Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa
File:                     bd227794-03b0-3e1a-98e0-833817b1a3dc.roa (raw, json)
Hash identifier:          Xb86Hx1Ubtcq+JrG3Yd0ZAUSpRE8oUoF4WnJ1GkA4bI=
Subject key identifier:   20:7D:50:B1:3D:77:3F:FE:7D:16:61:F9:05:79:02:50:5D:B8:0C:B3
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F432858496CE44AFC214BCEB255C52000
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     53768
IP address blocks:        162.134.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4a:fc:21:4b:ce:b2:55:c5:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=5b97cad4-2381-477b-80f4-8dc610d88a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:03:f3:4e:03:c3:ad:13:a3:e0:9f:d8:cf:
                    c4:d9:01:76:37:e8:04:8e:09:08:a9:22:8d:85:3a:
                    74:fa:6d:c7:f8:23:a1:1e:5b:b2:3a:ec:88:2d:70:
                    94:fc:8c:31:58:6a:ec:5c:2d:51:5c:bf:26:e2:48:
                    bd:c1:61:d1:a0:8b:b6:77:e1:c1:51:1d:ca:cf:0c:
                    f8:60:7d:9c:ca:ec:3b:cf:6d:33:d5:44:3b:35:93:
                    cc:a6:8e:fa:79:37:0a:a1:4e:bb:e0:2e:51:af:70:
                    c3:18:06:32:24:70:87:14:7b:54:09:8e:05:9b:c9:
                    dc:db:3c:9f:df:40:e2:57:68:d8:96:38:c2:30:98:
                    42:bf:e6:8a:71:f1:f7:49:8a:4b:73:bc:86:3b:2d:
                    fb:c2:b3:5f:d4:d6:07:d0:94:39:79:a5:c7:33:30:
                    d0:68:b0:5f:16:f0:ff:59:91:eb:f3:a6:86:e7:83:
                    0c:5a:e1:7b:1c:80:b3:b8:29:95:02:b9:5d:41:66:
                    35:b2:10:72:63:af:b2:61:17:9b:be:77:d6:2d:2e:
                    82:d5:a8:c5:a6:bb:eb:8b:a6:86:60:f3:f0:a2:03:
                    c3:3f:bc:bd:25:e7:44:ea:01:b7:fd:66:3e:c2:46:
                    e1:b1:a8:3e:3e:b2:d5:08:fe:ca:03:83:46:f0:7a:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7D:50:B1:3D:77:3F:FE:7D:16:61:F9:05:79:02:50:5D:B8:0C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/bd227794-03b0-3e1a-98e0-833817b1a3dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:92:3e:cd:0f:f7:89:12:ef:7e:24:c9:07:b5:82:89:8c:
         30:35:6a:a6:fd:ff:d3:11:36:5e:bc:7c:84:b6:31:15:21:d7:
         53:b9:9a:e5:d1:17:42:7c:63:e7:ad:04:4f:78:16:17:d6:f2:
         c3:39:a7:bd:ea:04:2e:2b:f8:c1:ca:90:08:7b:41:6b:f6:43:
         81:8c:98:d6:10:b9:36:e1:49:b9:96:64:d4:82:03:ae:e0:d6:
         be:82:d0:f3:24:9c:29:65:d4:1b:80:52:96:60:27:27:cb:68:
         cb:f1:6d:7e:c7:06:49:6d:50:0f:89:a1:8e:dd:80:ef:39:eb:
         2a:1e:6f:5a:fc:07:80:91:85:1b:c7:4d:ad:fc:eb:18:c5:b2:
         84:70:ed:db:71:62:15:19:73:bb:90:15:7a:49:4f:55:7d:4b:
         44:40:41:64:ee:26:5c:bf:35:15:87:f0:f9:4a:ef:00:d9:80:
         86:0c:33:17:44:bf:be:b8:f1:5e:10:f8:d5:3c:a1:8e:e9:4f:
         9f:3c:0b:db:40:fa:7c:9d:3e:1f:b9:07:9b:ab:2d:66:eb:21:
         36:19:c9:da:8e:71:36:7e:7b:70:bf:3a:8f:dc:ce:bc:9e:e0:
         fc:30:d6:21:cf:f6:bd:8b:d3:4b:de:72:5d:99:7f:b6:83:f6:
         f0:2f:8e:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Er8IUvOslXFIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0
YTkyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NWI5N2NhZDQtMjM4MS00NzdiLTgwZjQtOGRjNjEwZDg4YTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fsD804Dw60To+Cf2M/E2QF2N+gEjgkIqSKN
hTp0+m3H+COhHluyOuyILXCU/IwxWGrsXC1RXL8m4ki9wWHRoIu2d+HBUR3Kzwz4
YH2cyuw7z20z1UQ7NZPMpo76eTcKoU674C5Rr3DDGAYyJHCHFHtUCY4Fm8nc2zyf
30DiV2jYljjCMJhCv+aKcfH3SYpLc7yGOy37wrNf1NYH0JQ5eaXHMzDQaLBfFvD/
WZHr86aG54MMWuF7HICzuCmVArldQWY1shByY6+yYRebvnfWLS6C1ajFprvri6aG
YPPwogPDP7y9JedE6gG3/WY+wkbhsag+PrLVCP7KA4NG8HomQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCB9ULE9dz/+fRZh+QV5AlBduAyzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5
YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvYmQyMjc3OTQtMDNiMC0z
ZTFhLTk4ZTAtODMzODE3YjFhM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz
ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm
NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy
MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEooYgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABorkj7ND/eJEu9+JMkHtYKJjDA1aqb9/9MRNl68fIS2MRUh11O5muXR
F0J8Y+etBE94FhfW8sM5p73qBC4r+MHKkAh7QWv2Q4GMmNYQuTbhSbmWZNSCA67g
1r6C0PMknCll1BuAUpZgJyfLaMvxbX7HBkltUA+JoY7dgO856yoeb1r8B4CRhRvH
Ta386xjFsoRw7dtxYhUZc7uQFXpJT1V9S0RAQWTuJly/NRWH8PlK7wDZgIYMMxdE
v7648V4Q+NU8oY7pT588C9tA+nydPh+5B5urLWbrITYZydqOcTZ+e3C/Oo/czrye
4Pww1iHP9r2L00vecl2Zf7aD9vAvjiE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net