Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa
File:                     f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa (raw, json)
Hash identifier:          /sjrXK1ZmGdyVeueGWUAq8u4sl5kSmGiI3vuFZfZI3Y=
Subject key identifier:   17:4D:CA:1D:B8:6E:4C:13:AD:1C:AF:E7:41:E0:9D:B6:7E:A9:69:3F
Certificate issuer:       /CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
Certificate serial:       010D0C9F4328584971143304B8EEFD21F59C3B00
Authority key identifier: E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     395978
IP address blocks:        173.252.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:33:04:b8:ee:fd:21:f5:9c:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b0877f-f7ac-4c13-9a10-b02358ee00bc
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=58086867-1ee0-4013-b6a3-9fc909f58a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4b:ce:26:58:6d:7d:6d:09:79:c9:87:1e:e9:
                    60:03:91:72:52:1b:1f:22:56:b0:03:b4:3f:1b:7c:
                    cd:d3:b8:a0:6e:61:16:b2:60:1c:3b:13:43:36:ff:
                    30:d1:89:11:7a:df:68:56:cc:35:58:cf:08:16:ea:
                    ae:c1:c0:14:80:89:29:d1:33:6c:72:ba:22:8a:a1:
                    ab:e7:9f:02:03:20:f9:ff:af:db:37:c7:74:d4:20:
                    91:a7:49:30:8f:9b:23:2a:dd:c5:06:8d:37:69:e7:
                    b0:d4:9d:12:f1:96:d6:9d:b1:52:ba:b8:1e:05:7c:
                    23:59:37:d2:aa:11:a8:2a:0f:07:73:25:92:9f:29:
                    5a:46:85:fb:55:43:ed:23:8f:ea:b7:fe:a0:13:f8:
                    b7:ca:d0:20:c4:0c:2f:aa:db:c7:3a:b6:c1:ef:13:
                    ba:25:50:03:d3:29:19:31:3f:f6:8c:80:03:b2:4c:
                    db:dc:bd:db:33:00:38:68:ce:62:74:30:c5:99:92:
                    a6:b3:31:24:85:ee:32:f0:a5:1b:28:8b:a5:f4:98:
                    f3:81:96:19:2b:54:64:d1:a5:ee:0a:3e:8c:9d:25:
                    ed:d3:67:62:9d:0f:eb:7a:11:80:63:8a:06:d7:5f:
                    77:80:cb:af:b5:b3:58:83:49:7e:a7:9b:5a:a0:aa:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:CA:1D:B8:6E:4C:13:AD:1C:AF:E7:41:E0:9D:B6:7E:A9:69:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/f30fb51d-8202-3ee8-bcd4-70554e0800ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc/89b0877f-f7ac-4c13-9a10-b02358ee00bc.crl

            X509v3 Authority Key Identifier:
                keyid:E2:AA:97:31:DC:C3:BF:B9:C5:A9:C4:57:60:05:6D:4E:BC:1B:BC:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/89b0877f-f7ac-4c13-9a10-b02358ee00bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.252.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:f7:60:b9:dc:c3:df:fc:5b:34:6d:12:4f:ac:ed:36:8a:
         65:47:f4:32:e6:f9:4e:2d:48:e3:b3:be:b7:5c:89:7f:e1:08:
         69:ea:56:f7:d9:38:e8:1b:23:90:45:9c:e9:9c:5c:50:a9:c2:
         61:42:97:b7:a1:e7:e1:11:fe:59:42:d7:61:9c:cb:6c:61:f7:
         e7:a7:d4:54:53:9a:7b:f9:2f:a8:07:61:34:3f:5e:d6:d0:42:
         01:ac:8f:3a:cc:10:9c:72:0d:5b:41:82:25:a9:76:a3:87:a7:
         7f:37:02:d8:5e:08:dc:c9:43:80:dc:aa:ab:64:1f:ad:e7:55:
         2b:7d:2d:28:43:94:66:48:00:08:ae:4a:17:1b:93:99:21:46:
         70:9f:59:12:ce:7a:d6:d8:3c:ce:00:04:c4:0d:8f:1b:64:bf:
         ad:9a:52:9d:51:2f:9f:55:6a:71:7e:8e:ff:d7:fa:e9:91:52:
         88:f9:b1:db:f0:f6:5f:92:14:e7:52:b0:a8:0f:5d:3a:0d:e1:
         11:89:b4:e3:92:3b:66:73:0f:e4:6e:38:36:7c:6a:fd:c0:2a:
         0b:eb:97:27:a9:e7:00:8c:6d:a6:c7:b7:b9:8f:9d:62:49:b0:
         cc:11:00:ca:41:7e:b9:fd:63:46:c7:61:f7:2d:e6:01:3e:da:
         d2:4e:3a:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDMEuO79IfWcOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODliMDg3N2YtZjdhYy00YzEzLTlhMTAtYjAyMzU4ZWUw
MGJjMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
NTgwODY4NjctMWVlMC00MDEzLWI2YTMtOWZjOTA5ZjU4YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UvOJlhtfW0JecmHHulgA5FyUhsfIlawA7Q/
G3zN07igbmEWsmAcOxNDNv8w0YkRet9oVsw1WM8IFuquwcAUgIkp0TNscroiiqGr
558CAyD5/6/bN8d01CCRp0kwj5sjKt3FBo03aeew1J0S8ZbWnbFSurgeBXwjWTfS
qhGoKg8HcyWSnylaRoX7VUPtI4/qt/6gE/i3ytAgxAwvqtvHOrbB7xO6JVAD0ykZ
MT/2jIADskzb3L3bMwA4aM5idDDFmZKmszEkhe4y8KUbKIul9JjzgZYZK1Rk0aXu
Cj6MnSXt02dinQ/rehGAY4oG1193gMuvtbNYg0l+p5taoKrB4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdNyh24bkwTrRyv50HgnbZ+qWk/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84OWIw
ODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIzNThlZTAwYmMvZjMwZmI1MWQtODIwMi0z
ZWU4LWJjZDQtNzA1NTRlMDgwMGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODliMDg3N2YtZjdhYy00YzEzLTlh
MTAtYjAyMzU4ZWUwMGJjLzg5YjA4NzdmLWY3YWMtNGMxMy05YTEwLWIwMjM1OGVl
MDBiYy5jcmwwHwYDVR0jBBgwFoAU4qqXMdzDv7nFqcRXYAVtTrwbvKswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84OWIwODc3Zi1mN2FjLTRjMTMtOWExMC1iMDIz
NThlZTAwYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfyPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0e92C53MPf/Fs0bRJPrO02imVH9DLm+U4tSOOzvrdciX/hCGnqVvfZ
OOgbI5BFnOmcXFCpwmFCl7eh5+ER/llC12Gcy2xh9+en1FRTmnv5L6gHYTQ/XtbQ
QgGsjzrMEJxyDVtBgiWpdqOHp383AtheCNzJQ4DcqqtkH63nVSt9LShDlGZIAAiu
Shcbk5khRnCfWRLOetbYPM4ABMQNjxtkv62aUp1RL59VanF+jv/X+umRUoj5sdvw
9l+SFOdSsKgPXToN4RGJtOOSO2ZzD+RuODZ8av3AKgvrlyep5wCMbabHt7mPnWJJ
sMwRAMpBfrn9Y0bHYfct5gE+2tJOOmY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net