Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
File:                     72276c2a-12de-3d01-9cca-f0c9bb94109b.roa (raw, json)
Hash identifier:          CopG7Kv4395Mjm4x5fYzPwXPYtSyDO+VrQAYkB1JlLU=
Subject key identifier:   D1:E9:10:D8:2B:A1:C8:70:A4:9B:7F:F4:0F:84:CB:2F:D3:61:81:02
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584953C41B4B994ECF2A223DAD00
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     19137
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:1b:4b:99:4e:cf:2a:22:3d:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=fa89fd77-06c5-4f8f-ad87-68a57fdae16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:44:9e:3d:ee:36:46:35:0a:f2:7a:6b:82:49:
                    05:64:0c:39:e0:98:9c:26:c5:22:79:c9:c2:9f:1a:
                    09:51:02:a5:4c:3c:c3:8c:7d:16:ef:0e:c8:43:9b:
                    30:f5:5a:73:23:75:5e:2f:a4:97:9e:60:10:b1:ae:
                    0b:9d:bf:02:89:70:88:c7:06:c1:97:f3:a8:07:12:
                    44:0c:ce:d4:a3:83:f6:fc:08:c5:3f:9b:81:98:c4:
                    3d:87:62:49:90:c7:ed:9e:7c:87:c2:8a:a6:ff:3f:
                    22:c0:db:77:5e:a9:b4:53:1d:2e:c9:1c:ff:8c:fb:
                    64:fc:c1:70:22:c7:a9:23:79:8e:5a:fc:f7:df:06:
                    9a:79:98:e7:38:df:b7:4d:49:a0:58:da:94:94:71:
                    b6:a0:9a:85:b0:a0:99:8a:ab:17:d2:36:24:bf:86:
                    8f:fa:a6:a7:e9:7c:5c:67:7e:8d:f5:c2:45:7b:4c:
                    a2:1c:9d:0c:31:8f:b1:14:69:f1:f6:91:44:7c:d4:
                    6a:47:0a:cc:ed:fc:66:6c:6c:9a:f0:be:72:fe:2d:
                    8d:70:79:f7:dc:40:c9:45:70:2c:2e:ee:d1:6e:09:
                    1c:75:b8:fc:74:47:72:7d:5e:92:08:73:de:08:98:
                    26:6a:7e:1c:3d:9e:5e:74:4d:f2:6d:bd:2c:c3:65:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E9:10:D8:2B:A1:C8:70:A4:9B:7F:F4:0F:84:CB:2F:D3:61:81:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:18:5d:57:1b:d4:87:7e:b4:35:4c:20:2e:1e:0a:ae:94:f3:
         7f:2d:0e:79:5a:f2:ab:1b:28:70:60:97:e4:b5:f2:27:75:cf:
         2d:50:ab:e8:b3:1d:ea:fe:25:ce:47:4d:77:be:49:86:a7:0c:
         e1:a3:29:54:dd:5b:44:10:c4:6c:e0:a7:b3:4c:c1:ba:81:64:
         9d:8d:20:dd:4c:ee:7d:89:8d:a2:07:eb:e6:ab:85:8e:88:6e:
         78:a3:4b:70:28:72:ed:0c:51:05:35:dd:58:9b:da:79:24:ae:
         c7:df:a3:f7:25:7f:8b:a9:39:5c:77:48:fd:ee:52:af:5d:92:
         a1:80:5c:fa:4d:73:61:e4:55:4c:75:75:5f:aa:a5:33:15:5f:
         55:bb:71:c9:b7:2b:a0:71:5a:13:7b:3d:1e:5e:c8:7f:69:8d:
         ff:77:c4:8a:59:e4:0d:73:c7:db:86:ae:e7:0e:34:35:c5:5c:
         d9:60:ee:cf:1e:93:e2:0d:35:ed:31:5e:31:6e:17:1c:d3:a3:
         96:86:fc:75:43:64:c2:15:00:35:e9:75:31:e2:29:c3:9a:65:
         ca:0d:ff:cf:b1:d5:a9:67:76:d8:2a:71:84:3b:3f:27:79:8f:
         7c:37:1c:d5:9b:09:39:68:c2:ac:68:d7:55:62:22:42:e1:f1:
         72:80:35:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBtLmU7PKiI9rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjEzZTUzNjUtNWJlMy00MmY0LWEzZDEtN2Y3NGJiNDRk
ZjEzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmE4OWZkNzctMDZjNS00ZjhmLWFkODctNjhhNTdmZGFlMTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlESePe42RjUK8nprgkkFZAw54JicJsUiecnC
nxoJUQKlTDzDjH0W7w7IQ5sw9VpzI3VeL6SXnmAQsa4Lnb8CiXCIxwbBl/OoBxJE
DM7Uo4P2/AjFP5uBmMQ9h2JJkMftnnyHwoqm/z8iwNt3Xqm0Ux0uyRz/jPtk/MFw
IsepI3mOWvz33waaeZjnON+3TUmgWNqUlHG2oJqFsKCZiqsX0jYkv4aP+qan6Xxc
Z36N9cJFe0yiHJ0MMY+xFGnx9pFEfNRqRwrM7fxmbGya8L5y/i2NcHn33EDJRXAs
Lu7Rbgkcdbj8dEdyfV6SCHPeCJgman4cPZ5edE3ybb0sw2XENQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHpENgrochwpJt/9A+Eyy/TYYECMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yMTNl
NTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0YmI0NGRmMTMvNzIyNzZjMmEtMTJkZS0z
ZDAxLTljY2EtZjBjOWJiOTQxMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjEzZTUzNjUtNWJlMy00MmY0LWEz
ZDEtN2Y3NGJiNDRkZjEzLzIxM2U1MzY1LTViZTMtNDJmNC1hM2QxLTdmNzRiYjQ0
ZGYxMy5jcmwwHwYDVR0jBBgwFoAUesHGDQ+FIB+5tE9s1pRMS9GI/PwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yMTNlNTM2NS01YmUzLTQyZjQtYTNkMS03Zjc0
YmI0NGRmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EaIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKUYXVcb1Id+tDVMIC4eCq6U838tDnla8qsbKHBgl+S18id1zy1Qq+iz
Her+Jc5HTXe+SYanDOGjKVTdW0QQxGzgp7NMwbqBZJ2NIN1M7n2JjaIH6+arhY6I
bnijS3Aocu0MUQU13Vib2nkkrsffo/clf4upOVx3SP3uUq9dkqGAXPpNc2HkVUx1
dV+qpTMVX1W7ccm3K6BxWhN7PR5eyH9pjf93xIpZ5A1zx9uGrucONDXFXNlg7s8e
k+INNe0xXjFuFxzTo5aG/HVDZMIVADXpdTHiKcOaZcoN/8+x1alndtgqcYQ7Pyd5
j3w3HNWbCTlowqxo11ViIkLh8XKANZA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:15 2025 by rpki-client on console.sobornost.net