Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa
File:                     905969fd-c59a-3f23-b7bc-42364f144e84.roa (raw, json)
Hash identifier:          a9VsuNE0Isih8TSL1eBoNbwm4nG0QNTDBhwpVJf3PR4=
Subject key identifier:   19:14:73:20:24:34:ED:3D:3F:35:E8:0F:2C:1F:D3:4F:82:24:46:FE
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F432858497DA469953ABE7E0EE4656DA8
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     19691
IP address blocks:        198.37.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:69:95:3a:be:7e:0e:e4:65:6d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=f6ea6b2e-c895-4bb9-be83-0fe9a0772020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:22:66:92:8e:5c:1b:b2:e6:b0:75:92:ca:
                    e6:08:20:2c:8c:8c:82:08:e3:c3:78:d9:b2:97:ae:
                    f0:67:d6:5b:71:7b:63:2a:5d:79:87:ea:5d:a3:e4:
                    93:cc:b4:8b:25:50:b0:ec:7f:ae:2b:0b:bd:8e:95:
                    c0:eb:3b:a0:2b:11:21:41:bc:23:4b:28:39:e5:e5:
                    9e:cf:f9:4c:4a:25:40:b5:f4:14:a8:12:20:3a:57:
                    63:35:85:f1:37:58:3e:2b:82:68:62:39:0e:9f:96:
                    31:5f:2f:18:68:21:73:fe:11:06:e1:7d:2b:8f:15:
                    50:0d:ad:7c:ba:0f:a4:49:52:9d:01:96:ec:dc:f2:
                    9f:14:64:d2:da:23:ba:4f:45:fb:60:4b:1a:48:fe:
                    69:07:59:5b:21:33:b3:64:88:32:37:6c:78:27:6c:
                    21:50:52:db:c7:53:f9:98:4a:5d:5b:86:9a:05:ff:
                    5e:a5:e2:33:e4:7c:ba:d0:a3:e7:9d:e4:09:9e:d1:
                    c1:99:47:34:0e:82:66:17:59:72:9e:c0:b2:d1:a0:
                    12:20:79:41:cf:57:cd:a3:1e:90:21:ab:1f:ca:1c:
                    a9:53:9f:75:28:c3:fc:3f:2b:58:a1:60:d1:70:7b:
                    5b:ca:50:df:2d:c9:0a:0a:b5:0b:2a:ee:05:ea:a3:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:73:20:24:34:ED:3D:3F:35:E8:0F:2C:1F:D3:4F:82:24:46:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/905969fd-c59a-3f23-b7bc-42364f144e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:cd:c8:ab:de:41:5a:eb:29:f3:a0:dd:08:d0:43:ad:66:
         c1:52:d2:d6:fe:f3:15:60:ef:e7:a1:c0:db:c1:7d:d1:ce:4e:
         ce:14:c5:5c:56:e2:a5:65:33:00:e0:c6:0d:2e:52:f4:3b:d2:
         5e:05:51:7a:f1:6c:bd:d2:8d:11:2c:6d:4d:0b:ed:5b:2e:26:
         21:46:43:e0:79:28:37:d1:9c:ba:95:69:aa:18:d5:8f:9e:b8:
         90:07:30:3c:36:c6:f0:95:1e:a2:e2:45:22:f8:55:14:d3:f8:
         2a:00:f4:9d:71:0f:d5:8f:fe:b3:dd:c7:49:3e:42:2e:ec:ac:
         52:9d:fd:82:37:a1:f4:ff:20:8a:ff:62:13:16:b1:76:17:25:
         98:ec:5a:5c:e2:3d:f6:ef:32:d2:8b:a9:49:9a:f0:96:60:27:
         1d:7c:04:ce:73:f8:7c:a5:cf:66:68:7b:e3:00:51:e6:a6:24:
         93:9f:d9:c0:cb:de:af:e5:a7:c4:a9:6f:80:2b:41:fe:67:ac:
         72:0c:97:21:29:95:1b:8b:cf:38:d5:dc:a6:bc:2e:de:ec:ba:
         b9:80:32:90:44:50:65:d9:1e:9b:ee:64:e4:23:23:37:75:1f:
         ae:3b:4c:2f:14:b4:ef:b1:4d:3b:aa:62:b4:36:1c:6c:ef:03:
         02:84:e3:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pGmVOr5+DuRlbagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjZlYTZiMmUtYzg5NS00YmI5LWJlODMtMGZlOWEwNzcyMDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUsiZpKOXBuy5rB1ksrmCCAsjIyCCOPDeNmy
l67wZ9ZbcXtjKl15h+pdo+STzLSLJVCw7H+uKwu9jpXA6zugKxEhQbwjSyg55eWe
z/lMSiVAtfQUqBIgOldjNYXxN1g+K4JoYjkOn5YxXy8YaCFz/hEG4X0rjxVQDa18
ug+kSVKdAZbs3PKfFGTS2iO6T0X7YEsaSP5pB1lbITOzZIgyN2x4J2whUFLbx1P5
mEpdW4aaBf9epeIz5Hy60KPnneQJntHBmUc0DoJmF1lynsCy0aASIHlBz1fNox6Q
IasfyhypU591KMP8PytYoWDRcHtbylDfLckKCrULKu4F6qM5ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkUcyAkNO09PzXoDywf00+CJEb+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvOTA1OTY5ZmQtYzU5YS0z
ZjIzLWI3YmMtNDIzNjRmMTQ0ZTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiU2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8Czcir3kFa6ynzoN0I0EOtZsFS0tb+8xVg7+ehwNvBfdHOTs4UxVxW
4qVlMwDgxg0uUvQ70l4FUXrxbL3SjREsbU0L7VsuJiFGQ+B5KDfRnLqVaaoY1Y+e
uJAHMDw2xvCVHqLiRSL4VRTT+CoA9J1xD9WP/rPdx0k+Qi7srFKd/YI3ofT/IIr/
YhMWsXYXJZjsWlziPfbvMtKLqUma8JZgJx18BM5z+Hylz2Zoe+MAUeamJJOf2cDL
3q/lp8Spb4ArQf5nrHIMlyEplRuLzzjV3Ka8Lt7surmAMpBEUGXZHpvuZOQjIzd1
H647TC8UtO+xTTuqYrQ2HGzvAwKE434=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:28 2025 by rpki-client on console.sobornost.net