Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa
File:                     eb249647-6b83-39b7-bc0a-6db40d6c7428.roa (raw, json)
Hash identifier:          tA7yzr0VQ6e3v4FLj+EKSNheJBxSF1A/WDBgJwR4+yA=
Subject key identifier:   93:B4:11:54:C4:DC:7F:41:07:7A:8D:E0:99:44:33:E6:B5:D8:26:06
Certificate issuer:       /CN=7fb8625e-5dd1-40c0-bda6-2628ddc6717f
Certificate serial:       010D0C9F432858492E13C515F88449E1E91300C0
Authority key identifier: 31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     393988
IP address blocks:        199.244.245.0/24 maxlen: 24
                          199.244.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c5:15:f8:84:49:e1:e9:13:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fb8625e-5dd1-40c0-bda6-2628ddc6717f
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=9031a9c4-4737-4e55-912c-bb868bff630a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:72:01:6c:60:36:07:06:8b:8d:47:40:22:da:
                    6d:6f:59:ce:4e:1d:56:9e:e1:b9:ca:5e:9c:73:32:
                    f7:a2:f2:b5:ca:08:01:19:8a:4e:46:1f:32:8e:07:
                    7a:04:60:3b:4b:0b:d5:4c:25:8a:eb:7e:c4:7a:f0:
                    d6:dc:56:ac:b5:7c:af:d4:5a:c8:96:7f:2b:25:7c:
                    ba:df:13:53:6a:6d:9d:2a:74:77:b3:37:9b:23:95:
                    83:f7:b4:58:e2:1a:02:af:c4:f8:44:30:98:c2:a9:
                    af:93:07:dd:ca:79:c2:c0:71:ac:bf:d1:cb:ea:98:
                    6c:f5:8c:be:74:21:90:01:28:9e:4d:94:9b:88:02:
                    2b:4e:e0:89:d7:91:4a:17:43:6c:a5:b0:8a:c1:24:
                    6a:da:00:ce:41:37:73:40:3a:6d:f5:bc:67:7a:a3:
                    e0:21:5b:95:55:e2:31:ee:3d:c3:21:fb:7b:15:19:
                    9e:73:f8:7d:58:3b:e3:e3:33:0b:41:91:35:ca:7b:
                    a5:7a:3f:8f:db:d2:41:60:c2:03:aa:d8:29:9e:97:
                    ab:7c:b7:9e:bb:e3:33:70:f4:33:a6:5e:34:c6:40:
                    e8:98:90:43:95:64:71:a2:7a:67:9e:c7:36:46:70:
                    03:cb:f2:9c:fa:07:8c:d8:37:38:ae:5d:2a:1d:a2:
                    91:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B4:11:54:C4:DC:7F:41:07:7A:8D:E0:99:44:33:E6:B5:D8:26:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/eb249647-6b83-39b7-bc0a-6db40d6c7428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.crl

            X509v3 Authority Key Identifier:
                keyid:31:1F:D6:BF:74:5F:38:AA:19:D6:20:07:2D:69:85:50:49:A7:17:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7fb8625e-5dd1-40c0-bda6-2628ddc6717f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.244.245.0-199.244.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:60:0e:88:6c:a9:34:d6:82:1f:1f:2d:f0:78:22:fb:46:
         ba:83:ba:ae:a1:e5:1f:63:01:18:48:f9:bf:fd:be:6a:65:90:
         f7:37:33:d9:66:6d:b7:9e:c3:d9:f6:db:d4:46:e4:ef:4d:73:
         19:f1:67:90:d3:ae:d2:bd:e2:9e:0a:1a:3a:dc:08:57:5a:14:
         8b:03:9e:90:24:a2:38:89:1b:c6:13:d4:4b:9f:14:bc:a3:ae:
         8b:4e:04:45:ee:5e:16:cf:ae:08:0e:d2:94:86:e4:20:5f:83:
         d5:a8:cd:d1:97:d2:99:10:d3:49:d3:f0:bc:b8:d0:6a:8e:c7:
         cf:82:90:5b:bb:b4:b2:35:6b:f9:45:7e:e3:6b:11:21:d5:04:
         cf:aa:17:87:dd:ad:6a:26:ba:74:a8:31:66:c3:00:75:a1:4e:
         2c:da:29:c4:95:57:16:13:7b:62:d5:71:49:07:d9:77:a1:d5:
         e7:2a:b8:2e:63:b8:52:53:b8:0c:ee:c6:9e:bb:ab:83:03:4b:
         1e:2c:4d:db:b5:01:90:28:4d:54:f4:f1:ef:03:08:0f:e2:52:
         25:60:3d:f3:b9:a1:8a:42:17:51:b6:e9:78:43:75:22:37:bb:
         21:b9:e9:68:f5:04:97:ca:02:db:60:64:40:cd:a6:f8:86:6c:
         c7:70:b8:e3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkuE8UV+IRJ4ekTAMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZiODYyNWUtNWRkMS00MGMwLWJkYTYtMjYyOGRkYzY3
MTdmMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
OTAzMWE5YzQtNDczNy00ZTU1LTkxMmMtYmI4NjhiZmY2MzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHIBbGA2BwaLjUdAItptb1nOTh1WnuG5yl6c
czL3ovK1yggBGYpORh8yjgd6BGA7SwvVTCWK637EevDW3FastXyv1FrIln8rJXy6
3xNTam2dKnR3szebI5WD97RY4hoCr8T4RDCYwqmvkwfdynnCwHGsv9HL6phs9Yy+
dCGQASieTZSbiAIrTuCJ15FKF0NspbCKwSRq2gDOQTdzQDpt9bxneqPgIVuVVeIx
7j3DIft7FRmec/h9WDvj4zMLQZE1ynulej+P29JBYMIDqtgpnperfLeeu+MzcPQz
pl40xkDomJBDlWRxonpnnsc2RnADy/Kc+geM2Dc4rl0qHaKRzwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJO0EVTE3H9BB3qN4JlEM+a12CYGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZmI4
NjI1ZS01ZGQxLTQwYzAtYmRhNi0yNjI4ZGRjNjcxN2YvZWIyNDk2NDctNmI4My0z
OWI3LWJjMGEtNmRiNDBkNmM3NDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2ZiODYyNWUtNWRkMS00MGMwLWJk
YTYtMjYyOGRkYzY3MTdmLzdmYjg2MjVlLTVkZDEtNDBjMC1iZGE2LTI2MjhkZGM2
NzE3Zi5jcmwwHwYDVR0jBBgwFoAUMR/Wv3RfOKoZ1iAHLWmFUEmnF9wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZmI4NjI1ZS01ZGQxLTQwYzAtYmRhNi0yNjI4
ZGRjNjcxN2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADH9PUD
BADH9PYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAXHBgDohsqTTWgh8fLfB4IvtGuoO6rqHlH2MBGEj5v/2+
amWQ9zcz2WZtt57D2fbb1Ebk701zGfFnkNOu0r3ingoaOtwIV1oUiwOekCSiOIkb
xhPUS58UvKOui04ERe5eFs+uCA7SlIbkIF+D1ajN0ZfSmRDTSdPwvLjQao7Hz4KQ
W7u0sjVr+UV+42sRIdUEz6oXh92taia6dKgxZsMAdaFOLNopxJVXFhN7YtVxSQfZ
d6HV5yq4LmO4UlO4DO7GnrurgwNLHixN27UBkChNVPTx7wMID+JSJWA987mhikIX
UbbpeEN1Ije7IbnpaPUEl8oC22BkQM2m+IZsx3C44w==
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net