Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa
File:                     d3a3f524-d194-33cd-a5b9-49d4b272b875.roa (raw, json)
Hash identifier:          qW5eFtQiAiuwJWwncFoV7wg8ys5XWwvjnfj52wl1QFY=
Subject key identifier:   F2:F8:A9:C0:5F:27:4D:59:79:CC:F0:5E:41:C6:AE:B9:F4:9C:30:08
Certificate issuer:       /CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
Certificate serial:       010D0C9F432858496CE44AE07ADD2CAEC42F6B80
Authority key identifier: FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     18994
IP address blocks:        162.134.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:4a:e0:7a:dd:2c:ae:c4:2f:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f9acf2-5a11-492f-93e1-1e221a6f4a92
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=25f687fb-8204-433a-b73c-2f27b989814b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3b:9f:86:66:03:ab:05:bb:f1:25:ef:21:24:
                    1b:8a:3f:83:c0:9d:6a:10:96:cc:41:96:ca:a9:ee:
                    34:e1:54:21:29:b3:9a:12:ed:d7:1b:9a:42:83:7b:
                    88:63:7c:d5:53:47:b8:0f:60:00:dd:4e:57:ed:17:
                    71:a3:06:7c:89:f4:7a:56:d9:16:d3:0d:f4:25:e5:
                    5e:68:58:9f:b9:77:85:77:35:6c:6d:02:ba:e8:a6:
                    80:75:a0:86:45:e0:08:4a:8d:b2:27:bf:2d:56:42:
                    5d:d8:05:76:35:6a:23:a3:9f:ad:14:ce:bd:db:cf:
                    2a:89:0b:61:97:7d:3b:76:b5:d5:01:78:0e:25:29:
                    18:a3:c0:c9:ec:03:8b:95:d5:97:bb:80:48:dc:57:
                    ab:29:ed:24:20:5f:90:00:35:e4:e2:30:af:a8:20:
                    10:33:c5:54:5b:6d:85:46:8c:b5:42:04:79:cd:c2:
                    6b:53:40:90:86:5d:1a:70:d1:1b:9a:35:58:81:5a:
                    76:a7:f1:09:24:3a:3d:8c:0a:ab:e6:58:41:dc:0c:
                    68:4f:f2:10:65:8c:e5:9c:17:29:5f:0e:c1:e0:6d:
                    54:c3:e4:3c:2f:7a:43:73:9d:f0:57:5a:d0:4c:2b:
                    34:91:ee:69:60:93:64:ac:64:7b:03:ce:78:ed:32:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F8:A9:C0:5F:27:4D:59:79:CC:F0:5E:41:C6:AE:B9:F4:9C:30:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/d3a3f524-d194-33cd-a5b9-49d4b272b875.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.crl

            X509v3 Authority Key Identifier:
                keyid:FF:8B:C2:C5:BA:95:8B:A9:11:C9:5C:27:5A:70:80:46:FB:4B:99:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a0f9acf2-5a11-492f-93e1-1e221a6f4a92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.134.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:52:dd:96:30:25:34:80:1a:2c:c5:ca:aa:67:77:38:17:
         91:a0:e3:9b:16:ef:d6:ef:fc:6a:0b:76:85:b7:4b:ae:c5:f3:
         51:bb:7b:dc:72:18:33:d8:bf:df:93:2d:51:aa:79:b2:66:e1:
         ca:dc:5a:88:35:41:3a:44:8e:ff:7d:31:60:e9:42:d7:d8:0f:
         37:59:65:72:a7:fe:82:e2:92:38:c9:ba:8f:54:65:b9:1d:4c:
         6f:06:54:a3:3a:2a:e5:79:13:e7:5b:4f:77:cd:65:50:a6:5a:
         9c:78:ae:74:79:d7:ff:e5:14:5c:42:0a:4e:02:e9:e8:03:0d:
         2c:d4:88:36:d9:cf:a2:32:67:19:37:25:e2:11:a7:e9:d6:07:
         a6:22:b1:d2:13:f8:d2:01:86:b3:80:35:7f:5f:b6:cb:2c:65:
         c2:29:7c:33:f2:0e:99:80:40:c4:6f:96:b5:90:c5:77:bc:ff:
         77:e5:c8:80:10:dc:72:37:93:df:08:82:cb:71:87:3d:78:1a:
         c4:09:52:30:e4:9f:69:23:c7:fc:dd:9a:b5:1c:3f:36:73:f7:
         74:50:1e:47:46:c4:31:8a:45:07:ad:f1:c9:16:bb:b7:0e:99:
         42:2d:dd:eb:d4:fe:0e:67:f9:be:50:b5:e5:f3:5a:31:7b:3b:
         0f:f9:af:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5Erget0srsQva4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTBmOWFjZjItNWExMS00OTJmLTkzZTEtMWUyMjFhNmY0
YTkyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
MjVmNjg3ZmItODIwNC00MzNhLWI3M2MtMmYyN2I5ODk4MTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjufhmYDqwW78SXvISQbij+DwJ1qEJbMQZbK
qe404VQhKbOaEu3XG5pCg3uIY3zVU0e4D2AA3U5X7RdxowZ8ifR6VtkW0w30JeVe
aFifuXeFdzVsbQK66KaAdaCGReAISo2yJ78tVkJd2AV2NWojo5+tFM69288qiQth
l307drXVAXgOJSkYo8DJ7AOLldWXu4BI3FerKe0kIF+QADXk4jCvqCAQM8VUW22F
Roy1QgR5zcJrU0CQhl0acNEbmjVYgVp2p/EJJDo9jAqr5lhB3AxoT/IQZYzlnBcp
Xw7B4G1Uw+Q8L3pDc53wV1rQTCs0ke5pYJNkrGR7A8547TKMVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPL4qcBfJ01ZeczwXkHGrrn0nDAIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5
YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIyMWE2ZjRhOTIvZDNhM2Y1MjQtZDE5NC0z
M2NkLWE1YjktNDlkNGIyNzJiODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTBmOWFjZjItNWExMS00OTJmLTkz
ZTEtMWUyMjFhNmY0YTkyL2EwZjlhY2YyLTVhMTEtNDkyZi05M2UxLTFlMjIxYTZm
NGE5Mi5jcmwwHwYDVR0jBBgwFoAU/4vCxbqVi6kRyVwnWnCARvtLmYgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMGY5YWNmMi01YTExLTQ5MmYtOTNlMS0xZTIy
MWE2ZjRhOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAooaRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO/Ut2WMCU0gBosxcqqZ3c4F5Gg45sW79bv/GoLdoW3S67F81G7e9xy
GDPYv9+TLVGqebJm4crcWog1QTpEjv99MWDpQtfYDzdZZXKn/oLikjjJuo9UZbkd
TG8GVKM6KuV5E+dbT3fNZVCmWpx4rnR51//lFFxCCk4C6egDDSzUiDbZz6IyZxk3
JeIRp+nWB6YisdIT+NIBhrOANX9ftsssZcIpfDPyDpmAQMRvlrWQxXe8/3flyIAQ
3HI3k98Igstxhz14GsQJUjDkn2kjx/zdmrUcPzZz93RQHkdGxDGKRQet8ckWu7cO
mUIt3evU/g5n+b5QteXzWjF7Ow/5r+g=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net