Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
File:                     96c2d158-c3ea-3c40-b9b9-8b355b682476.roa (raw, json)
Hash identifier:          K0T7j0wzWzchZ5Zun0Lf0EUSrUzfvnJ9u32ra34tbLo=
Subject key identifier:   B7:11:AA:70:45:36:4D:CB:66:67:E4:FC:1A:EF:C1:20:A4:5C:8E:5C
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858495EEEE4E8E0FDD763026B8A00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     62610
IP address blocks:        98.98.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:e4:e8:e0:fd:d7:63:02:6b:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=474a15b5-ac7b-4733-9d1c-27dfe80db468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:88:81:72:88:d4:d0:1e:09:ad:dd:38:b0:
                    07:a8:48:13:8f:0a:be:51:75:a4:11:5d:3e:bc:61:
                    aa:d5:d0:fe:73:c3:c5:d9:81:06:2a:95:f5:3e:fb:
                    fb:1c:96:fd:3c:d3:03:1b:3d:8f:a2:bb:cd:91:45:
                    bb:37:ae:65:c0:4f:7e:68:5c:be:42:e4:a7:0a:8d:
                    cc:6e:62:2d:94:60:8e:ee:84:50:82:0d:c6:a3:03:
                    09:5d:eb:46:d2:eb:4e:d8:91:7e:67:91:3f:03:d7:
                    dd:34:d1:c1:d5:74:0c:f3:b7:47:74:2b:55:02:fa:
                    46:7b:95:be:65:c8:d9:d8:95:8e:9e:16:ab:e9:6b:
                    22:27:b8:80:5b:b9:dc:6b:73:4d:fa:20:bc:15:e7:
                    c6:52:97:4b:21:f4:12:89:a4:58:eb:f2:f9:02:81:
                    b5:c5:73:b5:2b:47:cf:42:b3:ee:ec:7e:a0:f9:77:
                    4b:bb:d2:d4:03:88:84:db:4a:e1:f8:16:a9:2e:2f:
                    5a:d3:a3:33:53:4e:64:4f:e1:4d:30:8d:59:8a:d0:
                    a2:7f:b1:37:bf:d8:b0:a8:7e:95:66:3a:f0:70:f0:
                    70:a3:00:b2:2c:07:bb:ff:83:55:3c:d0:62:a7:f0:
                    ad:3c:89:d4:95:63:28:cd:57:ab:e4:dc:df:e4:c9:
                    9d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:11:AA:70:45:36:4D:CB:66:67:E4:FC:1A:EF:C1:20:A4:5C:8E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/96c2d158-c3ea-3c40-b9b9-8b355b682476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f0:c1:3d:f3:c0:75:c5:64:aa:4a:c3:6a:f2:fb:75:2a:d8:
         5f:5a:46:ae:04:38:4d:83:15:9e:64:80:e7:b4:be:b3:70:fc:
         47:ec:1a:ba:75:a6:ba:13:42:0f:63:0e:e8:c9:66:2d:69:47:
         6a:ca:a4:c3:3c:47:9e:94:fb:ed:3d:5e:ad:9b:36:d4:0f:37:
         5e:4c:33:2e:d0:7d:c9:c7:29:42:db:d5:62:66:f5:4c:cf:22:
         7c:6c:b1:fc:df:55:f8:0e:40:99:44:5e:d9:e8:9a:08:bd:62:
         5a:81:0a:29:9d:09:37:90:fa:2d:b2:3b:cd:6b:48:58:85:6d:
         89:a6:b0:da:23:6f:19:8f:cc:3f:5b:29:ba:55:78:8c:ba:62:
         5d:b6:76:ea:13:b1:c8:f4:36:d9:f6:37:e3:ee:27:67:d6:0a:
         4b:97:1e:f5:02:c3:20:51:c7:f5:6c:f3:8b:bb:be:d3:d0:c9:
         7f:d3:93:8a:f2:d2:ac:2a:1f:73:06:ed:58:cc:39:99:4f:93:
         c1:da:73:7c:49:36:a3:3f:f3:ee:9f:e7:6d:1e:f9:6b:4d:0e:
         c7:07:28:a1:c5:ee:59:a6:0c:5f:bb:a5:65:8f:21:5c:14:e8:
         90:96:ee:04:1d:e9:c0:28:3d:1a:2a:9f:fc:1d:de:27:c1:76:
         d3:56:7d:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uTo4P3XYwJrigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
NDc0YTE1YjUtYWM3Yi00NzMzLTlkMWMtMjdkZmU4MGRiNDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPOIgXKI1NAeCa3dOLAHqEgTjwq+UXWkEV0+
vGGq1dD+c8PF2YEGKpX1Pvv7HJb9PNMDGz2PorvNkUW7N65lwE9+aFy+QuSnCo3M
bmItlGCO7oRQgg3GowMJXetG0utO2JF+Z5E/A9fdNNHB1XQM87dHdCtVAvpGe5W+
ZcjZ2JWOnhar6WsiJ7iAW7nca3NN+iC8FefGUpdLIfQSiaRY6/L5AoG1xXO1K0fP
QrPu7H6g+XdLu9LUA4iE20rh+BapLi9a06MzU05kT+FNMI1ZitCif7E3v9iwqH6V
ZjrwcPBwowCyLAe7/4NVPNBip/CtPInUlWMozVer5Nzf5MmdwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLcRqnBFNk3LZmfk/BrvwSCkXI5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOTZjMmQxNTgtYzNlYS0z
YzQwLWI5YjktOGIzNTViNjgyNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDwwT3zwHXFZKpKw2ry+3Uq2F9aRq4EOE2DFZ5kgOe0vrNw/EfsGrp1
proTQg9jDujJZi1pR2rKpMM8R56U++09Xq2bNtQPN15MMy7QfcnHKULb1WJm9UzP
InxssfzfVfgOQJlEXtnomgi9YlqBCimdCTeQ+i2yO81rSFiFbYmmsNojbxmPzD9b
KbpVeIy6Yl22duoTscj0Ntn2N+PuJ2fWCkuXHvUCwyBRx/Vs84u7vtPQyX/Tk4ry
0qwqH3MG7VjMOZlPk8Hac3xJNqM/8+6f520e+WtNDscHKKHF7lmmDF+7pWWPIVwU
6JCW7gQd6cAoPRoqn/wd3ifBdtNWfeg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:51 2025 by rpki-client on console.sobornost.net