Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa
File:                     6df0ab59-03d9-3306-8364-6288a57b01af.roa (raw, json)
Hash identifier:          ZYc+RTgSrR111ZlpPWg/KvY5ymkNM4VUrBcw9827AKc=
Subject key identifier:   61:3F:4D:4C:D7:A6:51:E7:B6:88:2E:6B:DA:D7:54:36:B5:5D:AB:A2
Certificate issuer:       /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Certificate serial:       010D0C9F4328584975445234DA44824E5E95C100
Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     6939
IP address blocks:        74.121.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:52:34:da:44:82:4e:5e:95:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=5c5bd07d-c976-4413-8df2-4cacaee52bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:cb:6e:c3:f0:4d:c0:97:77:65:60:86:e3:
                    d0:5f:7b:36:1f:fd:bc:c9:34:ca:1b:19:1c:37:ad:
                    92:35:3a:df:97:45:e8:e5:7a:1c:a5:48:62:78:9f:
                    97:29:ad:c5:ff:73:47:1d:93:fe:f5:e6:eb:d9:60:
                    ed:fb:84:18:5f:a6:f7:3b:f8:66:b0:8e:26:95:d6:
                    fa:58:8f:67:7a:4a:11:6b:9e:6b:9d:df:e3:df:b2:
                    c6:53:5b:6c:d3:41:00:41:5a:4b:8c:fd:a9:e7:ec:
                    5b:75:e1:0e:57:78:48:79:62:8e:97:e5:56:4d:61:
                    41:5b:d1:c4:de:a2:99:bb:0c:92:88:f2:4f:d3:96:
                    7a:a7:87:ee:1b:e4:f3:10:f6:fa:f4:61:15:bc:e0:
                    da:cb:2f:a9:e8:81:8a:c1:d8:16:d8:d8:84:3a:c4:
                    e5:93:f2:7c:74:b2:26:a0:3d:c3:1a:13:e4:b8:b4:
                    3a:c3:ee:a6:52:85:f9:65:48:76:71:a3:28:8c:6c:
                    53:df:27:f7:b2:fb:94:ef:a4:aa:46:43:ea:a6:73:
                    dc:9a:2e:d0:0f:e9:05:3f:a0:33:59:38:b8:50:b0:
                    e1:81:7e:e3:f7:90:b5:cb:80:7f:45:43:79:f1:67:
                    72:ef:ff:52:fc:2b:69:dd:63:c8:5e:f9:5f:4c:6e:
                    d5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:4D:4C:D7:A6:51:E7:B6:88:2E:6B:DA:D7:54:36:B5:5D:AB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/6df0ab59-03d9-3306-8364-6288a57b01af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl

            X509v3 Authority Key Identifier:
                keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:53:2f:af:09:b8:1b:81:ec:aa:e8:fd:50:2a:6c:26:b1:
         0e:69:4f:f2:55:1d:dc:6e:84:7e:57:97:17:2c:0f:6f:93:a0:
         82:e4:19:0b:22:4a:bc:01:36:3e:9f:69:4c:84:9e:53:78:b2:
         94:64:23:d7:9a:dc:88:8c:70:11:69:8f:b1:ce:f2:0f:3c:80:
         f9:dd:0f:18:fd:36:90:08:e5:e6:49:60:fd:29:26:b1:d1:2e:
         f9:73:76:ee:06:44:2b:3f:61:1b:95:f6:73:8b:d2:c6:23:9d:
         89:9d:15:ac:e7:fe:35:6c:7d:9b:e3:4d:d7:34:c4:80:5e:e1:
         92:ce:59:aa:49:d9:36:2d:cd:e9:77:b5:91:23:78:49:6e:70:
         28:ae:94:ce:13:11:24:80:13:89:ea:ca:30:65:37:da:e1:d1:
         c7:32:1b:b5:21:b5:11:f1:2e:17:16:8e:3c:8d:d6:4c:2f:8a:
         b4:de:6c:c5:7f:2d:fb:25:f1:20:fb:f5:27:18:eb:15:b9:75:
         8c:78:4d:39:65:3b:d6:96:08:e4:c1:26:e1:7f:e0:2d:1f:90:
         b7:5e:40:ae:ac:0f:35:89:0d:74:2f:e4:77:ed:d2:a9:eb:36:
         63:ac:37:da:ea:c6:19:ab:b5:18:cb:fd:cc:ea:dc:14:9e:63:
         1d:32:30:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFI02kSCTl6VwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGRiZTNjYTItNDliZC00NzU4LTgwNTQtNWQxNTU1YTkw
YTExMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
NWM1YmQwN2QtYzk3Ni00NDEzLThkZjItNGNhY2FlZTUyYmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoPLbsPwTcCXd2VghuPQX3s2H/28yTTKGxkc
N62SNTrfl0Xo5XocpUhieJ+XKa3F/3NHHZP+9ebr2WDt+4QYX6b3O/hmsI4mldb6
WI9nekoRa55rnd/j37LGU1ts00EAQVpLjP2p5+xbdeEOV3hIeWKOl+VWTWFBW9HE
3qKZuwySiPJP05Z6p4fuG+TzEPb69GEVvODayy+p6IGKwdgW2NiEOsTlk/J8dLIm
oD3DGhPkuLQ6w+6mUoX5ZUh2caMojGxT3yf3svuU76SqRkPqpnPcmi7QD+kFP6Az
WTi4ULDhgX7j95C1y4B/RUN58Wdy7/9S/Ctp3WPIXvlfTG7VpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGE/TUzXplHntogua9rXVDa1XauiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJl
M2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1NTVhOTBhMTEvNmRmMGFiNTktMDNkOS0z
MzA2LTgzNjQtNjI4OGE1N2IwMWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGRiZTNjYTItNDliZC00NzU4LTgw
NTQtNWQxNTU1YTkwYTExLzRkYmUzY2EyLTQ5YmQtNDc1OC04MDU0LTVkMTU1NWE5
MGExMS5jcmwwHwYDVR0jBBgwFoAUVc0hzFNA4wPm0ZYQxx0PiWBnDuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZGJlM2NhMi00OWJkLTQ3NTgtODA1NC01ZDE1
NTVhOTBhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnkIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsGUy+vCbgbgeyq6P1QKmwmsQ5pT/JVHdxuhH5XlxcsD2+ToILkGQsi
SrwBNj6faUyEnlN4spRkI9ea3IiMcBFpj7HO8g88gPndDxj9NpAI5eZJYP0pJrHR
Lvlzdu4GRCs/YRuV9nOL0sYjnYmdFazn/jVsfZvjTdc0xIBe4ZLOWapJ2TYtzel3
tZEjeElucCiulM4TESSAE4nqyjBlN9rh0ccyG7UhtRHxLhcWjjyN1kwvirTebMV/
Lfsl8SD79ScY6xW5dYx4TTllO9aWCOTBJuF/4C0fkLdeQK6sDzWJDXQv5Hft0qnr
NmOsN9rqxhmrtRjL/czq3BSeYx0yMHM=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:25 2025 by rpki-client on console.sobornost.net