Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa
File:                     b7045a60-4c62-39c8-949c-52968d1cb529.roa (raw, json)
Hash identifier:          QJQ7IIf85U2hySW0iyD7/DdGh6dTqXo2yH37rA0QBp8=
Subject key identifier:   7E:62:8A:EC:20:DB:62:28:24:9D:49:6F:5E:92:BD:4B:FD:58:29:4B
Certificate issuer:       /CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
Certificate serial:       010D0C9F432858496B7ED1B1915FEDEA071E0280
Authority key identifier: E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     40244
IP address blocks:        67.231.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:d1:b1:91:5f:ed:ea:07:1e:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7497a3b-a0f9-45bd-ab0b-4e737c88063c
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=ad0eef6f-2e27-4eea-ac9c-c3ea059b6a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:d4:1f:2a:e4:29:7d:f3:25:cd:db:20:a4:
                    70:cc:44:01:75:b5:f0:f3:5e:b5:f8:12:f8:2f:32:
                    98:ff:55:84:bc:d9:c9:42:e7:5e:8d:ab:f4:3f:75:
                    eb:53:15:0d:71:ed:af:ca:02:23:29:da:2c:40:df:
                    61:8b:0e:e4:ff:6d:b8:30:63:98:fb:fa:9f:0e:ab:
                    76:65:74:b5:b8:64:55:c9:a4:5f:40:0c:ac:5e:b8:
                    ad:f1:e4:2c:5a:40:3a:5d:0c:5a:0a:ba:16:97:dd:
                    ed:2b:7b:3f:64:ea:22:9d:5c:cf:5b:ef:8e:55:16:
                    74:dc:10:bd:d2:b4:40:ba:ab:79:83:4b:74:6a:16:
                    99:81:16:c4:86:14:04:28:c8:67:4d:2f:a5:ef:dd:
                    55:1a:0c:d5:67:29:e5:ac:c0:c5:f3:02:41:6b:5d:
                    81:61:c2:a1:f2:f7:51:bb:82:a9:0d:c8:a6:44:24:
                    da:ee:23:23:ae:ce:5f:43:fa:7e:76:64:fe:d2:12:
                    13:89:9d:14:98:de:fb:d4:51:48:b1:88:7f:c2:0e:
                    45:c0:91:78:69:33:16:31:9f:f9:ac:ad:51:96:9d:
                    47:14:c3:6a:bf:8c:2d:48:98:c9:1d:62:2a:f0:2d:
                    67:2d:20:a7:3e:3e:53:1e:67:84:b6:83:eb:45:bc:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:62:8A:EC:20:DB:62:28:24:9D:49:6F:5E:92:BD:4B:FD:58:29:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7045a60-4c62-39c8-949c-52968d1cb529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:88:1A:9F:07:88:91:03:FC:90:32:EF:61:DF:4C:A9:16:FD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b7497a3b-a0f9-45bd-ab0b-4e737c88063c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c4:a1:f0:7c:0c:72:0b:ae:b5:c1:cf:d6:54:20:d3:a2:54:
         3a:e6:d8:55:5b:a7:3c:27:26:6c:38:c6:bf:7c:75:6a:1d:2b:
         91:d5:56:98:97:90:4a:2f:55:b8:8d:64:4b:9c:34:b9:3c:dd:
         63:89:47:b3:1f:76:a7:20:99:05:ea:1e:21:ad:ce:5c:41:2b:
         ee:9d:91:3f:90:10:21:4d:52:ee:11:0f:38:b9:c5:97:15:ca:
         de:b9:20:0f:c6:21:ce:84:47:16:9e:19:fd:e7:e3:af:f9:62:
         b9:79:40:97:65:b8:9e:a5:46:3c:67:84:79:b0:db:d0:66:c8:
         8b:aa:38:d9:ca:1a:45:84:e7:d8:a4:b2:40:a8:4c:63:29:04:
         82:19:ef:1f:c5:4a:8a:7c:00:90:e8:83:c7:76:3d:4c:5b:44:
         f9:5f:17:e3:10:a4:77:df:51:9a:44:ba:98:03:17:85:22:93:
         dc:e6:38:88:c6:38:ff:e2:bc:5d:aa:f6:95:c1:5e:69:4d:57:
         59:07:08:26:9d:b9:94:e4:22:c5:b0:f6:7a:21:b6:b5:05:69:
         b6:03:f5:52:05:06:58:a7:6d:98:e8:95:2f:55:6b:51:73:c7:
         f2:93:4c:ee:50:81:51:1b:e0:d0:c6:10:74:aa:4b:ef:c5:15:
         24:9a:e7:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftGxkV/t6gceAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0OTdhM2ItYTBmOS00NWJkLWFiMGItNGU3MzdjODgw
NjNjMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YWQwZWVmNmYtMmUyNy00ZWVhLWFjOWMtYzNlYTA1OWI2YTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSTUHyrkKX3zJc3bIKRwzEQBdbXw8161+BL4
LzKY/1WEvNnJQudejav0P3XrUxUNce2vygIjKdosQN9hiw7k/224MGOY+/qfDqt2
ZXS1uGRVyaRfQAysXrit8eQsWkA6XQxaCroWl93tK3s/ZOoinVzPW++OVRZ03BC9
0rRAuqt5g0t0ahaZgRbEhhQEKMhnTS+l791VGgzVZynlrMDF8wJBa12BYcKh8vdR
u4KpDcimRCTa7iMjrs5fQ/p+dmT+0hITiZ0UmN771FFIsYh/wg5FwJF4aTMWMZ/5
rK1Rlp1HFMNqv4wtSJjJHWIq8C1nLSCnPj5THmeEtoPrRbx8iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH5iiuwg22IoJJ1Jb16SvUv9WClLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5
N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTczN2M4ODA2M2MvYjcwNDVhNjAtNGM2Mi0z
OWM4LTk0OWMtNTI5NjhkMWNiNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjc0OTdhM2ItYTBmOS00NWJkLWFi
MGItNGU3MzdjODgwNjNjL2I3NDk3YTNiLWEwZjktNDViZC1hYjBiLTRlNzM3Yzg4
MDYzYy5jcmwwHwYDVR0jBBgwFoAU5diIGp8HiJED/JAy72HfTKkW/RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzQ5N2EzYi1hMGY5LTQ1YmQtYWIwYi00ZTcz
N2M4ODA2M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXEofB8DHILrrXBz9ZUINOiVDrm2FVbpzwnJmw4xr98dWodK5HVVpiX
kEovVbiNZEucNLk83WOJR7MfdqcgmQXqHiGtzlxBK+6dkT+QECFNUu4RDzi5xZcV
yt65IA/GIc6ERxaeGf3n46/5Yrl5QJdluJ6lRjxnhHmw29BmyIuqONnKGkWE59ik
skCoTGMpBIIZ7x/FSop8AJDog8d2PUxbRPlfF+MQpHffUZpEupgDF4Uik9zmOIjG
OP/ivF2q9pXBXmlNV1kHCCaduZTkIsWw9nohtrUFabYD9VIFBlinbZjolS9Va1Fz
x/KTTO5QgVEb4NDGEHSqS+/FFSSa5yw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:11 2025 by rpki-client on console.sobornost.net