Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa
File:                     b617a7d0-43bb-3d84-a792-d04ec9297787.roa (raw, json)
Hash identifier:          gVfd7CTDz1vf1T5xOzQcIaTPjz83urjqKdkqvMFqunQ=
Subject key identifier:   05:25:C0:B4:6B:20:A8:F9:13:C8:93:A9:F6:96:67:FA:FB:92:6B:16
Certificate issuer:       /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
Certificate serial:       010D0C9F432858495ABEDDA2B5833609E5DDA300
Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        45.40.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:dd:a2:b5:83:36:09:e5:dd:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=71466291-c251-4cbe-932c-dfe1a16a635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:1b:c2:d7:8d:e1:c0:73:97:27:80:b4:91:
                    10:b8:95:91:ad:af:eb:0e:bd:a0:05:db:89:c5:18:
                    27:3a:b3:cb:e0:9f:64:5e:84:fb:2e:6d:4f:2a:c1:
                    96:31:d3:4b:3e:ef:4f:a3:10:4f:ac:1d:47:37:70:
                    68:c4:43:1b:62:48:93:dd:32:a4:e9:29:fe:46:ca:
                    a3:04:dc:1a:a7:80:87:d1:60:6a:ff:de:7a:6b:00:
                    56:1b:49:40:e1:35:87:f0:1c:67:c4:40:cc:a8:85:
                    66:c9:10:5e:ef:d1:c0:cb:f6:b0:96:a3:1b:4e:c0:
                    a0:84:13:d8:d7:df:97:a9:aa:af:4d:0a:ef:74:0f:
                    6f:30:5d:6c:9e:59:a0:82:72:af:a0:d4:27:cb:72:
                    6c:8a:e6:9a:fd:bc:05:0f:27:6a:3d:66:01:87:d5:
                    44:d8:c6:20:fc:57:82:c7:e6:ee:44:d5:cf:49:8d:
                    b2:63:0e:93:7e:b4:b6:29:b4:89:28:d5:7c:43:1c:
                    52:fe:3c:8e:44:2f:f5:3c:91:3d:51:0e:68:6e:69:
                    45:ce:ee:9b:b6:3d:95:36:68:f7:65:91:d8:bc:46:
                    a2:31:56:90:62:0d:1e:f6:8c:fe:41:dc:1d:f8:33:
                    78:a1:46:43:c6:d9:85:08:d3:45:14:b4:8b:3e:4d:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:C0:B4:6B:20:A8:F9:13:C8:93:A9:F6:96:67:FA:FB:92:6B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/b617a7d0-43bb-3d84-a792-d04ec9297787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl

            X509v3 Authority Key Identifier:
                keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:94:b8:e7:46:ed:30:48:05:9e:c9:ce:4d:85:66:b6:b3:ba:
         8b:01:db:22:78:c9:f9:85:42:ad:77:2f:6d:3d:87:74:05:08:
         17:9e:15:54:47:cc:a8:4a:bc:22:aa:39:16:e8:9d:0c:6d:ff:
         3c:64:da:ee:53:17:a6:dd:00:ae:72:2a:18:ec:9c:f0:8a:2a:
         47:c8:54:91:07:da:91:ba:0d:08:11:10:fd:4d:67:e9:ff:c9:
         80:0f:76:79:35:50:08:55:0c:5f:4c:bc:70:46:60:ef:1d:69:
         fc:06:b1:30:26:35:c0:93:c5:d2:b6:cc:57:da:31:43:64:31:
         5e:cf:00:9d:53:b0:6b:0d:5b:f6:e0:03:7c:3b:7b:00:2a:ea:
         87:3c:53:82:ed:18:1c:49:dc:3a:6b:fe:58:5b:32:27:fe:5f:
         59:a6:3d:2d:6e:41:c5:9e:2e:7a:f4:47:2f:a5:18:89:e8:32:
         41:53:57:ff:ca:54:36:da:77:4c:9f:02:d8:c4:3e:21:e8:05:
         2a:cc:37:04:b4:78:ca:dd:6c:16:02:81:34:be:c6:7e:b8:f5:
         c8:49:fa:c6:7a:27:56:e6:3e:d6:b9:36:a7:af:07:d0:01:93:
         4b:a0:49:3a:47:e6:49:b1:3b:6a:4e:b5:c7:b7:e6:a5:32:79:
         9a:06:8f:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt2itYM2CeXdowAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk
MzI2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
NzE0NjYyOTEtYzI1MS00Y2JlLTkzMmMtZGZlMWExNmE2MzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cbwteN4cBzlyeAtJEQuJWRra/rDr2gBduJ
xRgnOrPL4J9kXoT7Lm1PKsGWMdNLPu9PoxBPrB1HN3BoxEMbYkiT3TKk6Sn+Rsqj
BNwap4CH0WBq/956awBWG0lA4TWH8BxnxEDMqIVmyRBe79HAy/awlqMbTsCghBPY
19+XqaqvTQrvdA9vMF1snlmggnKvoNQny3Jsiuaa/bwFDydqPWYBh9VE2MYg/FeC
x+buRNXPSY2yYw6TfrS2KbSJKNV8QxxS/jyORC/1PJE9UQ5obmlFzu6btj2VNmj3
ZZHYvEaiMVaQYg0e9oz+Qdwd+DN4oUZDxtmFCNNFFLSLPk1kkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUlwLRrIKj5E8iTqfaWZ/r7kmsWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw
NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvYjYxN2E3ZDAtNDNiYi0z
ZDg0LWE3OTItZDA0ZWM5Mjk3Nzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx
NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4
ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm
NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELShAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEeUuOdG7TBIBZ7Jzk2FZrazuosB2yJ4yfmFQq13L209h3QFCBeeFVRH
zKhKvCKqORbonQxt/zxk2u5TF6bdAK5yKhjsnPCKKkfIVJEH2pG6DQgREP1NZ+n/
yYAPdnk1UAhVDF9MvHBGYO8dafwGsTAmNcCTxdK2zFfaMUNkMV7PAJ1TsGsNW/bg
A3w7ewAq6oc8U4LtGBxJ3Dpr/lhbMif+X1mmPS1uQcWeLnr0Ry+lGInoMkFTV//K
VDbad0yfAtjEPiHoBSrMNwS0eMrdbBYCgTS+xn649chJ+sZ6J1bmPta5NqevB9AB
k0ugSTpH5kmxO2pOtce35qUyeZoGj4U=
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:27 2025 by rpki-client on console.sobornost.net