Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
File:                     0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa (raw, json)
Hash identifier:          6dzf8FwGHth2WwGT0/YWJqKldsMr0eA9cgiyd0sE9eg=
Subject key identifier:   FA:D6:A0:5F:14:8A:44:CD:39:EB:70:DB:7C:CD:82:14:6F:35:44:EF
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849806F185C58CDA8FD297F08E0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     7018
IP address blocks:        198.145.132.0/22 maxlen: 22
                          198.145.136.0/22 maxlen: 22
                          198.145.140.0/22 maxlen: 22
                          198.145.225.0/24 maxlen: 24
                          198.145.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:18:5c:58:cd:a8:fd:29:7f:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=895cfeec-0bdf-45c9-a78c-9685d2e69f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:07:8e:fe:3e:f1:43:c1:1e:64:4b:5e:9e:
                    ba:b0:a1:a9:bd:bb:f6:9c:db:2b:bd:7d:86:be:bf:
                    67:c2:1a:f2:02:bc:75:4d:39:6a:2a:52:a1:56:69:
                    0d:c4:ed:04:18:26:50:d1:40:78:10:8c:db:73:f5:
                    92:2c:cd:64:0d:9e:34:45:1b:5a:90:8f:19:4b:cd:
                    9e:18:36:81:40:57:c1:63:e5:49:26:bb:4c:f9:b7:
                    d6:e6:80:22:c0:71:54:93:26:82:00:64:0d:85:82:
                    3c:8a:d5:c6:ff:9f:1e:77:ba:88:1e:5a:6c:3a:8c:
                    b4:5d:d9:96:7f:6d:6e:9a:1c:0a:b2:12:01:0e:75:
                    b2:df:68:1a:f2:12:15:04:dc:57:98:1d:ad:ca:42:
                    d4:4f:0c:6c:80:8f:12:4a:90:e8:5f:98:39:e3:e7:
                    22:d7:6b:02:47:3c:88:ce:8d:1e:4e:87:3a:47:57:
                    b7:e0:fc:92:b0:e2:2e:e4:4a:b9:80:1e:9c:dd:b2:
                    4e:8e:9e:c3:02:c4:82:88:69:02:b5:f0:e7:2e:fa:
                    94:54:18:d6:1e:af:01:11:dd:20:4e:7d:e1:3c:29:
                    24:3f:c7:73:45:94:d2:ae:da:93:ad:60:3d:db:8f:
                    68:56:f2:a5:9c:31:ff:17:a5:db:f5:b8:63:64:86:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:A0:5F:14:8A:44:CD:39:EB:70:DB:7C:CD:82:14:6F:35:44:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/0e6cc9c9-1db5-3a86-ac8e-5f7f76cb8d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.132.0-198.145.143.255
                  198.145.225.0-198.145.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:26:8a:e4:68:b5:af:46:cd:23:23:03:0f:e9:77:67:c3:1d:
         65:8b:54:d5:4f:3d:ba:f7:60:7e:42:a0:b3:5d:64:82:79:8b:
         ac:a2:ea:10:65:b5:99:0b:14:0f:cd:87:fd:32:31:ed:3e:f0:
         be:32:ff:b2:f1:9e:37:f5:fa:87:7f:00:39:5f:b9:16:33:a3:
         bf:f2:43:fd:98:a5:5f:d1:2e:93:16:bc:ff:43:41:8f:d9:8c:
         32:a4:d3:e2:e8:68:b1:47:bf:23:7f:72:cb:88:b7:73:44:ba:
         49:a8:63:57:49:a8:ce:02:82:55:1d:01:fe:f0:0b:66:74:ff:
         a0:a7:47:c8:c8:9b:a7:e8:d7:57:5f:e3:99:1d:55:01:3e:f0:
         99:6d:91:40:8c:45:1c:8f:f8:79:fc:5a:93:8a:56:6d:c0:94:
         65:8e:2f:b3:02:ce:00:6e:ff:0f:6c:9b:77:1b:6e:65:23:ac:
         89:39:53:b2:fa:8f:e9:2f:ff:6b:23:f5:ab:9c:8e:47:a8:aa:
         ae:bb:57:0c:16:b0:60:67:aa:12:a3:53:b8:4b:af:49:ad:ec:
         0e:14:b1:c3:3d:ed:da:03:eb:c9:ea:e3:2d:de:de:c5:c1:3a:
         eb:80:33:a1:c3:6a:8d:44:51:b3:fd:f9:1a:8b:94:6d:0c:f9:
         bf:86:32:e7
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEmAbxhcWM2o/Sl/COAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
ODk1Y2ZlZWMtMGJkZi00NWM5LWE3OGMtOTY4NWQyZTY5ZjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKwHjv4+8UPBHmRLXp66sKGpvbv2nNsrvX2G
vr9nwhryArx1TTlqKlKhVmkNxO0EGCZQ0UB4EIzbc/WSLM1kDZ40RRtakI8ZS82e
GDaBQFfBY+VJJrtM+bfW5oAiwHFUkyaCAGQNhYI8itXG/58ed7qIHlpsOoy0XdmW
f21umhwKshIBDnWy32ga8hIVBNxXmB2tykLUTwxsgI8SSpDoX5g54+ci12sCRzyI
zo0eToc6R1e34PySsOIu5Eq5gB6c3bJOjp7DAsSCiGkCtfDnLvqUVBjWHq8BEd0g
Tn3hPCkkP8dzRZTSrtqTrWA9249oVvKlnDH/F6Xb9bhjZIaMYQIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFPrWoF8UikTNOetw23zNghRvNUTvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMGU2Y2M5YzktMWRiNS0z
YTg2LWFjOGUtNWY3Zjc2Y2I4ZDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBALGkYQD
BATGkYAwDAMEAMaR4QMEAMaR4jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDcJorkaLWvRs0jIwMP6Xdnwx1l
i1TVTz2692B+QqCzXWSCeYusouoQZbWZCxQPzYf9MjHtPvC+Mv+y8Z439fqHfwA5
X7kWM6O/8kP9mKVf0S6TFrz/Q0GP2YwypNPi6GixR78jf3LLiLdzRLpJqGNXSajO
AoJVHQH+8AtmdP+gp0fIyJun6NdXX+OZHVUBPvCZbZFAjEUcj/h5/FqTilZtwJRl
ji+zAs4Abv8PbJt3G25lI6yJOVOy+o/pL/9rI/WrnI5HqKquu1cMFrBgZ6oSo1O4
S69JrewOFLHDPe3aA+vJ6uMt3t7FwTrrgDOhw2qNRFGz/fkai5RtDPm/hjLn
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:58 2025 by rpki-client on console.sobornost.net