Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa
File:                     e96efe91-68e4-352f-9fcd-f40615a19479.roa (raw, json)
Hash identifier:          jTdEPSmqIlCYlza7Y+sqcdP3/oJ56b4XfCiRyAfcKxA=
Subject key identifier:   43:27:56:DB:EA:22:2B:42:C9:B0:82:A5:9C:09:AD:5A:46:69:1A:74
Certificate issuer:       /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
Certificate serial:       010D0C9F4328584878BAFEB3C1938F8414D64140
Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     400789
IP address blocks:        23.140.152.0/24 maxlen: 24
                          130.51.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:ba:fe:b3:c1:93:8f:84:14:d6:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=b355ad98-d623-4198-9349-7c8fb4daeb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:68:9a:a8:0f:97:23:fc:ea:04:1a:46:a4:
                    c7:59:96:94:4c:14:89:5b:82:a4:2b:19:e8:f2:56:
                    7c:03:9d:fc:5f:24:1e:9c:3d:08:4a:0c:5b:6b:7a:
                    49:44:e9:15:64:df:8b:9f:a4:3b:c4:8c:bd:4c:7f:
                    39:51:73:30:0a:30:9b:1f:69:9b:da:e3:f2:d2:93:
                    4a:70:32:f8:26:6a:6a:6e:26:0d:9f:ce:13:9a:cc:
                    1a:28:8b:74:71:03:29:c3:0f:0f:d9:0d:d9:e8:ed:
                    d7:a2:9d:cb:db:f7:9e:c4:08:35:1f:cd:77:28:c1:
                    9e:95:0c:e6:41:cc:03:06:d6:c7:be:a5:08:f6:08:
                    ba:63:73:5a:6a:36:e4:4c:2d:32:99:f6:59:c1:79:
                    a7:a8:44:9d:7b:35:27:41:bb:f9:ba:c9:bc:ac:cd:
                    06:56:70:c0:94:02:f8:0b:5c:b6:12:b1:a2:c2:6c:
                    cc:a4:d6:9f:a9:ec:7f:76:e5:a3:d5:1a:e1:59:fa:
                    b0:0c:7e:91:7a:4c:4d:36:1e:64:29:b9:06:c8:66:
                    cc:ea:bd:58:e3:30:e6:22:af:0d:2e:f2:29:6e:35:
                    43:99:12:3d:73:e9:3a:af:03:98:ab:ca:71:00:d5:
                    2c:65:89:92:e6:0b:d6:50:97:99:04:ce:8b:41:d5:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:56:DB:EA:22:2B:42:C9:B0:82:A5:9C:09:AD:5A:46:69:1A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/e96efe91-68e4-352f-9fcd-f40615a19479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl

            X509v3 Authority Key Identifier:
                keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.152.0/24
                  130.51.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:47:95:4b:16:c8:37:6e:ac:33:77:cd:89:23:99:38:8e:50:
         5b:c1:11:da:94:53:08:1f:9a:23:a1:4f:36:33:16:57:69:1f:
         8d:94:ed:86:a5:70:2e:e2:c8:e4:dc:bf:09:6c:1f:d0:7d:99:
         9e:94:fb:6a:fb:c6:3f:7e:44:4d:ba:18:f2:ae:c3:1a:93:c3:
         7a:cd:8b:43:d7:5e:97:d2:ab:02:38:81:c3:12:f3:78:93:15:
         e8:dd:69:35:1f:a2:a7:5f:bf:56:42:a2:e9:98:c8:31:28:1d:
         2b:3d:d3:37:19:53:77:50:a5:f4:fe:55:20:87:a7:9f:98:dd:
         96:3e:11:0c:59:3f:b4:48:b7:0c:72:64:15:e5:de:54:5a:0a:
         19:41:37:bb:b0:09:11:42:02:82:7d:64:eb:fd:17:a6:54:a3:
         58:99:a3:22:bd:39:ae:9a:42:18:6f:f0:78:18:65:cd:8b:a6:
         00:45:e2:53:2e:66:46:b9:ac:c4:d4:bf:b7:19:fb:9a:9d:ea:
         86:d1:df:ad:e1:b5:4c:8c:2f:e4:5a:2f:74:4d:f2:7d:bd:0c:
         47:29:df:1d:5e:e8:bc:1d:42:73:ee:d1:47:41:f2:d3:16:67:
         59:6e:e1:b6:31:4c:f2:ea:bd:b7:a6:c2:72:91:7a:65:52:28:
         35:d4:39:fe
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEh4uv6zwZOPhBTWQUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll
Yzk3MB4XDTI1MDEwODAyMDAzOVoXDTI1MDQwODAxMDAzOVowLzEtMCsGA1UEAxMk
YjM1NWFkOTgtZDYyMy00MTk4LTkzNDktN2M4ZmI0ZGFlYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyNomqgPlyP86gQaRqTHWZaUTBSJW4KkKxno
8lZ8A538XyQenD0ISgxba3pJROkVZN+Ln6Q7xIy9TH85UXMwCjCbH2mb2uPy0pNK
cDL4JmpqbiYNn84TmswaKIt0cQMpww8P2Q3Z6O3Xop3L2/eexAg1H813KMGelQzm
QcwDBtbHvqUI9gi6Y3NaajbkTC0ymfZZwXmnqESdezUnQbv5usm8rM0GVnDAlAL4
C1y2ErGiwmzMpNafqex/duWj1RrhWfqwDH6RekxNNh5kKbkGyGbM6r1Y4zDmIq8N
LvIpbjVDmRI9c+k6rwOYq8pxANUsZYmS5gvWUJeZBM6LQdUdkwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEMnVtvqIitCybCCpZwJrVpGaRp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl
MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvZTk2ZWZlOTEtNjhlNC0z
NTJmLTlmY2QtZjQwNjE1YTE5NDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3
NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5
ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi
NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB
gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADdHlUsWyDdurDN3zYkjmTiOUFvBEdqUUwgfmiOhTzYzFldp
H42U7YalcC7iyOTcvwlsH9B9mZ6U+2r7xj9+RE26GPKuwxqTw3rNi0PXXpfSqwI4
gcMS83iTFejdaTUfoqdfv1ZCoumYyDEoHSs90zcZU3dQpfT+VSCHp5+Y3ZY+EQxZ
P7RItwxyZBXl3lRaChlBN7uwCRFCAoJ9ZOv9F6ZUo1iZoyK9Oa6aQhhv8HgYZc2L
pgBF4lMuZka5rMTUv7cZ+5qd6obR363htUyML+RaL3RN8n29DEcp3x1e6LwdQnPu
0UdB8tMWZ1lu4bYxTPLqvbemwnKRemVSKDXUOf4=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:20:35 2025 by rpki-client on console.sobornost.net