Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/52305308-db28-3c62-a669-d3d15a64c9b9.roa
File:                     52305308-db28-3c62-a669-d3d15a64c9b9.roa (raw, json)
Hash identifier:          V0Bpj6KW5rWnl5sQRFtqMLr0qH3z6bjpVehUi+5DeQA=
Subject key identifier:   08:02:FF:63:A0:45:0B:5A:A7:FF:BD:AD:FD:88:D4:6F:9A:49:14:50
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848C258A8B312A91CECC3E8F100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/52305308-db28-3c62-a669-d3d15a64c9b9.roa
Signing time:             Mon 03 Feb 2025 10:52:21 +0000
ROA not before:           Mon 03 Feb 2025 10:52:21 +0000
ROA not after:            Sun 04 May 2025 09:52:21 +0000
asID:                     7018
IP address blocks:        147.53.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:58:a8:b3:12:a9:1c:ec:c3:e8:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  3 10:52:21 2025 GMT
            Not After : May  4 09:52:21 2025 GMT
        Subject: CN=8f9cae03-0723-4506-ac7b-1171987af1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:7b:1b:3c:ca:d4:fe:b7:3c:05:b4:04:45:
                    5f:02:7a:e4:0d:ef:43:49:fa:da:1f:6e:62:55:c1:
                    0a:eb:bc:4f:94:08:9c:52:3d:5f:08:09:3a:a2:0d:
                    83:0d:2e:37:e1:0d:41:a2:f2:45:83:7c:cd:b6:82:
                    8c:9f:66:91:b3:71:17:8f:36:3e:18:2d:24:95:d5:
                    34:c6:f3:23:34:0f:7c:81:b1:fe:d1:45:5b:be:75:
                    5d:e0:c8:bf:b8:2f:95:f9:74:39:7c:2e:63:b2:59:
                    a6:11:4e:05:c8:dd:5d:68:a5:34:f2:58:34:74:d3:
                    98:60:9e:ab:a3:a6:32:2b:2b:57:8c:38:3e:a7:52:
                    9b:10:7c:2c:dd:dd:2f:47:f4:bd:cd:e1:be:38:d6:
                    76:77:31:d9:c8:ce:70:90:03:7b:e6:ff:f1:de:4f:
                    fe:02:a2:39:73:e3:f0:c0:9d:c0:68:dd:54:8c:7c:
                    21:36:62:9f:60:73:2f:f0:a3:34:f5:42:74:de:28:
                    c4:bf:ab:f3:1e:35:f8:53:f6:5d:79:85:fd:71:e5:
                    f6:18:2c:3f:81:e4:a8:3a:36:b3:da:5c:ef:a4:bb:
                    9d:f9:f5:78:3f:e3:56:02:c2:37:06:ea:e8:e8:15:
                    56:e0:69:fc:c6:02:95:d0:5c:cc:8f:81:84:c5:ca:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:02:FF:63:A0:45:0B:5A:A7:FF:BD:AD:FD:88:D4:6F:9A:49:14:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/52305308-db28-3c62-a669-d3d15a64c9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.53.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:6f:d9:23:d1:df:4c:5f:0c:4c:a0:ef:4f:b9:67:d3:88:
         5b:5d:9d:c5:82:e8:3d:20:cc:70:73:6f:ff:d9:fc:f9:48:1c:
         ae:fb:78:94:91:19:3d:7a:ba:36:ee:71:0c:fd:77:18:26:db:
         66:e8:71:fd:54:57:c4:19:ae:2b:72:64:11:87:b7:e3:d6:c5:
         59:d8:3c:ad:c9:e0:5a:48:9e:fe:08:67:ea:de:2f:75:7d:33:
         2c:9d:a6:bc:7b:56:ad:26:68:1d:14:10:96:f7:8f:7d:41:d6:
         61:25:ae:76:f3:07:46:e9:29:84:8b:22:1a:56:3e:65:7b:00:
         38:7b:70:1d:b3:a3:18:bc:2a:f9:85:c4:d7:b7:07:c4:db:2d:
         9d:7e:ce:d3:cf:d6:b0:99:07:5a:34:9e:ad:0e:37:81:79:05:
         fa:30:47:95:d8:4a:ee:89:3f:ed:1e:ed:3b:43:a9:78:fa:a4:
         cf:f3:07:18:26:49:aa:ca:3c:8d:1a:5a:df:be:49:e3:f1:bc:
         30:a9:47:04:3e:77:62:8a:8e:9a:cc:42:37:78:0b:58:5f:45:
         41:50:75:2b:eb:4c:66:d1:f9:91:6b:d3:b2:18:fd:8b:2a:6d:
         c2:aa:48:4f:56:62:ca:b9:db:ad:a3:e7:cd:9c:36:08:2a:56:
         6f:46:41:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCWKizEqkc7MPo8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDIwMzEwNTIyMVoXDTI1MDUwNDA5NTIyMVowLzEtMCsGA1UEAxMk
OGY5Y2FlMDMtMDcyMy00NTA2LWFjN2ItMTE3MTk4N2FmMWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFp7GzzK1P63PAW0BEVfAnrkDe9DSfraH25i
VcEK67xPlAicUj1fCAk6og2DDS434Q1BovJFg3zNtoKMn2aRs3EXjzY+GC0kldU0
xvMjNA98gbH+0UVbvnVd4Mi/uC+V+XQ5fC5jslmmEU4FyN1daKU08lg0dNOYYJ6r
o6YyKytXjDg+p1KbEHws3d0vR/S9zeG+ONZ2dzHZyM5wkAN75v/x3k/+AqI5c+Pw
wJ3AaN1UjHwhNmKfYHMv8KM09UJ03ijEv6vzHjX4U/ZdeYX9ceX2GCw/geSoOjaz
2lzvpLud+fV4P+NWAsI3Buro6BVW4Gn8xgKV0FzMj4GExcpZ3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgC/2OgRQtap/+9rf2I1G+aSRRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTIzMDUzMDgtZGIyOC0z
YzYyLWE2NjktZDNkMTVhNjRjOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkzV3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFz6b9kj0d9MXwxMoO9PuWfTiFtdncWC6D0gzHBzb//Z/PlIHK77eJSR
GT16ujbucQz9dxgm22bocf1UV8QZrityZBGHt+PWxVnYPK3J4FpInv4IZ+reL3V9
Myydprx7Vq0maB0UEJb3j31B1mElrnbzB0bpKYSLIhpWPmV7ADh7cB2zoxi8KvmF
xNe3B8TbLZ1+ztPP1rCZB1o0nq0ON4F5BfowR5XYSu6JP+0e7TtDqXj6pM/zBxgm
SarKPI0aWt++SePxvDCpRwQ+d2KKjprMQjd4C1hfRUFQdSvrTGbR+ZFr07IY/Ysq
bcKqSE9WYsq5262j582cNggqVm9GQTg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:30 2025 by rpki-client on console.sobornost.net