Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
File:                     8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa (raw, json)
Hash identifier:          uvgMNojQvzIdqBNY+/sAwGUOaqoiydTw1Skvf3QzUy4=
Subject key identifier:   13:D0:43:7A:98:6E:D8:F4:EB:C7:9E:92:8D:31:08:98:4C:CE:E6:20
Certificate issuer:       /CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
Certificate serial:       010D0C9F432858496B7ED1721A65E5E6CD27FF40
Authority key identifier: 61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     30182
IP address blocks:        45.59.172.0/22 maxlen: 24
                          199.87.88.0/21 maxlen: 24
                          208.69.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d1:72:1a:65:e5:e6:cd:27:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b044ed2-f4dc-459c-862c-cdb186e69eb1
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=fa74fa0c-6097-406b-b796-33cdc1c402e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:ed:67:be:75:b8:47:5e:32:64:25:fd:d3:
                    16:1f:58:89:92:2d:6c:ab:2d:c2:cc:b3:88:ef:a3:
                    13:81:71:33:66:6c:60:d1:f5:25:6c:6e:b5:20:1b:
                    66:56:8f:65:7d:c2:39:d2:8e:08:4f:b3:cb:92:69:
                    50:ec:40:5c:c5:a3:56:df:5b:55:d3:bb:7d:8d:51:
                    ad:a8:20:24:e1:6b:d7:fc:bb:14:67:cf:f8:af:c4:
                    63:9d:87:e3:cd:01:ff:2b:3b:aa:bd:78:9d:65:84:
                    b6:f5:7d:47:43:6c:75:bf:ee:d2:91:50:d1:d7:26:
                    25:b5:79:80:22:7f:2d:7f:1c:f5:1c:06:a4:6b:8e:
                    3e:24:c8:5a:9c:fd:6b:76:b3:0b:78:01:27:41:3a:
                    c7:9d:b6:6b:54:46:83:da:d2:b9:59:14:e7:fe:f7:
                    ba:ec:ac:80:b6:d4:f0:15:cb:25:2c:3d:0c:03:cd:
                    6c:28:12:ed:04:a9:b8:e9:b4:79:87:ab:fa:14:20:
                    58:2f:98:2c:07:8e:3a:7c:03:20:52:ee:34:70:59:
                    7f:8f:d8:4d:82:fd:bd:54:e6:0a:95:48:72:72:c4:
                    16:49:63:9f:a4:ab:c9:2d:31:c9:20:e3:0e:34:db:
                    9d:59:c2:b8:9c:10:64:81:13:1e:88:8b:13:e7:14:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D0:43:7A:98:6E:D8:F4:EB:C7:9E:92:8D:31:08:98:4C:CE:E6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/8d04810d-b3a8-3d6f-84da-812950ac1e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1/7b044ed2-f4dc-459c-862c-cdb186e69eb1.crl

            X509v3 Authority Key Identifier:
                keyid:61:B5:28:D9:9F:4F:40:32:EA:73:C5:44:3F:3D:E0:13:77:EC:56:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7b044ed2-f4dc-459c-862c-cdb186e69eb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.172.0/22
                  199.87.88.0/21
