi
ZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5ZGU4NmYyZGQvNDAzOWQ5NjQtMDNhNy0z
MzMxLTg2OWUtOTAxOTk5NTU2ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWU2YmVlNWQtMjNkNS00NGUxLTk2
MTUtNzZmOWRlODZmMmRkL2VlNmJlZTVkLTIzZDUtNDRlMS05NjE1LTc2ZjlkZTg2
ZjJkZC5jcmwwHwYDVR0jBBgwFoAUUlG2uVNJvxbcS3n7jPn4Rg6NWuUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZTZiZWU1ZC0yM2Q1LTQ0ZTEtOTYxNS03NmY5
ZGU4NmYyZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FcgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+Mo+ecjgBXpRUm6sBdk0uD11kxjx2xLROhYvcQKeM82xNh97Lzm2E9
8fAbM6qG9ppcDteKom3aeErYSczbcqsvyqDn22uSr1pGEBIMSR5zwgd1hSCaSof1
OagbqHNYWx9amem5X9IY6nSOsxLTp5HoRAbpoOcz/r3mG+kJWa3vcWzBHnDjQP6+
LhYIc/GpbCIbpltz8jcMe/LA2GU2QFYZod+tiSW/RYhdSCNxPURewFXHyt6066HJ
eYX3o1klPQA1cnwibL/TePstNfltG1I4XlNgOoI6y0EY31d7f/Qw0GBT0ifnmmx5
hDnxlCZHnpFLbV0ZyEMJ/83krbD25Qg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:27:21 2025 by rpki-client on console.sobornost.net