Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/70292828-cade-3953-882d-4a9c6df5d322.roa
File:                     70292828-cade-3953-882d-4a9c6df5d322.roa (raw, json)
Hash identifier:          mOvzatzeN5cstKCH44KPybILc43H5hgTY8M5znHYFoI=
Subject key identifier:   2D:9D:47:82:85:74:77:1C:E4:A8:AC:51:2D:30:5D:F4:21:6A:7F:A8
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F432858481C9A94DA4AFD56EBC5F02000
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/70292828-cade-3953-882d-4a9c6df5d322.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     10753
IP address blocks:        192.67.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:94:da:4a:fd:56:eb:c5:f0:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=270695f0-5f6d-4b31-b2c8-ed5147b09ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:2f:64:94:4a:eb:f1:1f:f3:63:2d:ec:16:
                    45:9b:04:b2:0d:bd:4c:71:7b:9e:28:5f:06:e1:f1:
                    98:83:97:4c:02:5c:2d:db:ef:82:20:13:53:7c:cd:
                    60:ea:d2:bd:e0:e4:c6:a7:9d:90:40:52:d3:20:ff:
                    89:9a:13:ac:99:24:b3:6e:da:8f:f5:2d:9f:12:05:
                    40:da:e9:d1:ed:92:27:f0:ed:1a:6f:22:df:e2:4a:
                    fe:a5:62:7e:38:39:23:ef:22:e7:13:e5:09:b2:5c:
                    ce:20:61:87:2a:45:77:5e:c9:5b:30:8c:64:0a:38:
                    60:5e:af:cc:75:b2:aa:39:81:fe:50:3e:0a:ad:90:
                    16:83:9a:6a:43:d6:5e:7f:98:a5:ae:1d:c0:ad:0f:
                    d2:e4:56:ed:e9:1b:ce:71:30:e1:e9:8c:5a:d8:84:
                    bf:f4:52:e5:8f:ec:41:a1:e9:1e:01:65:ce:ca:46:
                    21:7c:b0:e6:bf:fe:25:87:0e:c6:85:9e:ca:60:a3:
                    d6:7e:1a:12:fe:6a:5a:53:b6:7e:2d:03:7b:24:04:
                    bb:6f:5b:be:af:03:48:c5:1c:a9:bd:63:fa:91:67:
                    ff:36:99:0d:7e:1c:7b:8d:ec:81:86:52:10:5c:ac:
                    5d:74:53:1e:10:e4:94:a7:08:6c:0b:54:0c:66:21:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9D:47:82:85:74:77:1C:E4:A8:AC:51:2D:30:5D:F4:21:6A:7F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/70292828-cade-3953-882d-4a9c6df5d322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:53:75:37:69:87:52:f8:05:14:51:49:45:4e:1c:19:88:
         bb:14:25:bb:10:24:21:78:5c:03:94:37:75:43:ae:0d:98:8c:
         e5:5b:9b:f1:5f:f8:c2:4c:85:2c:47:fb:30:4b:4e:92:df:50:
         ed:6f:a6:17:56:51:99:e6:dd:9f:04:65:b3:d8:32:07:c3:83:
         84:36:0f:68:f7:38:59:64:06:1c:ed:5b:4b:03:de:11:06:5d:
         ef:f2:27:ec:9e:41:f8:f0:be:4a:c5:9e:e8:2b:47:fa:43:bd:
         ef:07:f1:31:ce:0c:ce:39:77:77:7b:45:9e:1a:f9:78:af:de:
         e9:0f:1e:67:1a:89:c2:94:1a:5a:43:fc:40:4d:ec:ee:45:30:
         41:3d:71:03:85:e7:b7:3a:85:ff:45:87:21:4c:4f:30:c1:d6:
         f2:dd:39:e3:68:9c:da:0d:88:f8:c7:f7:4d:68:14:51:39:af:
         ca:14:f4:0f:55:7e:70:88:01:6b:cb:01:cc:60:6a:72:e9:5a:
         70:3c:db:d4:af:b7:84:0b:05:67:74:0e:ef:74:58:eb:15:d1:
         8f:d4:9a:1a:19:54:3c:b9:6d:eb:29:be:d3:c5:89:c2:b7:ad:
         fa:24:70:aa:f9:28:cc:d1:4b:b1:3c:fd:cb:bc:2f:a2:92:92:
         89:15:7f:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmpTaSv1W68XwIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY1MDdiNDUtYjczYi00MjA4LWI0M2QtYjdkYzdhNmZi
ZmE5MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
MjcwNjk1ZjAtNWY2ZC00YjMxLWIyYzgtZWQ1MTQ3YjA5YWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVcvZJRK6/Ef82Mt7BZFmwSyDb1McXueKF8G
4fGYg5dMAlwt2++CIBNTfM1g6tK94OTGp52QQFLTIP+JmhOsmSSzbtqP9S2fEgVA
2unR7ZIn8O0abyLf4kr+pWJ+ODkj7yLnE+UJslzOIGGHKkV3XslbMIxkCjhgXq/M
dbKqOYH+UD4KrZAWg5pqQ9Zef5ilrh3ArQ/S5Fbt6RvOcTDh6Yxa2IS/9FLlj+xB
oekeAWXOykYhfLDmv/4lhw7GhZ7KYKPWfhoS/mpaU7Z+LQN7JAS7b1u+rwNIxRyp
vWP6kWf/NpkNfhx7jeyBhlIQXKxddFMeEOSUpwhsC1QMZiFURQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2dR4KFdHcc5KisUS0wXfQhan+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjUw
N2I0NS1iNzNiLTQyMDgtYjQzZC1iN2RjN2E2ZmJmYTkvNzAyOTI4MjgtY2FkZS0z
OTUzLTg4MmQtNGE5YzZkZjVkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY1MDdiNDUtYjczYi00MjA4LWI0
M2QtYjdkYzdhNmZiZmE5LzA2NTA3YjQ1LWI3M2ItNDIwOC1iNDNkLWI3ZGM3YTZm
YmZhOS5jcmwwHwYDVR0jBBgwFoAUNiOnsnShCFoNRSDVeLzLNIiou5gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjUwN2I0NS1iNzNiLTQyMDgtYjQzZC1iN2Rj
N2E2ZmJmYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwEOgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI1yU3U3aYdS+AUUUUlFThwZiLsUJbsQJCF4XAOUN3VDrg2YjOVbm/Ff
+MJMhSxH+zBLTpLfUO1vphdWUZnm3Z8EZbPYMgfDg4Q2D2j3OFlkBhztW0sD3hEG
Xe/yJ+yeQfjwvkrFnugrR/pDve8H8THODM45d3d7RZ4a+Xiv3ukPHmcaicKUGlpD
/EBN7O5FMEE9cQOF57c6hf9FhyFMTzDB1vLdOeNonNoNiPjH901oFFE5r8oU9A9V
fnCIAWvLAcxganLpWnA829Svt4QLBWd0Du90WOsV0Y/UmhoZVDy5bespvtPFicK3
rfokcKr5KMzRS7E8/cu8L6KSkokVfw8=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:02:11 2024 by rpki-client on console.sobornost.net