Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
File:                     f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa (raw, json)
Hash identifier:          D6PrIo4+/UNX0KyP4VLfWIByGsuu/zkxXTFLbLjgbS0=
Subject key identifier:   ED:1B:73:04:6B:83:5A:3F:26:94:5E:3B:EE:22:E5:68:5B:AA:4F:D1
Certificate issuer:       /CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
Certificate serial:       010D0C9F432858494733EB2A7BFFB3A2C312E300
Authority key identifier: F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     3695
IP address blocks:        70.36.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:eb:2a:7b:ff:b3:a2:c3:12:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69cd8bc4-5e3c-4cc8-941e-084043efb520
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=36b4ff22-a732-4938-a5b2-e6ce7aade0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:1c:92:fa:c8:44:60:2e:88:43:9e:30:93:
                    1f:b2:d5:84:60:b2:53:2a:a0:52:7a:4c:80:0a:9a:
                    9d:5f:a1:b5:7b:87:91:57:d0:21:f5:fc:c4:46:c5:
                    99:a9:d1:78:40:fb:aa:4d:8b:dc:c6:39:d3:73:b7:
                    7e:e4:b3:c0:f8:b3:1d:5d:fc:8e:eb:44:64:85:f9:
                    e2:6a:b1:14:ed:78:26:d7:dc:df:06:8a:e1:6d:74:
                    cb:e2:b6:41:da:88:0b:e2:a8:85:43:2c:42:e3:77:
                    78:96:9a:d2:85:14:da:47:6f:a8:7c:30:90:c2:8d:
                    a2:0f:58:33:48:da:96:9e:ce:af:a9:58:db:3e:d8:
                    f8:5b:4f:10:73:ed:44:c6:14:19:74:1a:87:90:b7:
                    aa:bc:8e:c7:0a:b8:94:72:b0:90:41:18:fe:58:14:
                    e7:15:04:80:6f:a1:fb:54:f3:40:80:16:b5:67:3e:
                    0a:c3:6b:31:ee:0c:8f:74:75:62:25:80:1f:6d:eb:
                    ae:98:8e:49:33:2c:06:62:54:66:4f:93:db:6f:6a:
                    ce:8e:cd:9d:13:23:4d:51:0e:bc:31:23:a9:a9:e0:
                    e4:6e:8c:f8:67:2c:da:b9:34:57:96:d7:bb:14:71:
                    cb:b1:f5:29:cd:56:f5:81:ce:c8:0b:e1:a3:c4:84:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1B:73:04:6B:83:5A:3F:26:94:5E:3B:EE:22:E5:68:5B:AA:4F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/f22cf306-9bb2-3f0d-b047-4295a7a4f380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520/69cd8bc4-5e3c-4cc8-941e-084043efb520.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EE:72:56:6E:07:AC:17:2B:24:15:91:22:87:34:98:30:6F:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/69cd8bc4-5e3c-4cc8-941e-084043efb520.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.36.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:33:83:82:18:be:20:b0:39:12:77:e3:07:00:e1:32:d1:
         23:c7:b4:94:7e:af:fc:8c:35:92:34:ec:62:28:ee:7f:6b:3e:
         3c:40:97:c5:e9:0c:75:f1:ae:f2:84:5c:43:8e:49:ca:0e:0b:
         11:85:5c:41:1c:a3:b9:e6:7a:45:6d:db:29:3c:5e:14:b1:a1:
         4f:7e:b3:6f:5a:64:83:2f:e0:50:09:ba:1d:7d:54:4e:fa:1b:
         84:f3:24:11:41:2f:2a:b2:39:a9:28:69:20:0b:4c:2a:a1:e9:
         fe:11:0e:51:ca:c2:4b:cf:a7:84:c0:12:3b:4b:0d:27:14:8a:
         c8:0d:ea:a8:64:a2:20:24:0c:88:ef:84:9d:1e:ca:b8:53:92:
         d5:17:3b:a4:7c:19:9a:6a:6f:ac:89:f7:d9:14:6a:b5:eb:8c:
         2c:73:e4:7f:f7:f5:83:90:60:2a:a3:d5:bd:3a:4d:f0:b5:62:
         57:d4:0c:a8:0b:e0:c1:38:a3:69:e7:d0:59:88:03:96:0e:f6:
         47:8a:db:85:73:0f:8a:0d:65:bd:3d:4a:18:21:d9:4e:6d:95:
         f3:9b:7e:b4:e6:e1:ed:4c:2e:2e:2b:d6:65:b2:f5:53:63:ff:
         94:89:2d:ff:b1:15:07:8d:ea:cd:28:7b:4a:cc:ed:4b:06:6b:
         3c:3c:be:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+sqe/+zosMS4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjljZDhiYzQtNWUzYy00Y2M4LTk0MWUtMDg0MDQzZWZi
NTIwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MzZiNGZmMjItYTczMi00OTM4LWE1YjItZTZjZTdhYWRlMGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NQckvrIRGAuiEOeMJMfstWEYLJTKqBSekyA
CpqdX6G1e4eRV9Ah9fzERsWZqdF4QPuqTYvcxjnTc7d+5LPA+LMdXfyO60Rkhfni
arEU7Xgm19zfBorhbXTL4rZB2ogL4qiFQyxC43d4lprShRTaR2+ofDCQwo2iD1gz
SNqWns6vqVjbPtj4W08Qc+1ExhQZdBqHkLeqvI7HCriUcrCQQRj+WBTnFQSAb6H7
VPNAgBa1Zz4Kw2sx7gyPdHViJYAfbeuumI5JMywGYlRmT5Pbb2rOjs2dEyNNUQ68
MSOpqeDkboz4ZyzauTRXlte7FHHLsfUpzVb1gc7IC+GjxISYpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO0bcwRrg1o/JpReO+4i5Whbqk/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82OWNk
OGJjNC01ZTNjLTRjYzgtOTQxZS0wODQwNDNlZmI1MjAvZjIyY2YzMDYtOWJiMi0z
ZjBkLWIwNDctNDI5NWE3YTRmMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjljZDhiYzQtNWUzYy00Y2M4LTk0
MWUtMDg0MDQzZWZiNTIwLzY5Y2Q4YmM0LTVlM2MtNGNjOC05NDFlLTA4NDA0M2Vm
YjUyMC5jcmwwHwYDVR0jBBgwFoAU8u5yVm4HrBcrJBWRIoc0mDBvYIkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82OWNkOGJjNC01ZTNjLTRjYzgtOTQxZS0wODQw
NDNlZmI1MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLLM4OCGL4gsDkSd+MHAOEy0SPHtJR+r/yMNZI07GIo7n9rPjxAl8Xp
DHXxrvKEXEOOScoOCxGFXEEco7nmekVt2yk8XhSxoU9+s29aZIMv4FAJuh19VE76
G4TzJBFBLyqyOakoaSALTCqh6f4RDlHKwkvPp4TAEjtLDScUisgN6qhkoiAkDIjv
hJ0eyrhTktUXO6R8GZpqb6yJ99kUarXrjCxz5H/39YOQYCqj1b06TfC1YlfUDKgL
4ME4o2nn0FmIA5YO9keK24VzD4oNZb09Shgh2U5tlfObfrTm4e1MLi4r1mWy9VNj
/5SJLf+xFQeN6s0oe0rM7UsGazw8vqI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net