Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa
File:                     1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa (raw, json)
Hash identifier:          OE90QWVN7B+1hdKz9L+vo6nVpz3TtNZoceXkvFNKHrI=
Subject key identifier:   07:0B:03:99:75:0F:F4:A0:78:C6:A1:5F:2F:87:14:6E:11:DD:0C:BB
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584968B4226037714CEE2E039680
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     13763
IP address blocks:        141.140.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:22:60:37:71:4c:ee:2e:03:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=afe57238-d853-45b8-b854-ec162da2bcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:92:b2:ee:12:c5:64:0b:96:8b:46:bd:a5:
                    64:26:f8:61:99:a8:b0:68:f4:51:78:7d:1d:80:46:
                    72:a4:47:ed:f2:9b:9e:fb:81:f6:4f:8f:6f:0a:d8:
                    4c:94:73:7a:99:c4:c0:bd:31:30:88:56:a6:b9:5d:
                    7a:74:be:9a:27:48:5d:d4:83:2f:f1:16:72:0c:95:
                    28:a2:2c:62:cc:0d:af:fe:39:9e:03:57:a3:ce:a6:
                    4f:52:d5:51:14:63:df:66:ae:fc:04:29:d6:b4:5f:
                    41:2e:0d:61:5d:c9:10:6c:1f:09:bb:94:59:6f:5d:
                    ff:5d:d5:39:a9:c4:12:99:d2:3e:8d:b0:a9:ba:46:
                    51:2d:ee:74:e3:57:4a:ab:d2:f4:08:48:88:39:de:
                    fd:71:6a:23:da:3f:38:93:51:22:18:cd:b5:29:d3:
                    03:f5:11:22:90:eb:c5:4b:63:10:19:15:55:9e:1a:
                    eb:eb:77:58:df:60:f0:5e:cd:ee:63:1e:61:f4:e1:
                    69:26:ed:01:81:12:fb:ce:4d:01:e3:b6:80:e7:3f:
                    13:03:47:94:bc:12:23:c5:cd:cf:0b:9f:09:ad:13:
                    a1:eb:f7:bb:9a:e9:8e:86:f9:96:0f:6e:21:2f:36:
                    d6:44:68:3e:2f:8f:b2:f1:e0:5a:2f:8b:23:31:56:
                    06:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:03:99:75:0F:F4:A0:78:C6:A1:5F:2F:87:14:6E:11:DD:0C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:c8:da:96:8e:64:34:c2:16:a7:43:23:e8:85:b7:d2:6d:
         da:2a:3a:bf:85:e4:93:0a:12:b7:a6:14:e0:7f:a6:8b:36:29:
         6d:b8:a1:ae:fd:a4:06:4d:88:18:f9:3e:8d:ef:c0:0c:8e:7c:
         4a:42:fe:cd:bc:f2:57:ef:e2:2a:ea:7d:e4:22:0a:dc:64:ba:
         04:06:70:ea:94:b0:ad:0d:b8:76:67:33:6a:e0:c1:19:3c:61:
         02:5e:71:e6:6d:f7:8e:30:48:ff:22:01:0c:d9:ea:75:b0:3e:
         ae:21:7b:9d:7e:b0:09:10:d0:b5:cd:bf:9a:21:93:df:ad:a9:
         ba:64:d1:3d:c9:c5:b1:50:a2:7b:9a:4e:f4:09:21:97:ef:57:
         d3:4d:f4:6c:0f:4f:6f:63:85:d3:ec:47:aa:03:99:2d:82:78:
         3b:f0:2b:47:03:b0:8a:24:3c:87:d3:f6:80:e5:80:3d:00:b2:
         af:4f:bc:4e:fb:56:54:c9:0f:f6:d1:e0:ea:72:a7:26:ef:02:
         16:45:8a:0a:c4:05:62:e5:ed:77:d1:92:28:7c:bf:cb:93:d2:
         2e:4f:52:47:62:01:16:c9:cd:d7:2e:d3:93:4b:bd:70:6b:15:
         21:8e:fe:07:89:3d:29:ba:03:16:bc:bb:1e:43:24:40:27:16:
         b3:05:fa:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCJgN3FM7i4DloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk
YWZlNTcyMzgtZDg1My00NWI4LWI4NTQtZWMxNjJkYTJiY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4uSsu4SxWQLlotGvaVkJvhhmaiwaPRReH0d
gEZypEft8pue+4H2T49vCthMlHN6mcTAvTEwiFamuV16dL6aJ0hd1IMv8RZyDJUo
oixizA2v/jmeA1ejzqZPUtVRFGPfZq78BCnWtF9BLg1hXckQbB8Ju5RZb13/XdU5
qcQSmdI+jbCpukZRLe5041dKq9L0CEiIOd79cWoj2j84k1EiGM21KdMD9REikOvF
S2MQGRVVnhrr63dY32DwXs3uYx5h9OFpJu0BgRL7zk0B47aA5z8TA0eUvBIjxc3P
C58JrROh6/e7mumOhvmWD24hLzbWRGg+L4+y8eBaL4sjMVYGzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcLA5l1D/SgeMahXy+HFG4R3Qy7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMWUzYTNmYzgtNDNlZC0z
Y2U2LWE5NzYtNjEyMmJhNjYzZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpCyNqWjmQ0whanQyPohbfSbdoqOr+F5JMKEremFOB/pos2KW24oa79
pAZNiBj5Po3vwAyOfEpC/s288lfv4irqfeQiCtxkugQGcOqUsK0NuHZnM2rgwRk8
YQJeceZt944wSP8iAQzZ6nWwPq4he51+sAkQ0LXNv5ohk9+tqbpk0T3JxbFQonua
TvQJIZfvV9NN9GwPT29jhdPsR6oDmS2CeDvwK0cDsIokPIfT9oDlgD0Asq9PvE77
VlTJD/bR4OpypybvAhZFigrEBWLl7XfRkih8v8uT0i5PUkdiARbJzdcu05NLvXBr
FSGO/geJPSm6Axa8ux5DJEAnFrMF+gw=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:13 2025 by rpki-client on console.sobornost.net