Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
File:                     5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa (raw, json)
Hash identifier:          O8kdvwbLjMfwUl7BnDgcTwOWprQIjRDa9NQ46nmSq5U=
Subject key identifier:   79:86:40:9B:24:70:59:E3:C2:62:D5:3D:38:87:16:6D:8A:42:1C:1A
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858495EEEDD3428591114A7499FF0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     262287
IP address blocks:        198.145.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:dd:34:28:59:11:14:a7:49:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=50858905-013c-43b8-81fa-201c7b3eb23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:09:5b:58:d2:c7:bc:82:88:ee:52:e7:1a:bc:
                    ad:28:af:3f:20:e7:45:a7:de:eb:c1:12:68:99:30:
                    9c:8e:fc:ee:0a:c4:d1:b5:d2:af:6e:ef:e4:58:58:
                    80:a9:50:59:8f:c5:27:d7:9d:92:c0:76:0d:11:27:
                    66:09:48:a1:9f:5d:28:60:3a:b6:84:06:61:3f:b6:
                    c8:07:5c:65:ec:80:92:92:d0:73:a7:6d:46:9f:f8:
                    99:6f:8c:95:0e:be:1c:74:44:3e:68:bc:c6:0f:45:
                    0e:c6:7d:be:de:ec:fb:f0:56:51:67:11:3c:c1:99:
                    e5:c4:bd:84:d6:8d:e7:cf:66:bd:01:53:6f:32:4f:
                    d3:3d:3c:51:a7:46:62:64:b4:03:d7:7c:dc:c1:b2:
                    3f:09:33:77:0e:64:5a:bd:f2:83:59:8e:82:38:b4:
                    b3:a0:04:32:4c:ce:26:a0:26:b1:f3:f7:4b:bf:d5:
                    11:e0:4d:21:85:43:c2:46:94:07:eb:14:a0:28:2c:
                    dc:6a:34:23:d3:1f:4f:e8:6e:04:6a:26:6b:71:4f:
                    50:4d:bd:5d:04:ee:29:9d:d4:0e:7e:99:34:2f:50:
                    bc:4b:3e:73:93:94:63:15:5c:65:eb:53:a1:71:cd:
                    07:b5:27:f2:01:43:16:ba:5c:8d:b6:74:4c:fd:ac:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:40:9B:24:70:59:E3:C2:62:D5:3D:38:87:16:6D:8A:42:1C:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/5d7e44d3-afa9-35dc-b913-118cc559cbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:ae:82:6c:97:12:f7:19:4a:0d:69:d7:a5:c2:fa:05:ba:
         75:15:cb:3d:2b:17:96:09:05:9a:69:56:da:5c:c5:da:1c:53:
         82:85:bb:ff:26:78:6f:86:7f:1e:af:a2:06:b1:0b:b9:47:d8:
         fe:1a:98:f2:0d:78:53:2a:87:a1:24:3c:85:7d:50:e9:e9:c2:
         88:9c:9c:2e:b1:e1:c1:43:5d:ab:c8:20:48:f0:72:eb:65:c8:
         4a:ae:a0:05:36:9b:23:b3:8d:cb:23:78:ff:bc:48:11:21:89:
         ed:aa:15:7f:ac:f9:64:52:60:a2:9e:b0:b7:59:1c:e3:6e:71:
         fd:43:11:e8:4b:a3:75:1c:cc:79:60:c5:20:3f:a6:ac:2d:50:
         cf:f1:25:b8:74:11:32:d3:c6:66:d8:0d:8b:0d:17:0d:45:69:
         2f:e9:d7:70:24:02:d3:af:28:92:be:29:2d:02:b3:b0:18:b9:
         09:31:93:e1:36:dd:e2:40:aa:a4:8a:da:36:b4:6d:36:2c:57:
         ec:52:ea:4c:18:df:bb:a4:00:f0:3b:e7:61:22:0e:bd:1e:aa:
         47:c2:82:9c:76:ed:4f:06:ae:1b:fd:d1:20:e9:9d:de:3d:4c:
         e7:e0:7e:f5:c6:f1:91:30:eb:4b:87:f5:c6:8c:6e:07:a9:a2:
         94:bc:19:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7t00KFkRFKdJn/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
NTA4NTg5MDUtMDEzYy00M2I4LTgxZmEtMjAxYzdiM2ViMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAlbWNLHvIKI7lLnGrytKK8/IOdFp97rwRJo
mTCcjvzuCsTRtdKvbu/kWFiAqVBZj8Un152SwHYNESdmCUihn10oYDq2hAZhP7bI
B1xl7ICSktBzp21Gn/iZb4yVDr4cdEQ+aLzGD0UOxn2+3uz78FZRZxE8wZnlxL2E
1o3nz2a9AVNvMk/TPTxRp0ZiZLQD13zcwbI/CTN3DmRavfKDWY6COLSzoAQyTM4m
oCax8/dLv9UR4E0hhUPCRpQH6xSgKCzcajQj0x9P6G4EaiZrcU9QTb1dBO4pndQO
fpk0L1C8Sz5zk5RjFVxl61Ohcc0HtSfyAUMWulyNtnRM/az5VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHmGQJskcFnjwmLVPTiHFm2KQhwaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNWQ3ZTQ0ZDMtYWZhOS0z
NWRjLWI5MTMtMTE4Y2M1NTljYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC7troJslxL3GUoNadelwvoFunUVyz0rF5YJBZppVtpcxdocU4KFu/8m
eG+Gfx6vogaxC7lH2P4amPINeFMqh6EkPIV9UOnpwoicnC6x4cFDXavIIEjwcutl
yEquoAU2myOzjcsjeP+8SBEhie2qFX+s+WRSYKKesLdZHONucf1DEehLo3UczHlg
xSA/pqwtUM/xJbh0ETLTxmbYDYsNFw1FaS/p13AkAtOvKJK+KS0Cs7AYuQkxk+E2
3eJAqqSK2ja0bTYsV+xS6kwY37ukAPA752EiDr0eqkfCgpx27U8Grhv90SDpnd49
TOfgfvXG8ZEw60uH9caMbgepopS8GX0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:58 2025 by rpki-client on console.sobornost.net