Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa
File:                     e8c8d5c6-32bd-3820-990c-f66f5a163261.roa (raw, json)
Hash identifier:          dAYo1RxF4uNLwiqZfFI71q+ZX/ERGQYO9pb22eBhLoM=
Subject key identifier:   28:CB:B0:FE:9D:48:FB:E0:0C:CF:97:24:AD:B6:A4:73:51:4E:9B:D8
Certificate issuer:       /CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
Certificate serial:       010D0C9F432858497279B6F0A66B98A4E3B70180
Authority key identifier: 91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     398038
IP address blocks:        161.38.62.0/23 maxlen: 24
                          192.173.144.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b6:f0:a6:6b:98:a4:e3:b7:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dcaf072-199d-43a3-8b8a-0a2b28940ac6
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=c0a4ec50-24d8-40f1-a465-4955d63d22d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:0a:ef:63:78:1d:f7:58:bb:5e:52:f6:27:
                    d7:08:8d:84:ea:36:69:9b:ea:37:c2:c3:d1:f4:3d:
                    aa:69:21:a1:c0:0e:03:61:b5:3e:c7:c0:5a:22:72:
                    27:64:2c:1a:ec:ed:82:76:24:bb:68:4c:9d:1e:8c:
                    b9:ed:63:a9:75:81:9f:42:d7:32:d3:c7:1b:9f:bc:
                    7e:06:17:a3:7d:e6:98:07:ef:3b:64:9e:18:b9:8c:
                    7e:b9:86:1f:b9:95:68:ec:84:5c:c6:39:7a:1e:74:
                    99:33:a9:e6:77:66:be:f2:6f:ca:09:9f:c6:35:91:
                    6e:ff:44:d9:18:4b:62:9b:4e:b4:7e:54:bc:fc:22:
                    3c:95:85:4e:e2:8f:ea:24:b4:6e:07:8e:d6:84:03:
                    63:d3:6a:03:83:00:a5:51:27:82:d9:11:0b:e9:91:
                    e5:a5:80:9b:c7:84:df:5f:c9:f8:10:bc:b7:40:ec:
                    04:2d:b2:0a:4a:ef:16:81:84:3d:29:2d:e5:0d:4c:
                    fc:82:00:cc:3e:99:d7:e3:11:b6:79:db:b7:8d:6d:
                    f8:97:77:29:d7:70:09:a1:9e:26:cc:4e:24:b1:22:
                    a0:02:de:3a:c3:e1:9f:d2:c1:dd:a1:9e:be:64:3e:
                    ca:b7:eb:17:17:2f:e3:96:5b:e0:d5:b0:b9:8a:47:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:B0:FE:9D:48:FB:E0:0C:CF:97:24:AD:B6:A4:73:51:4E:9B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/e8c8d5c6-32bd-3820-990c-f66f5a163261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.crl

            X509v3 Authority Key Identifier:
                keyid:91:ED:8E:88:B0:FD:91:15:57:AE:29:AA:3B:C4:DE:A4:87:50:3D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0dcaf072-199d-43a3-8b8a-0a2b28940ac6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.62.0/23
                  192.173.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:7e:7d:1d:9d:db:41:86:dc:4d:c7:90:43:d5:bd:0d:d2:
         cc:d7:4d:3d:11:e9:55:df:d2:82:77:01:2b:92:38:af:cf:43:
         64:58:59:7a:78:b9:ce:00:3d:aa:d7:c6:3e:a2:b2:92:b2:99:
         96:61:62:14:66:f9:41:3d:5f:22:72:45:d9:d9:ab:65:4a:5a:
         37:fa:e5:1f:95:04:92:6a:27:79:fb:04:a8:e6:e2:8a:9d:c0:
         b1:e3:c0:c6:5f:a5:34:9d:24:ee:b4:2a:52:cf:89:44:2e:d9:
         5e:ec:15:bd:b4:bb:7e:1f:22:3b:e2:6f:84:f2:31:b1:ec:28:
         3c:1d:47:ae:83:00:74:b8:5a:aa:a7:e6:b0:d5:64:cf:72:36:
         7d:c4:ef:78:df:a7:ba:6a:c4:37:40:c3:ec:ed:75:01:16:97:
         d2:27:4b:e9:ce:98:40:a8:5f:36:88:52:f9:71:eb:6f:03:48:
         eb:b6:dd:5b:63:7a:6f:eb:5d:6c:25:1b:de:5b:92:a4:ad:cd:
         22:24:40:5b:ac:61:e6:a0:27:b9:ea:e2:41:4f:38:2e:99:8a:
         3d:e4:ac:94:14:c8:a4:04:47:39:12:1f:8e:57:a0:e3:4d:27:
         f1:84:90:c1:9b:c7:9f:e6:36:25:60:7c:ad:72:5b:29:55:0d:
         2e:d0:b0:04
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElyebbwpmuYpOO3AYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRjYWYwNzItMTk5ZC00M2EzLThiOGEtMGEyYjI4OTQw
YWM2MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
YzBhNGVjNTAtMjRkOC00MGYxLWE0NjUtNDk1NWQ2M2QyMmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQQK72N4HfdYu15S9ifXCI2E6jZpm+o3wsPR
9D2qaSGhwA4DYbU+x8BaInInZCwa7O2CdiS7aEydHoy57WOpdYGfQtcy08cbn7x+
BhejfeaYB+87ZJ4YuYx+uYYfuZVo7IRcxjl6HnSZM6nmd2a+8m/KCZ/GNZFu/0TZ
GEtim060flS8/CI8lYVO4o/qJLRuB47WhANj02oDgwClUSeC2REL6ZHlpYCbx4Tf
X8n4ELy3QOwELbIKSu8WgYQ9KS3lDUz8ggDMPpnX4xG2edu3jW34l3cp13AJoZ4m
zE4ksSKgAt46w+Gf0sHdoZ6+ZD7Kt+sXFy/jllvg1bC5ikfI1wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCjLsP6dSPvgDM+XJK22pHNRTpvYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNh
ZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJiMjg5NDBhYzYvZThjOGQ1YzYtMzJiZC0z
ODIwLTk5MGMtZjY2ZjVhMTYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGRjYWYwNzItMTk5ZC00M2EzLThi
OGEtMGEyYjI4OTQwYWM2LzBkY2FmMDcyLTE5OWQtNDNhMy04YjhhLTBhMmIyODk0
MGFjNi5jcmwwHwYDVR0jBBgwFoAUke2OiLD9kRVXrimqO8TepIdQPZ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZGNhZjA3Mi0xOTlkLTQzYTMtOGI4YS0wYTJi
Mjg5NDBhYzYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoSY+AwQD
wK2QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAI5wfn0dndtBhtxNx5BD1b0N0szXTT0R6VXf0oJ3ASuSOK/P
Q2RYWXp4uc4AParXxj6ispKymZZhYhRm+UE9XyJyRdnZq2VKWjf65R+VBJJqJ3n7
BKjm4oqdwLHjwMZfpTSdJO60KlLPiUQu2V7sFb20u34fIjvib4TyMbHsKDwdR66D
AHS4Wqqn5rDVZM9yNn3E73jfp7pqxDdAw+ztdQEWl9InS+nOmECoXzaIUvlx628D
SOu23Vtjem/rXWwlG95bkqStzSIkQFusYeagJ7nq4kFPOC6Zij3krJQUyKQERzkS
H45XoONNJ/GEkMGbx5/mNiVgfK1yWylVDS7QsAQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net