Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa
File:                     a2826c5c-71cd-305b-9a91-6e0436a57441.roa (raw, json)
Hash identifier:          eFHLRLhzLOsPsSfbMaQuNkcdpm6SFVLvgU8+33cLzkY=
Subject key identifier:   57:6F:96:99:25:29:0E:29:42:3F:CC:0D:1A:89:FC:A6:3F:86:4D:B0
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858494733EB7BCD83E02E60E09900
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3695
IP address blocks:        70.36.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:eb:7b:cd:83:e0:2e:60:e0:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=260eb54a-dd76-41aa-be02-3693eaffacdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:ad:b7:7a:aa:a2:6c:ab:03:62:b1:85:07:
                    d9:4f:24:72:ea:e2:f6:54:a0:3d:8d:8d:93:fb:a1:
                    04:4e:4d:1a:74:49:6c:48:24:19:88:2c:a5:e4:c5:
                    11:5c:ba:58:f7:e3:e8:f6:f5:20:19:a1:65:f1:b6:
                    2b:05:ac:53:27:67:c4:1b:9e:ce:c3:cb:1e:0e:12:
                    88:4b:78:95:b0:0a:d4:3f:df:15:24:c8:fd:f7:a4:
                    f4:8b:84:0b:a7:cc:6c:3b:de:1b:6f:91:4d:25:48:
                    b2:56:a0:00:41:05:52:1f:a9:2a:71:a5:82:5a:24:
                    6b:00:6d:67:93:5f:43:8c:0e:f6:f5:8a:92:6c:c8:
                    07:1a:9c:9e:94:98:ae:d8:c1:f9:fa:c9:2a:78:70:
                    c8:c7:f5:ed:30:04:1b:ca:e8:c3:2c:92:40:2e:52:
                    e3:e5:bb:63:1a:cb:44:46:7f:16:d5:97:77:fb:f5:
                    36:8d:cc:aa:0d:dd:32:22:25:19:94:86:70:00:4b:
                    38:3b:bb:40:0a:6a:b4:d5:d4:81:4f:8e:22:5a:e6:
                    bf:cb:ec:53:16:0d:b2:71:89:01:b1:52:f5:e2:59:
                    34:21:94:52:c4:bf:82:69:14:8d:ff:94:9b:83:c4:
                    98:5c:23:78:06:7f:fc:14:e8:54:d2:66:f1:b0:92:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6F:96:99:25:29:0E:29:42:3F:CC:0D:1A:89:FC:A6:3F:86:4D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/a2826c5c-71cd-305b-9a91-6e0436a57441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:99:c0:7b:02:df:62:f0:7c:f3:5f:fc:1d:04:0b:59:6c:02:
         d1:3e:52:0b:16:03:bb:f4:02:88:79:b2:79:33:b1:bd:60:11:
         58:48:8e:a6:e3:c9:76:cb:61:77:41:56:b6:60:b8:d2:3f:36:
         fd:f3:86:64:17:71:e5:7f:39:3a:89:e4:e0:f5:ae:4b:e7:ae:
         3c:c8:c0:47:f9:17:10:47:3d:e0:fc:5a:2c:59:f7:3c:42:b4:
         a9:0f:d2:53:38:ef:23:61:ac:43:d1:46:b5:02:f2:3f:5f:e5:
         98:e8:11:42:0f:2d:fd:bb:df:2e:5b:8e:35:ad:24:b9:d2:c8:
         b2:06:08:6e:5e:75:f9:5a:5f:2e:d9:91:ec:7e:2a:4e:ba:f2:
         2c:23:d9:62:0c:fd:4f:47:73:78:1d:54:86:a3:2f:9f:ab:44:
         39:b1:dd:7c:43:87:2c:2a:80:64:e5:0c:46:6b:b1:2a:60:07:
         08:ba:81:22:74:16:82:9f:70:55:32:37:09:8e:b4:69:81:59:
         0d:f2:23:c4:6b:c3:de:5a:e7:9d:a6:b6:89:a2:43:4a:27:11:
         40:92:65:22:9e:59:50:44:0a:47:18:a9:37:f1:3a:10:76:93:
         83:d7:cf:30:06:10:b4:99:43:fb:72:1b:f3:57:a8:47:b2:ff:
         91:f1:f3:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+t7zYPgLmDgmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MjYwZWI1NGEtZGQ3Ni00MWFhLWJlMDItMzY5M2VhZmZhY2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjWtt3qqomyrA2KxhQfZTyRy6uL2VKA9jY2T
+6EETk0adElsSCQZiCyl5MURXLpY9+Po9vUgGaFl8bYrBaxTJ2fEG57Ow8seDhKI
S3iVsArUP98VJMj996T0i4QLp8xsO94bb5FNJUiyVqAAQQVSH6kqcaWCWiRrAG1n
k19DjA729YqSbMgHGpyelJiu2MH5+skqeHDIx/XtMAQbyujDLJJALlLj5btjGstE
Rn8W1Zd3+/U2jcyqDd0yIiUZlIZwAEs4O7tACmq01dSBT44iWua/y+xTFg2ycYkB
sVL14lk0IZRSxL+CaRSN/5Sbg8SYXCN4Bn/8FOhU0mbxsJIgLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdvlpklKQ4pQj/MDRqJ/KY/hk2wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvYTI4MjZjNWMtNzFjZC0z
MDViLTlhOTEtNmUwNDM2YTU3NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGeZwHsC32LwfPNf/B0EC1lsAtE+UgsWA7v0Aoh5snkzsb1gEVhIjqbj
yXbLYXdBVrZguNI/Nv3zhmQXceV/OTqJ5OD1rkvnrjzIwEf5FxBHPeD8WixZ9zxC
tKkP0lM47yNhrEPRRrUC8j9f5ZjoEUIPLf273y5bjjWtJLnSyLIGCG5edflaXy7Z
kex+Kk668iwj2WIM/U9Hc3gdVIajL5+rRDmx3XxDhywqgGTlDEZrsSpgBwi6gSJ0
FoKfcFUyNwmOtGmBWQ3yI8Rrw95a552mtomiQ0onEUCSZSKeWVBECkcYqTfxOhB2
k4PXzzAGELSZQ/tyG/NXqEey/5Hx8/w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net