Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa
File:                     50ff23d6-c143-3056-90c8-553c1e77ad8a.roa (raw, json)
Hash identifier:          fpluAU/AzsthDcQEIxTe2qjS9gr24+IVTwNqQXNeJT0=
Subject key identifier:   B4:A8:E0:DF:71:2B:BD:F9:B4:00:F1:D0:E3:6F:F8:A4:20:01:7C:A8
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584973DEEA9F48859C4414281C10
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     8100
IP address blocks:        104.238.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ea:9f:48:85:9c:44:14:28:1c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=3529db51-f662-4b31-9178-11de1169862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:1b:73:3b:7a:32:e0:9a:4d:1e:41:b2:aa:
                    5e:1c:12:de:ad:9c:4b:1e:ec:7e:63:99:95:10:fb:
                    85:8d:70:69:45:9e:3c:b7:9b:96:15:2f:3f:74:59:
                    0d:c2:b2:9c:85:e8:ec:3a:9c:68:af:e2:78:3c:ef:
                    94:51:01:95:f6:be:11:ee:38:bb:35:5a:65:76:52:
                    cd:d1:54:17:05:3c:da:27:7d:fe:9b:88:ff:66:3e:
                    49:58:d5:4d:61:6f:dd:57:24:27:3c:61:12:f8:c0:
                    b4:a1:94:d3:47:94:0f:d1:83:ee:28:d6:df:51:3c:
                    d1:16:d0:fe:2b:29:13:14:c0:bc:61:eb:e2:b4:54:
                    2b:a1:a0:6f:0c:20:d9:9c:b0:77:01:d8:0a:17:a9:
                    a8:66:82:ae:b5:2f:4a:43:a8:1b:cf:7a:f8:af:32:
                    66:0e:db:dd:c6:ca:9d:86:0b:2a:2e:e6:db:18:df:
                    54:2c:25:42:0f:b4:c5:fe:be:20:0b:c1:a1:0a:42:
                    18:5c:52:c6:33:4e:5c:79:55:7b:93:97:67:d5:9c:
                    8f:06:1a:8e:9c:a8:c2:71:ad:87:f4:10:ea:c7:75:
                    d8:63:25:31:55:dc:5d:20:dd:10:47:1d:bc:5c:db:
                    83:07:c2:0e:55:a4:e0:a2:e7:bf:f0:7a:99:5b:c7:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:E0:DF:71:2B:BD:F9:B4:00:F1:D0:E3:6F:F8:A4:20:01:7C:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:52:9c:02:6c:f6:38:2e:2e:9b:b6:aa:00:c9:b9:0e:c5:
         0e:d1:ce:ce:3d:14:d1:38:5d:d4:4a:ed:7d:6e:51:cb:f7:a2:
         fc:86:8e:a9:25:a0:c2:e1:f3:97:34:52:96:6f:21:88:15:f7:
         54:fd:3b:71:26:fa:d5:20:49:3c:e8:af:e6:8b:b4:f3:7c:70:
         f4:3b:78:fa:d2:00:c6:07:7a:ba:7f:b3:11:3c:57:ad:09:9d:
         a5:5c:fb:51:d1:9d:c0:11:b0:ad:c3:ab:a3:b0:64:bb:5e:06:
         35:7d:87:5a:90:bd:78:93:48:04:ee:39:51:34:04:5d:e5:54:
         fc:1d:31:c7:84:b1:98:02:0c:4d:08:66:e3:d7:6e:81:9b:14:
         c0:ec:ac:9c:3b:65:e8:aa:5c:08:11:02:8f:41:be:a2:da:27:
         ff:47:fe:39:ca:2c:28:91:7c:6a:ed:95:c2:b3:7d:66:75:26:
         b5:ef:4b:78:a9:b1:4a:44:ad:bb:3a:a5:f1:06:e3:51:a3:7d:
         03:ad:33:a7:94:6a:73:23:f4:66:c0:cb:bc:48:e3:7c:c6:7e:
         d3:b5:65:9a:42:cf:1f:88:d1:49:d4:df:67:c7:8d:cf:db:6b:
         8c:35:d9:5a:57:92:3f:5c:c2:dc:76:7e:b6:47:0e:2b:a0:92:
         2b:13:32:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uqfSIWcRBQoHBAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
MzUyOWRiNTEtZjY2Mi00YjMxLTkxNzgtMTFkZTExNjk4NjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/gbczt6MuCaTR5BsqpeHBLerZxLHux+Y5mV
EPuFjXBpRZ48t5uWFS8/dFkNwrKchejsOpxor+J4PO+UUQGV9r4R7ji7NVpldlLN
0VQXBTzaJ33+m4j/Zj5JWNVNYW/dVyQnPGES+MC0oZTTR5QP0YPuKNbfUTzRFtD+
KykTFMC8YevitFQroaBvDCDZnLB3AdgKF6moZoKutS9KQ6gbz3r4rzJmDtvdxsqd
hgsqLubbGN9ULCVCD7TF/r4gC8GhCkIYXFLGM05ceVV7k5dn1ZyPBhqOnKjCca2H
9BDqx3XYYyUxVdxdIN0QRx28XNuDB8IOVaTgoue/8HqZW8dgAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSo4N9xK735tADx0ONv+KQgAXyoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTBmZjIzZDYtYzE0My0z
MDU2LTkwYzgtNTUzYzFlNzdhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO75MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcZUpwCbPY4Li6btqoAybkOxQ7Rzs49FNE4XdRK7X1uUcv3ovyGjqkl
oMLh85c0UpZvIYgV91T9O3Em+tUgSTzor+aLtPN8cPQ7ePrSAMYHerp/sxE8V60J
naVc+1HRncARsK3Dq6OwZLteBjV9h1qQvXiTSATuOVE0BF3lVPwdMceEsZgCDE0I
ZuPXboGbFMDsrJw7ZeiqXAgRAo9BvqLaJ/9H/jnKLCiRfGrtlcKzfWZ1JrXvS3ip
sUpErbs6pfEG41GjfQOtM6eUanMj9GbAy7xI43zGftO1ZZpCzx+I0UnU32fHjc/b
a4w12VpXkj9cwtx2frZHDiugkisTMlQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:58 2025 by rpki-client on console.sobornost.net