Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa
File:                     afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa (raw, json)
Hash identifier:          PxMfkcB28NiXINNDFu8IIUiDJ/nuCFSl9sOwe020noQ=
Subject key identifier:   3A:5C:7C:8C:4E:43:96:74:5E:D6:73:4C:EA:EA:94:FC:18:EE:42:45
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F432858495C242A67A357B183B3AA4080
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     203724
IP address blocks:        161.69.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:2a:67:a3:57:b1:83:b3:aa:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=7ede2ed4-6e84-4486-8f41-f20391ef237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:b1:c5:b7:2d:9c:1c:e8:35:91:d9:c7:f6:
                    24:4c:c4:46:75:a3:90:3a:ea:ce:82:d3:49:74:93:
                    f6:37:26:2a:e0:3a:f5:26:9a:c5:f4:07:0f:b4:08:
                    92:c2:32:f4:b1:a6:d8:f8:17:f5:eb:59:45:46:d9:
                    a7:05:d9:23:32:25:6d:f9:ca:b1:07:9e:f5:52:56:
                    41:27:66:42:fa:9f:fb:f1:8e:a2:ce:1e:4a:82:3f:
                    41:d7:bf:59:51:0e:2b:63:97:8e:f2:f9:35:51:93:
                    e4:f8:86:3d:27:8f:2b:6e:e3:11:81:a8:d8:c2:03:
                    8a:30:7b:9a:10:a2:28:20:86:fa:7d:fc:b2:6a:25:
                    7b:b7:d4:e5:f8:4c:b0:f8:0d:2a:68:21:b9:dc:64:
                    ce:12:41:f8:3a:ff:36:2b:c0:7b:09:ff:da:6c:9f:
                    cc:4e:c1:b4:87:85:02:66:ec:05:dc:c7:fc:25:f9:
                    7c:33:e0:ff:61:47:6a:36:54:b2:d4:c4:41:29:38:
                    2c:cf:c8:b8:31:e6:cc:5f:74:6f:50:6e:cb:c8:0f:
                    95:d4:61:4f:65:08:ea:c9:16:c8:90:78:2e:83:b0:
                    18:f2:3f:ca:b8:38:d0:98:ff:8e:94:c4:e6:d8:47:
                    02:16:ca:04:46:0c:7a:60:de:2e:76:c3:86:9b:03:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:7C:8C:4E:43:96:74:5E:D6:73:4C:EA:EA:94:FC:18:EE:42:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/afd0f3ca-32c4-3aec-b7f7-703c244707cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:97:12:a7:1a:2d:08:e4:af:24:03:0a:3c:49:c1:80:59:
         98:3c:11:3e:cd:e6:6b:6c:0c:8b:03:09:ae:67:6f:06:53:3b:
         2e:a7:4f:20:e7:31:61:3c:91:ac:24:a0:13:98:bb:73:a5:ed:
         1f:2e:4f:50:b4:5b:01:66:ee:64:a7:35:e4:82:37:de:61:dd:
         35:c5:56:f6:64:23:53:c3:97:d3:44:52:af:e0:68:68:a3:ca:
         9a:a1:5c:b3:9f:e8:aa:0d:f2:46:2e:7e:04:22:aa:a6:26:43:
         64:58:13:2f:55:5d:e1:7d:f3:6f:f3:37:43:9c:d6:1c:ba:4a:
         75:90:75:98:4d:60:88:25:56:1c:7c:90:4f:9c:6d:8c:32:a8:
         4f:d9:53:62:ee:86:67:65:bf:69:23:a9:39:fa:cd:db:36:db:
         d2:d3:5b:97:55:c0:21:72:d2:4c:c5:c1:6e:70:1a:34:d8:e5:
         6a:3b:a0:e4:9c:7f:c4:d9:21:fc:b7:01:f0:53:c8:96:4f:d0:
         aa:75:9d:91:39:92:86:49:1d:ab:30:95:30:59:95:32:6b:65:
         0b:a8:e7:43:cd:5f:bd:d4:78:ee:a5:93:b5:08:7d:c6:27:a9:
         2f:61:91:06:96:10:1e:b3:e2:1f:da:02:cc:ba:0e:c7:5c:e2:
         9c:96:9c:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJCpno1exg7OqQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
N2VkZTJlZDQtNmU4NC00NDg2LThmNDEtZjIwMzkxZWYyMzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMWxxbctnBzoNZHZx/YkTMRGdaOQOurOgtNJ
dJP2NyYq4Dr1JprF9AcPtAiSwjL0sabY+Bf161lFRtmnBdkjMiVt+cqxB571UlZB
J2ZC+p/78Y6izh5Kgj9B179ZUQ4rY5eO8vk1UZPk+IY9J48rbuMRgajYwgOKMHua
EKIoIIb6ffyyaiV7t9Tl+Eyw+A0qaCG53GTOEkH4Ov82K8B7Cf/abJ/MTsG0h4UC
ZuwF3Mf8Jfl8M+D/YUdqNlSy1MRBKTgsz8i4MebMX3RvUG7LyA+V1GFPZQjqyRbI
kHgug7AY8j/KuDjQmP+OlMTm2EcCFsoERgx6YN4udsOGmwPR5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpcfIxOQ5Z0XtZzTOrqlPwY7kJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWZkMGYzY2EtMzJjNC0z
YWVjLWI3ZjctNzAzYzI0NDcwN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuqlxKnGi0I5K8kAwo8ScGAWZg8ET7N5mtsDIsDCa5nbwZTOy6nTyDn
MWE8kawkoBOYu3Ol7R8uT1C0WwFm7mSnNeSCN95h3TXFVvZkI1PDl9NEUq/gaGij
ypqhXLOf6KoN8kYufgQiqqYmQ2RYEy9VXeF982/zN0Oc1hy6SnWQdZhNYIglVhx8
kE+cbYwyqE/ZU2Luhmdlv2kjqTn6zds229LTW5dVwCFy0kzFwW5wGjTY5Wo7oOSc
f8TZIfy3AfBTyJZP0Kp1nZE5koZJHaswlTBZlTJrZQuo50PNX73UeO6lk7UIfcYn
qS9hkQaWEB6z4h/aAsy6Dsdc4pyWnMI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:05 2025 by rpki-client on console.sobornost.net