Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa
File:                     c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa (raw, json)
Hash identifier:          spCZtpucIWc+6P5LfHPl8mNszCH6Ow8R4Aj82m5Hpqk=
Subject key identifier:   E2:7F:43:E0:F5:92:51:A7:35:2C:12:B0:D6:FA:A0:20:80:D9:96:7B
Certificate issuer:       /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial:       010D0C9F43285849711433160898DAB6D2D189B4
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     398420
IP address blocks:        206.71.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:33:16:08:98:da:b6:d2:d1:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=817a5696-934d-4f62-a132-98d44cdcd4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:f8:67:c0:91:17:d5:ec:4a:4c:4b:f7:58:
                    12:64:72:ab:86:b0:57:14:e1:4b:02:0b:29:58:20:
                    bc:66:8d:0e:08:3e:60:a3:d8:84:a6:2b:43:75:9f:
                    a6:0a:6d:e2:8c:c7:4e:cc:a0:0d:75:5a:b8:7f:c1:
                    48:bb:ad:26:bf:fc:0c:c4:7f:c9:82:1a:b7:20:81:
                    2e:70:78:02:4e:7b:3b:cb:68:5c:d3:45:5f:87:99:
                    8a:2c:3f:9d:a8:a8:cb:42:22:be:1c:c9:7b:97:65:
                    e0:4b:6e:77:0d:82:01:8e:7e:16:22:1d:fb:d0:6f:
                    86:6f:6b:21:af:ab:81:a2:76:a9:c7:ae:0c:97:9d:
                    76:c0:24:44:bd:af:ec:59:7f:44:62:1d:99:43:78:
                    f1:ac:ad:af:cb:af:39:94:60:93:ea:d7:b8:a6:60:
                    60:a9:c7:8c:5e:5d:3a:b0:40:c9:c0:e9:74:99:fe:
                    ee:ac:2c:9f:aa:6d:9b:9e:68:fb:2c:1c:ba:06:84:
                    7a:fa:45:17:db:89:93:af:c8:44:f5:30:a3:b4:84:
                    7f:25:d2:00:f5:7b:6d:ff:d6:ac:17:8b:bd:cd:09:
                    76:65:6d:93:40:3a:a9:92:17:86:1e:ca:ef:f0:fd:
                    9d:4f:80:06:3f:a3:3c:f8:8f:ef:0f:80:01:13:c0:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7F:43:E0:F5:92:51:A7:35:2C:12:B0:D6:FA:A0:20:80:D9:96:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl

            X509v3 Authority Key Identifier:
                keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:08:cc:aa:b1:07:48:da:e6:62:0a:40:53:fa:2d:26:1f:2a:
         98:d4:0d:fc:11:8d:69:ef:48:dc:57:5b:2d:fc:63:1d:20:49:
         76:88:c2:6c:e3:15:2f:15:67:b2:44:1a:b2:fc:81:1c:be:75:
         f8:97:69:24:d1:08:f1:43:c6:1d:50:36:4b:a3:b2:4f:b2:96:
         c1:a9:27:46:94:cb:36:8f:8e:e1:0c:bf:53:7c:c3:27:67:bb:
         db:6a:d9:92:7c:3d:aa:5c:ab:80:a7:e1:21:de:73:19:b1:b8:
         56:34:11:08:c4:fe:57:5a:b3:5d:a8:95:75:7d:e9:e7:a8:16:
         de:d4:17:40:0c:41:8e:72:29:8d:9e:a6:ed:d2:6f:aa:dd:37:
         84:1b:22:cd:31:e7:7a:94:16:8d:86:15:d9:9c:fc:f2:f7:06:
         fa:d8:2e:2b:41:07:a6:ea:23:e2:a2:ff:09:d7:5b:00:1b:86:
         0d:e2:be:6b:e5:35:9e:8f:93:4f:bb:c9:e8:c1:3f:12:59:47:
         86:0b:dc:89:1d:92:71:f7:c6:70:f8:49:a8:49:ed:b3:00:e2:
         71:a4:97:ee:83:34:b3:17:d3:ef:07:a2:06:f6:d6:e1:a3:c3:
         77:38:c5:d7:13:54:a7:27:ed:72:bc:46:4a:81:e1:8a:e0:36:
         9e:c1:22:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDMWCJjattLRibQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3
OTU5MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
ODE3YTU2OTYtOTM0ZC00ZjYyLWExMzItOThkNDRjZGNkNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56/4Z8CRF9XsSkxL91gSZHKrhrBXFOFLAgsp
WCC8Zo0OCD5go9iEpitDdZ+mCm3ijMdOzKANdVq4f8FIu60mv/wMxH/Jghq3IIEu
cHgCTns7y2hc00Vfh5mKLD+dqKjLQiK+HMl7l2XgS253DYIBjn4WIh370G+Gb2sh
r6uBonapx64Ml512wCREva/sWX9EYh2ZQ3jxrK2vy685lGCT6te4pmBgqceMXl06
sEDJwOl0mf7urCyfqm2bnmj7LBy6BoR6+kUX24mTr8hE9TCjtIR/JdIA9Xtt/9as
F4u9zQl2ZW2TQDqpkheGHsrv8P2dT4AGP6M8+I/vD4ABE8C6GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOJ/Q+D1klGnNSwSsNb6oCCA2ZZ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz
ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYzUxYWQ0ZGEtOWJkZC0z
OTQ4LTg3ODktMWQxOTRiYjlmMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0
ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0
Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw
M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoIzKqxB0ja5mIKQFP6LSYfKpjUDfwRjWnvSNxXWy38Yx0gSXaIwmzj
FS8VZ7JEGrL8gRy+dfiXaSTRCPFDxh1QNkujsk+ylsGpJ0aUyzaPjuEMv1N8wydn
u9tq2ZJ8Papcq4Cn4SHecxmxuFY0EQjE/ldas12olXV96eeoFt7UF0AMQY5yKY2e
pu3Sb6rdN4QbIs0x53qUFo2GFdmc/PL3BvrYLitBB6bqI+Ki/wnXWwAbhg3ivmvl
NZ6Pk0+7yejBPxJZR4YL3IkdknH3xnD4SahJ7bMA4nGkl+6DNLMX0+8Hogb21uGj
w3c4xdcTVKcn7XK8RkqB4YrgNp7BInA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:51 2025 by rpki-client on console.sobornost.net