Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/582be6a9-1189-3eb5-899a-e9706edb6884.roa
File:                     582be6a9-1189-3eb5-899a-e9706edb6884.roa (raw, json)
Hash identifier:          QG56iprECa+VVFf99bvd48KKwOv5oXht0RS/YOn/Dag=
Subject key identifier:   07:F3:F8:9F:9D:E5:18:AA:C8:5F:09:96:8A:95:24:A5:25:7B:4C:2D
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F43285849780F0AEEC6E7590017EF5500
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/582be6a9-1189-3eb5-899a-e9706edb6884.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     812
IP address blocks:        72.136.0.0/17 maxlen: 24
                          72.137.0.0/16 maxlen: 24
                          72.138.0.0/16 maxlen: 24
                          72.140.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0a:ee:c6:e7:59:00:17:ef:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=9f29a444-049d-46c1-8762-c1c75c99b14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:19:d1:f4:8a:d5:9c:4e:90:d7:c1:61:e9:
                    26:2a:f0:bd:12:88:49:f7:40:e3:1f:f8:0b:16:b7:
                    ba:45:5e:cb:3e:f0:e9:11:60:6a:3c:a2:3b:76:29:
                    75:17:8a:3d:13:7f:12:2c:f9:f5:10:9b:ee:f9:0f:
                    7a:5f:24:66:c8:43:f5:f5:a4:d2:c3:3f:87:b6:50:
                    91:e9:fd:12:da:22:6b:cd:e8:ae:69:e9:47:eb:dd:
                    e6:c8:f5:b3:87:37:f4:80:40:bc:7a:24:0f:0f:2a:
                    e0:62:a2:a4:b9:fa:9c:c9:bb:b6:92:0c:62:db:9c:
                    63:79:83:2f:13:ff:37:e5:2d:0e:c3:64:d9:d1:27:
                    39:95:b1:47:e5:c2:58:ce:d1:e9:aa:bc:b7:8c:4f:
                    3e:dd:50:8f:25:c3:f6:3b:bf:22:f7:bf:33:96:2f:
                    bc:7f:7b:cc:f7:34:d8:ea:76:c6:31:86:71:e2:75:
                    3c:42:37:0b:9e:e2:db:af:68:12:61:a6:9b:b5:88:
                    a1:3c:2f:29:a3:a2:98:1c:0c:54:9c:72:4b:4d:35:
                    55:7b:ba:fb:09:84:16:eb:d1:fb:0f:94:b2:72:b1:
                    9b:ce:96:a8:6b:5c:fb:fd:c0:f1:c0:09:34:1f:b4:
                    09:40:bc:e3:7a:ee:53:ac:17:ab:3a:3a:4b:b5:32:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:F8:9F:9D:E5:18:AA:C8:5F:09:96:8A:95:24:A5:25:7B:4C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/582be6a9-1189-3eb5-899a-e9706edb6884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.136.0.0/17
                  72.137.0.0-72.138.255.255
                  72.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:16:a6:a8:8b:b2:ac:11:7d:f1:98:0f:40:30:fa:45:16:
         e8:ab:a1:cc:a9:c8:cf:9f:a7:70:50:91:89:e5:43:73:21:09:
         58:6c:54:9f:ff:40:99:48:3e:b4:dc:60:2a:fb:70:30:f3:d6:
         86:b7:83:3b:57:ef:3b:dc:e6:a7:e4:25:41:da:6c:c6:1c:cc:
         be:bf:7e:13:1b:17:39:7d:9d:da:e2:04:8f:0a:53:64:a3:22:
         5f:a1:79:9d:b4:15:0b:b0:53:2d:11:48:db:07:53:28:09:84:
         89:3e:86:4d:73:89:47:dd:40:cd:71:8d:59:6c:74:7b:61:cf:
         44:9e:cf:28:2d:a8:82:5d:cd:1b:c7:6e:54:59:a6:37:46:78:
         cc:e5:1c:ae:b4:bb:5c:56:b6:1f:09:c2:78:e8:ca:1a:09:00:
         9b:d9:56:3c:90:0f:2e:8a:d9:7e:74:02:bc:c4:81:c9:e9:14:
         24:0d:84:08:45:b1:4b:ba:7b:64:ee:14:67:db:da:26:cf:7b:
         b6:2f:c4:19:6e:82:85:c0:3d:8d:4e:81:94:93:dd:a0:f6:ac:
         77:d4:7e:b5:b9:54:88:3b:d6:1e:47:c7:7e:e8:be:88:2d:8c:
         12:8f:2e:8a:55:24:1f:fe:e1:d1:5c:d7:38:b6:62:34:ab:7a:
         5a:9c:72:de
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEl4DwruxudZABfvVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUyNzk5MTgtZjViMS00M2Y3LTk3NDgtOTVhYTBjNjQ2
OWYzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
OWYyOWE0NDQtMDQ5ZC00NmMxLTg3NjItYzFjNzVjOTliMTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJwZ0fSK1ZxOkNfBYekmKvC9EohJ90DjH/gL
Fre6RV7LPvDpEWBqPKI7dil1F4o9E38SLPn1EJvu+Q96XyRmyEP19aTSwz+HtlCR
6f0S2iJrzeiuaelH693myPWzhzf0gEC8eiQPDyrgYqKkufqcybu2kgxi25xjeYMv
E/835S0Ow2TZ0Sc5lbFH5cJYztHpqry3jE8+3VCPJcP2O78i978zli+8f3vM9zTY
6nbGMYZx4nU8QjcLnuLbr2gSYaabtYihPC8po6KYHAxUnHJLTTVVe7r7CYQW69H7
D5SycrGbzpaoa1z7/cDxwAk0H7QJQLzjeu5TrBerOjpLtTJG5wIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFAfz+J+d5RiqyF8JloqVJKUle0wtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3
OTkxOC1mNWIxLTQzZjctOTc0OC05NWFhMGM2NDY5ZjMvNTgyYmU2YTktMTE4OS0z
ZWI1LTg5OWEtZTk3MDZlZGI2ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDUyNzk5MTgtZjViMS00M2Y3LTk3
NDgtOTVhYTBjNjQ2OWYzLzA1Mjc5OTE4LWY1YjEtNDNmNy05NzQ4LTk1YWEwYzY0
NjlmMy5jcmwwHwYDVR0jBBgwFoAUcgH1iAdeZMnpAPYfP2ut8NzCz9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wNTI3OTkxOC1mNWIxLTQzZjctOTc0OC05NWFh
MGM2NDY5ZjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQHSIgAMAoD
AwBIiQMDAEiKAwMASIwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADtwWpqiLsqwRffGYD0Aw+kUW6KuhzKnI
z5+ncFCRieVDcyEJWGxUn/9AmUg+tNxgKvtwMPPWhreDO1fvO9zmp+QlQdpsxhzM
vr9+ExsXOX2d2uIEjwpTZKMiX6F5nbQVC7BTLRFI2wdTKAmEiT6GTXOJR91AzXGN
WWx0e2HPRJ7PKC2ogl3NG8duVFmmN0Z4zOUcrrS7XFa2HwnCeOjKGgkAm9lWPJAP
LorZfnQCvMSByekUJA2ECEWxS7p7ZO4UZ9vaJs97ti/EGW6ChcA9jU6BlJPdoPas
d9R+tblUiDvWHkfHfui+iC2MEo8uilUkH/7h0VzXOLZiNKt6Wpxy3g==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:50 2025 by rpki-client on console.sobornost.net