                  208.69.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:ad:e3:6f:b6:3d:54:c6:c1:cd:c0:60:45:48:79:0d:61:
         ab:10:60:48:a7:db:cf:44:c3:3c:6c:5b:2a:7e:5e:de:71:dc:
         75:82:01:38:eb:9a:8d:bd:93:6f:53:f9:11:c0:0e:73:be:77:
         22:bb:ea:36:db:f6:98:fc:9e:74:c0:18:b8:d1:db:9c:0e:86:
         f8:eb:69:4e:d8:5f:89:e8:9a:e7:bc:6e:1e:7e:2f:43:87:ea:
         47:47:e5:81:2a:be:aa:a8:c9:c9:e3:fd:7b:e1:1b:35:50:65:
         72:e3:7a:41:1c:c5:ac:7b:b0:e4:98:da:ad:82:cd:39:fe:6b:
         1b:ac:08:e3:57:34:26:bc:94:43:11:93:90:e7:fb:9c:ea:4a:
         81:54:63:30:1b:05:8e:af:41:aa:05:c8:93:64:4d:8d:34:66:
         9b:82:0c:bc:b0:3a:44:c1:82:2c:ad:7a:1d:9c:ca:c0:d1:db:
         4d:15:47:7d:b3:aa:84:63:06:f6:4b:5c:43:15:59:cd:9b:9f:
         6b:dd:d8:d1:f8:96:9c:38:5c:26:4d:f0:17:2c:4a:23:0d:53:
         5f:07:3b:b8:ac:8f:4b:34:73:fe:67:ab:3b:bc:26:7b:32:cf:
         2f:3d:8a:2f:d2:6e:c6:4c:b7:f5:0b:a5:52:51:61:59:bc:12:
         c0:aa:a7:cc
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElrftFyGmXl5s0n/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IwNDRlZDItZjRkYy00NTljLTg2MmMtY2RiMTg2ZTY5
ZWIxMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZmE3NGZhMGMtNjA5Ny00MDZiLWI3OTYtMzNjZGMxYzQwMmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT3tZ751uEdeMmQl/dMWH1iJki1sqy3CzLOI
76MTgXEzZmxg0fUlbG61IBtmVo9lfcI50o4IT7PLkmlQ7EBcxaNW31tV07t9jVGt
qCAk4WvX/LsUZ8/4r8RjnYfjzQH/KzuqvXidZYS29X1HQ2x1v+7SkVDR1yYltXmA
In8tfxz1HAaka44+JMhanP1rdrMLeAEnQTrHnbZrVEaD2tK5WRTn/ve67KyAttTw
FcslLD0MA81sKBLtBKm46bR5h6v6FCBYL5gsB446fAMgUu40cFl/j9hNgv29VOYK
lUhycsQWSWOfpKvJLTHJIOMONNudWcK4nBBkgRMeiIsT5xRsEwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBPQQ3qYbtj068eeko0xCJhMzuYgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83YjA0
NGVkMi1mNGRjLTQ1OWMtODYyYy1jZGIxODZlNjllYjEvOGQwNDgxMGQtYjNhOC0z
ZDZmLTg0ZGEtODEyOTUwYWMxZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2IwNDRlZDItZjRkYy00NTljLTg2
MmMtY2RiMTg2ZTY5ZWIxLzdiMDQ0ZWQyLWY0ZGMtNDU5Yy04NjJjLWNkYjE4NmU2
OWViMS5jcmwwHwYDVR0jBBgwFoAUYbUo2Z9PQDLqc8VEPz3gE3fsVqQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83YjA0NGVkMi1mNGRjLTQ1OWMtODYyYy1jZGIx
ODZlNjllYjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLTusAwQD
x1dYAwQC0EVIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADqFreNvtj1UxsHNwGBFSHkNYasQYEin289Ewzxs
Wyp+Xt5x3HWCATjrmo29k29T+RHADnO+dyK76jbb9pj8nnTAGLjR25wOhvjraU7Y
X4nomue8bh5+L0OH6kdH5YEqvqqoycnj/XvhGzVQZXLjekEcxax7sOSY2q2CzTn+
axusCONXNCa8lEMRk5Dn+5zqSoFUYzAbBY6vQaoFyJNkTY00ZpuCDLywOkTBgiyt
eh2cysDR200VR32zqoRjBvZLXEMVWc2bn2vd2NH4lpw4XCZN8BcsSiMNU18HO7is
j0s0c/5nqzu8Jnsyzy89ii/SbsZMt/ULpVJRYVm8EsCqp8w=
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:16 2025 by rpki-client on console.sobornost.net