Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
File:                     55304d86-38bb-30a6-9c19-973accc138e1.roa (raw, json)
Hash identifier:          uYCqAZ6i8S3AIm/wfmpuISup3kN5JsCuKiOfVsG5Kxk=
Subject key identifier:   22:DE:D7:3B:1D:E0:BE:0D:A4:82:45:85:E9:5D:96:68:9E:B6:C2:FE
Certificate issuer:       /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
Certificate serial:       010D0C9F432858495C243A473475A6330438D940
Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     396982
IP address blocks:        208.94.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3a:47:34:75:a6:33:04:38:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8ce1ab12-af1c-4b87-949f-2cd015c295ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:61:3e:8a:51:8b:f5:b7:7f:37:e9:d3:78:
                    da:15:7a:d3:a9:84:7c:2e:c6:57:af:51:62:d4:95:
                    b2:e1:fd:cd:6b:09:86:a5:f3:d4:3d:d3:80:5d:eb:
                    dc:81:2b:9c:ce:ba:a9:f9:b3:5c:31:2b:83:95:95:
                    af:5f:16:d3:c1:dc:f7:31:df:39:bb:7d:48:6c:87:
                    73:f3:ed:d6:14:25:8c:e7:55:f6:54:70:c6:e7:61:
                    1d:46:d5:aa:b9:7e:b8:6e:c0:e1:2a:08:25:bf:7d:
                    d0:e1:b5:ad:45:c3:e3:5c:6e:89:f6:86:fe:7c:72:
                    d5:78:37:0c:5c:27:a9:d3:21:02:ce:7c:65:df:e7:
                    da:e1:e4:ee:8f:2a:a7:88:24:d5:ab:d8:a9:30:48:
                    d1:d0:8a:1c:18:9c:9c:b0:98:6a:92:19:d2:b5:13:
                    fa:15:e1:2b:51:13:43:6a:1b:1b:3b:63:5e:c3:f8:
                    58:63:07:4b:16:33:78:eb:df:de:57:11:94:a2:38:
                    a7:fc:16:18:bc:6f:09:17:df:2e:09:53:5b:33:91:
                    0b:ca:33:af:ea:73:86:37:89:fa:45:24:ad:8c:e5:
                    a2:c3:cc:3a:57:45:80:4d:ba:c2:9c:bc:90:a4:55:
                    bd:a6:68:ef:b8:9d:ca:bf:9d:f4:1d:26:d0:64:0e:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DE:D7:3B:1D:E0:BE:0D:A4:82:45:85:E9:5D:96:68:9E:B6:C2:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl

            X509v3 Authority Key Identifier:
                keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b1:e7:74:22:a2:dd:e3:0f:6b:22:1d:36:83:4d:0a:7e:e8:
         d0:da:d3:8d:5e:b0:3f:7a:a5:62:c7:b8:f1:be:76:6f:b1:50:
         07:13:8e:91:03:3e:4f:4a:ce:ca:da:dd:48:35:4f:41:d1:0a:
         d7:67:9c:00:00:64:0c:84:3d:41:2d:5b:54:80:d3:dd:07:bf:
         bf:94:dc:e6:b1:c8:a5:37:5e:e9:db:cf:1e:aa:14:c3:53:b6:
         d3:24:47:3f:af:69:5b:cb:6b:7e:ff:10:e0:90:5d:64:8b:de:
         16:4f:06:b6:02:91:eb:39:fd:ba:86:79:53:cf:c7:5f:26:62:
         25:9c:20:00:bb:76:27:a1:ca:a6:c2:00:8f:63:87:c9:e5:b0:
         a2:45:7e:05:54:15:b5:d1:75:0d:4f:22:60:e2:42:9a:7e:e2:
         2e:d7:8b:5e:50:1d:7c:10:6e:7c:fc:ab:a6:76:ac:be:b7:d9:
         1f:1c:52:9f:33:36:71:ca:1b:94:5f:4c:0f:87:a8:78:ad:2f:
         d5:0b:ee:64:82:d3:58:f4:3e:92:1b:da:d3:65:44:b0:ff:3b:
         88:07:b3:ac:30:38:1f:51:fc:52:8e:63:da:aa:78:43:d3:14:
         bc:47:c1:79:c7:ec:34:e9:80:ab:47:ca:d6:e3:b5:b6:d3:db:
         ac:10:56:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDpHNHWmMwQ42UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3
YTkzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
OGNlMWFiMTItYWYxYy00Yjg3LTk0OWYtMmNkMDE1YzI5NWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfVhPopRi/W3fzfp03jaFXrTqYR8LsZXr1Fi
1JWy4f3NawmGpfPUPdOAXevcgSuczrqp+bNcMSuDlZWvXxbTwdz3Md85u31IbIdz
8+3WFCWM51X2VHDG52EdRtWquX64bsDhKgglv33Q4bWtRcPjXG6J9ob+fHLVeDcM
XCep0yECznxl3+fa4eTujyqniCTVq9ipMEjR0IocGJycsJhqkhnStRP6FeErURND
ahsbO2New/hYYwdLFjN469/eVxGUojin/BYYvG8JF98uCVNbM5ELyjOv6nOGN4n6
RSStjOWiw8w6V0WATbrCnLyQpFW9pmjvuJ3Kv530HSbQZA7BYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLe1zsd4L4NpIJFheldlmietsL+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4
NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvNTUzMDRkODYtMzhiYi0z
MGE2LTljMTktOTczYWNjYzEzOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx
YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4
N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk
ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFmx53Qiot3jD2siHTaDTQp+6NDa041esD96pWLHuPG+dm+xUAcTjpED
Pk9Kzsra3Ug1T0HRCtdnnAAAZAyEPUEtW1SA090Hv7+U3OaxyKU3Xunbzx6qFMNT
ttMkRz+vaVvLa37/EOCQXWSL3hZPBrYCkes5/bqGeVPPx18mYiWcIAC7diehyqbC
AI9jh8nlsKJFfgVUFbXRdQ1PImDiQpp+4i7Xi15QHXwQbnz8q6Z2rL632R8cUp8z
NnHKG5RfTA+HqHitL9UL7mSC01j0PpIb2tNlRLD/O4gHs6wwOB9R/FKOY9qqeEPT
FLxHwXnH7DTpgKtHytbjtbbT26wQVnU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:38 2025 by rpki-client on console.sobornost.net