Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa
File:                     8b72e6b6-9586-338a-a41b-56eac502661c.roa (raw, json)
Hash identifier:          KAdavp8udh9zFF7QgbOFdvWP0lhfTbvMQWhK/P1h/Xo=
Subject key identifier:   86:58:02:2E:DC:1D:3D:75:09:F2:FC:FA:CD:FC:A8:7E:2E:5A:20:88
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858497F09A482FE1B55914D431F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     17025
IP address blocks:        2001:438:8022::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a4:82:fe:1b:55:91:4d:43:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=2ff81571-fae2-4496-8337-01e6311797e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:ce:9f:33:64:d5:13:f6:b7:ae:23:48:2d:
                    70:6f:0f:49:d4:60:9a:fe:20:98:82:00:af:e1:31:
                    19:88:e0:4f:26:dc:3a:9c:52:d3:9f:f1:15:c8:11:
                    38:bd:62:8f:b0:7b:91:dc:fa:01:3d:d7:e2:d3:5c:
                    3d:62:db:09:b5:d5:18:e5:15:c0:b5:d8:32:4d:30:
                    a4:f8:af:43:3a:e9:77:82:75:95:b7:3e:bf:40:38:
                    17:0f:ef:f3:86:02:5d:3f:12:0c:04:77:0e:ce:69:
                    19:d9:3a:99:de:bb:d2:50:c7:3f:fa:6f:61:8a:2e:
                    bb:c3:18:8f:32:55:da:36:ad:97:47:24:b8:9a:8f:
                    7c:65:d2:02:bd:06:50:bf:1d:e0:c2:81:d6:17:a5:
                    ff:8e:c4:18:d5:11:16:2f:64:70:84:fc:fc:53:4d:
                    45:b5:43:8d:b6:0d:6d:e5:4c:58:2b:b2:21:d1:fb:
                    d1:e3:eb:31:08:67:1c:82:9d:11:30:8b:c1:87:d2:
                    87:19:c7:86:fd:12:d9:13:34:5e:05:57:fa:bd:ea:
                    16:b6:d2:c5:d2:62:6a:71:be:e1:18:bd:e3:14:68:
                    22:c2:c1:b7:25:0a:7b:b0:b1:6c:4b:d8:03:8e:fa:
                    b0:42:fd:43:a3:42:b3:69:94:1b:69:f7:4e:21:9f:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:58:02:2E:DC:1D:3D:75:09:F2:FC:FA:CD:FC:A8:7E:2E:5A:20:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8b72e6b6-9586-338a-a41b-56eac502661c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:8022::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:ca:c4:62:cf:67:26:a9:1b:59:54:6b:82:f6:5e:a2:81:
         04:ce:90:2b:a5:c7:96:31:71:62:98:f4:d6:ad:4f:6b:3f:4e:
         c2:0b:49:78:4e:1b:9a:7a:6b:eb:18:69:a5:a7:46:df:35:cb:
         8c:2a:1e:68:3a:18:82:75:e7:49:34:bd:27:a3:3e:2e:c3:6e:
         3a:43:96:c9:dc:02:1d:89:8a:27:76:33:f4:98:fb:e5:69:2d:
         12:22:cc:58:91:f4:fc:88:13:03:8f:f0:37:5f:62:fc:5a:c0:
         ce:cf:7c:e4:7d:5f:fb:71:6a:dd:fc:30:76:b8:22:84:89:d4:
         cd:66:29:29:e8:5c:b2:48:90:40:da:4e:fb:06:b7:ed:6a:1c:
         9c:af:7b:06:36:5b:e7:ec:45:82:7c:59:1a:5f:56:16:5f:8d:
         8f:89:13:25:40:77:58:54:8c:cf:0b:e0:9d:1c:d3:82:d3:93:
         fc:b6:ea:64:47:5f:df:17:e9:05:e9:ba:13:af:9e:79:db:32:
         b5:77:12:d5:8a:67:1a:a6:e0:a2:83:56:48:43:30:04:51:60:
         d5:4d:c4:18:5c:31:6f:3d:54:af:a2:45:ba:4c:99:dd:30:d8:
         ac:8b:15:a4:10:b1:74:90:55:5a:54:76:e4:21:c3:15:bb:98:
         cd:35:f7:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl/CaSC/htVkU1DH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk
MmZmODE1NzEtZmFlMi00NDk2LTgzMzctMDFlNjMxMTc5N2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS3OnzNk1RP2t64jSC1wbw9J1GCa/iCYggCv
4TEZiOBPJtw6nFLTn/EVyBE4vWKPsHuR3PoBPdfi01w9YtsJtdUY5RXAtdgyTTCk
+K9DOul3gnWVtz6/QDgXD+/zhgJdPxIMBHcOzmkZ2TqZ3rvSUMc/+m9hii67wxiP
MlXaNq2XRyS4mo98ZdICvQZQvx3gwoHWF6X/jsQY1REWL2RwhPz8U01FtUONtg1t
5UxYK7Ih0fvR4+sxCGccgp0RMIvBh9KHGceG/RLZEzReBVf6veoWttLF0mJqcb7h
GL3jFGgiwsG3JQp7sLFsS9gDjvqwQv1Do0KzaZQbafdOIZ9HzwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIZYAi7cHT11CfL8+s38qH4uWiCIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvOGI3MmU2YjYtOTU4Ni0z
MzhhLWE0MWItNTZlYWM1MDI2NjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEOIAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG+qysRiz2cmqRtZVGuC9l6igQTOkCulx5YxcWKY9NatT2s/TsIL
SXhOG5p6a+sYaaWnRt81y4wqHmg6GIJ150k0vSejPi7DbjpDlsncAh2Jiid2M/SY
++VpLRIizFiR9PyIEwOP8DdfYvxawM7PfOR9X/txat38MHa4IoSJ1M1mKSnoXLJI
kEDaTvsGt+1qHJyvewY2W+fsRYJ8WRpfVhZfjY+JEyVAd1hUjM8L4J0c04LTk/y2
6mRHX98X6QXpuhOvnnnbMrV3EtWKZxqm4KKDVkhDMARRYNVNxBhcMW89VK+iRbpM
md0w2KyLFaQQsXSQVVpUduQhwxW7mM019xM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:52 2025 by rpki-client on console.sobornost.net