Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
File:                     9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa (raw, json)
Hash identifier:          pi/NGhNKJJta60+331kv2xkKVBtUtwzNF2vjLGFUlDw=
Subject key identifier:   1F:8A:D4:01:EC:93:CE:6C:78:20:D6:32:4D:1F:75:E1:10:AB:65:62
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285849711436AF1CD3DC353E097F00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     21515
IP address blocks:        137.119.26.0/23 maxlen: 23
                          137.119.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:36:af:1c:d3:dc:35:3e:09:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=b6d3ba6b-2a0a-4749-a7b8-4364c7a0c5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:d3:0c:0f:41:76:7d:cc:c3:32:a1:de:ec:
                    5a:5b:19:bb:7a:cc:ff:3d:ef:f7:8c:28:47:69:5a:
                    15:a8:e1:bc:50:46:13:b3:5b:50:7e:9e:01:04:da:
                    79:64:91:db:8e:6b:22:c0:ed:3e:75:c0:5b:36:cd:
                    e6:5b:8d:6e:a3:b9:c5:87:b5:4e:84:58:98:9f:8f:
                    a7:af:e5:b6:42:fa:d1:89:5f:22:09:0c:ba:71:da:
                    ff:6f:68:17:dd:58:1b:b3:53:20:ac:9d:fb:40:a3:
                    7f:6c:6f:a0:e2:72:05:51:06:b7:d8:b3:38:85:02:
                    96:e6:ec:e5:04:79:0f:ad:a0:45:1a:06:f6:17:43:
                    d7:17:17:60:33:6d:49:06:13:07:1c:85:80:a9:14:
                    a8:65:11:db:48:c6:94:35:a5:b4:c3:d5:04:ec:4e:
                    0c:11:c7:82:77:b5:01:d0:d9:fa:78:df:cf:0b:97:
                    10:ac:3a:b3:3b:f1:8c:04:41:aa:05:c9:7a:32:4c:
                    e0:ab:c4:9c:53:84:d0:ed:53:10:24:02:af:bf:41:
                    29:88:6b:95:2d:3e:ac:b4:ee:b3:2c:95:77:c5:c8:
                    e3:d7:82:b2:26:eb:23:e9:b1:c5:33:cc:20:85:db:
                    e6:09:43:8b:52:97:47:c7:d0:41:81:b7:1a:dc:31:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:D4:01:EC:93:CE:6C:78:20:D6:32:4D:1F:75:E1:10:AB:65:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.26.0/23
                  137.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:60:69:24:45:fc:61:cc:2f:73:e4:bb:15:ee:c3:d0:47:
         8d:d5:90:17:26:f5:e0:bc:4f:d0:14:97:a3:9d:c9:11:28:ec:
         6d:74:1f:4d:35:49:86:87:fc:ca:ef:2f:11:51:5b:e7:08:19:
         47:f0:f0:61:58:f1:19:56:f7:8b:e9:e2:ea:f4:f2:23:53:04:
         2b:f4:b8:70:9b:2a:f0:96:29:11:59:c9:52:42:25:46:cb:86:
         82:dc:ae:3a:94:da:c1:90:32:26:03:e5:0d:52:b7:a6:a9:85:
         45:ba:8a:00:1d:5d:c3:8a:6c:af:30:00:80:c1:a9:10:33:78:
         5c:57:94:c3:78:d0:63:69:b9:c3:34:58:2d:9f:d0:00:8d:ec:
         c6:5a:79:fb:86:4f:0f:71:d8:cb:47:50:93:4d:5f:69:16:34:
         d1:e0:70:36:c7:d2:a9:e6:ca:bc:4e:db:80:00:29:f2:bf:4e:
         0b:61:4d:73:e6:10:b4:c1:1f:b2:e0:9a:ea:16:c9:0d:0f:e3:
         59:6f:c2:29:2c:a5:f1:a1:b6:37:89:20:a8:6d:b7:7f:d1:21:
         8b:5b:d2:9c:07:a6:bb:1d:b9:f5:d7:f9:67:0e:3c:32:ac:42:
         3a:11:f8:78:2b:f0:41:e7:9a:56:3a:30:92:08:68:3d:49:9d:
         c6:28:fc:de
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElxFDavHNPcNT4JfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
YjZkM2JhNmItMmEwYS00NzQ5LWE3YjgtNDM2NGM3YTBjNWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCzTDA9Bdn3MwzKh3uxaWxm7esz/Pe/3jChH
aVoVqOG8UEYTs1tQfp4BBNp5ZJHbjmsiwO0+dcBbNs3mW41uo7nFh7VOhFiYn4+n
r+W2QvrRiV8iCQy6cdr/b2gX3Vgbs1MgrJ37QKN/bG+g4nIFUQa32LM4hQKW5uzl
BHkPraBFGgb2F0PXFxdgM21JBhMHHIWAqRSoZRHbSMaUNaW0w9UE7E4MEceCd7UB
0Nn6eN/PC5cQrDqzO/GMBEGqBcl6Mkzgq8ScU4TQ7VMQJAKvv0EpiGuVLT6stO6z
LJV3xcjj14KyJusj6bHFM8wghdvmCUOLUpdHx9BBgbca3DFSOwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB+K1AHsk85seCDWMk0fdeEQq2ViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvOTA5NDkzN2QtOGI4OS0z
ZDJiLTkxMGMtNGRhZTlhOWQwYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBiXcaAwQE
iXdAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABn9YGkkRfxhzC9z5LsV7sPQR43VkBcm9eC8T9AUl6OdyREo
7G10H001SYaH/MrvLxFRW+cIGUfw8GFY8RlW94vp4ur08iNTBCv0uHCbKvCWKRFZ
yVJCJUbLhoLcrjqU2sGQMiYD5Q1St6aphUW6igAdXcOKbK8wAIDBqRAzeFxXlMN4
0GNpucM0WC2f0ACN7MZaefuGTw9x2MtHUJNNX2kWNNHgcDbH0qnmyrxO24AAKfK/
TgthTXPmELTBH7LgmuoWyQ0P41lvwikspfGhtjeJIKhtt3/RIYtb0pwHprsdufXX
+WcOPDKsQjoR+Hgr8EHnmlY6MJIIaD1JncYo/N4=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:51 2025 by rpki-client on console.sobornost.net