Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa
File:                     f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa (raw, json)
Hash identifier:          Mip3M1FU1xRVj1hTtwkAvXGIGIMvcpqI6gDc8Th3jVo=
Subject key identifier:   D6:3E:C1:72:96:C2:A9:06:73:EB:DA:C0:26:D1:37:19:5B:1D:9D:57
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584964843A2757C0A7DFE19968A6
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     399076
IP address blocks:        149.234.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3a:27:57:c0:a7:df:e1:99:68:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=a3a95f2b-4de6-49eb-b52b-02a004131ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:20:9e:11:dd:4c:7c:6d:bc:33:7d:dd:6b:
                    68:e8:8d:9c:92:57:bc:8a:bf:75:9e:21:2f:2d:d6:
                    96:50:fd:57:40:70:e9:6e:75:f5:3f:94:47:a4:3e:
                    03:40:f7:d9:4d:5b:40:b8:2f:0b:70:b4:9e:61:9a:
                    8a:7e:04:bf:eb:70:d2:ef:cb:83:91:7c:88:b8:cb:
                    d6:fc:9a:a8:25:60:64:e4:37:38:1d:26:ba:26:4b:
                    21:05:a8:a8:43:d0:3b:53:ad:67:5f:01:15:66:27:
                    1b:8c:57:cc:87:ee:d5:ae:12:67:be:52:6c:cf:1f:
                    07:a0:f9:91:f2:26:51:e7:3e:19:9b:4a:a8:94:96:
                    a1:17:c8:f5:11:5c:37:44:02:b4:59:f7:81:39:ec:
                    8d:76:c4:06:73:49:ac:39:68:7a:7b:55:13:dd:d5:
                    18:97:5f:70:80:81:6c:e0:ef:39:56:02:73:97:ab:
                    e0:9b:d7:2a:b2:75:85:f8:e0:08:09:51:bd:62:aa:
                    20:ea:8f:fc:59:3f:6e:ce:5b:2d:d6:59:85:ae:55:
                    c4:43:d0:61:a8:a5:e0:9d:40:9c:25:29:28:de:8c:
                    f3:80:f2:a4:28:e7:b3:a9:12:02:fe:2a:ba:cc:43:
                    4a:0d:85:7a:1c:a8:56:cb:4a:8c:72:66:52:e8:09:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:C1:72:96:C2:A9:06:73:EB:DA:C0:26:D1:37:19:5B:1D:9D:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/f5f54199-cd1b-36e9-9657-8eeedfb7e7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:31:33:48:6a:a3:05:60:69:fe:14:55:d8:19:85:8f:28:
         dd:10:51:4c:f9:37:a0:0e:c3:d7:5f:4a:ed:22:02:4a:f3:1f:
         d9:ca:00:5c:28:56:71:06:f2:43:01:17:09:ef:d7:ba:13:19:
         44:3b:78:4c:e7:09:5b:db:83:00:2a:40:7f:7d:cd:e1:c9:55:
         cb:5d:90:3c:30:05:32:11:e1:e2:89:94:21:a5:70:11:fb:fe:
         36:f0:06:23:d8:5b:f6:a3:f7:aa:6d:b4:6d:0c:ec:f9:d3:25:
         fe:eb:1e:19:56:6c:34:32:6c:ec:e9:36:44:22:2c:fe:36:bc:
         1f:0f:b9:62:d8:62:07:31:c6:2a:c8:2b:1b:88:a9:b6:bf:3d:
         17:7c:49:71:c2:8e:83:3c:b8:de:5d:58:b0:16:e7:06:aa:97:
         96:8c:f1:cd:ce:9c:76:7a:fe:5f:1c:e0:1f:09:a2:94:d2:72:
         2b:da:9e:80:3c:6c:42:e1:eb:82:2d:bc:51:12:b6:dc:af:98:
         48:97:38:03:10:9a:3a:0b:4d:af:06:e7:5d:61:5a:da:01:c0:
         c3:aa:4d:d7:dd:ce:66:c5:68:d6:41:8a:09:33:ff:4e:5a:53:
         2c:a4:e2:0a:10:d7:a8:19:65:7b:76:df:44:06:4b:3f:c7:5c:
         c8:28:ff:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhDonV8Cn3+GZaKYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWM1YWRlY2ItNGFjOC00MzJmLTgxN2MtODRiZWM0N2I3
NzA4MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
YTNhOTVmMmItNGRlNi00OWViLWI1MmItMDJhMDA0MTMxYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJQgnhHdTHxtvDN93Wto6I2ckle8ir91niEv
LdaWUP1XQHDpbnX1P5RHpD4DQPfZTVtAuC8LcLSeYZqKfgS/63DS78uDkXyIuMvW
/JqoJWBk5Dc4HSa6JkshBaioQ9A7U61nXwEVZicbjFfMh+7VrhJnvlJszx8HoPmR
8iZR5z4Zm0qolJahF8j1EVw3RAK0WfeBOeyNdsQGc0msOWh6e1UT3dUYl19wgIFs
4O85VgJzl6vgm9cqsnWF+OAICVG9Yqog6o/8WT9uzlst1lmFrlXEQ9BhqKXgnUCc
JSko3ozzgPKkKOezqRIC/iq6zENKDYV6HKhWy0qMcmZS6AmzAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNY+wXKWwqkGc+vawCbRNxlbHZ1XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh
ZGVjYi00YWM4LTQzMmYtODE3Yy04NGJlYzQ3Yjc3MDgvZjVmNTQxOTktY2QxYi0z
NmU5LTk2NTctOGVlZWRmYjdlN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWRlY2ItNGFjOC00MzJmLTgx
N2MtODRiZWM0N2I3NzA4LzFjNWFkZWNiLTRhYzgtNDMyZi04MTdjLTg0YmVjNDdi
NzcwOC5jcmwwHwYDVR0jBBgwFoAUVaoUdtgDOMPMCm7zFN4yMK4vgBswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZGVjYi00YWM4LTQzMmYtODE3Yy04NGJl
YzQ3Yjc3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlerkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxGMTNIaqMFYGn+FFXYGYWPKN0QUUz5N6AOw9dfSu0iAkrzH9nKAFwo
VnEG8kMBFwnv17oTGUQ7eEznCVvbgwAqQH99zeHJVctdkDwwBTIR4eKJlCGlcBH7
/jbwBiPYW/aj96pttG0M7PnTJf7rHhlWbDQybOzpNkQiLP42vB8PuWLYYgcxxirI
KxuIqba/PRd8SXHCjoM8uN5dWLAW5waql5aM8c3OnHZ6/l8c4B8JopTScivanoA8
bELh64ItvFESttyvmEiXOAMQmjoLTa8G511hWtoBwMOqTdfdzmbFaNZBigkz/05a
Uyyk4goQ16gZZXt230QGSz/HXMgo/xM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:51 2025 by rpki-client on console.sobornost.net