Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1fb18ab6-33b4-3e2d-a948-f8b015abc9c0.roa
File:                     1fb18ab6-33b4-3e2d-a948-f8b015abc9c0.roa (raw, json)
Hash identifier:          D6c/NYTcV9DgU86Y9BU65pNAgElDiEhPeslP1F/gpw4=
Subject key identifier:   38:CD:55:01:CB:CA:CD:00:91:0E:A7:8B:29:39:69:FB:D4:88:A6:AE
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F432858497AD9BF8819F6D568C54684C0
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1fb18ab6-33b4-3e2d-a948-f8b015abc9c0.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     2559
IP address blocks:        198.217.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:bf:88:19:f6:d5:68:c5:46:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=99032db2-122b-4e7d-bb65-03ccb635e0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:b0:c0:aa:eb:a0:ae:cf:e1:e2:8f:51:3f:
                    98:70:d6:4f:f0:30:47:3c:e9:fb:fb:d0:54:21:b6:
                    d2:fe:cb:14:9e:29:9c:8a:0c:49:ef:31:d8:bd:c6:
                    68:5c:29:26:33:0a:26:65:fd:5f:f0:c3:85:e0:a6:
                    f4:4f:90:73:c8:ba:1d:28:eb:45:d1:56:11:1c:9e:
                    f9:9c:99:60:c4:f5:fa:8d:44:6e:52:69:d4:87:16:
                    83:db:7d:dd:e7:57:d8:ac:f6:da:f4:61:38:89:23:
                    e0:8f:ac:1f:7d:48:20:5e:80:3f:de:bb:6b:bb:2e:
                    fe:20:ad:2e:7f:a6:0d:42:f6:b4:15:8f:1d:b3:99:
                    84:65:14:1c:4b:a7:85:31:29:cb:71:c4:16:bb:15:
                    58:ce:dc:01:4f:9d:1a:74:70:e6:1b:a4:53:b1:ef:
                    f8:25:c1:66:b8:d7:24:20:20:c1:97:c8:ae:77:33:
                    8f:94:95:24:09:28:0c:e0:c6:75:79:ae:27:a8:61:
                    4d:0d:dc:3b:0f:47:9f:a5:f0:81:f5:0e:39:97:6c:
                    6a:c6:8f:d5:50:24:34:7a:4b:34:9a:5b:b9:de:cb:
                    e6:85:e5:c9:32:f9:7f:7d:05:9e:e5:36:e1:6f:88:
                    78:5c:23:d1:97:0c:1c:d2:1d:d7:0d:fe:e4:c8:cb:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CD:55:01:CB:CA:CD:00:91:0E:A7:8B:29:39:69:FB:D4:88:A6:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/1fb18ab6-33b4-3e2d-a948-f8b015abc9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:4f:68:4e:d4:d8:6d:67:66:be:4f:2d:32:9b:cb:7d:a6:
         9f:a0:84:8b:1f:43:29:fc:93:da:90:0f:3f:7a:2c:b8:86:a4:
         b8:36:57:40:5b:e6:ec:c8:fe:ce:b3:b0:04:50:93:83:f5:85:
         ef:e5:53:46:e7:cc:66:1c:54:2f:ea:c9:b5:d5:57:8f:b7:59:
         d1:ef:e6:f1:89:fd:2d:fc:4e:2a:25:ff:6b:fb:da:14:da:38:
         ae:be:cb:8b:6b:b9:40:9e:3c:ed:c3:c5:f5:ff:0a:c0:06:da:
         50:45:7a:3c:a1:c7:01:d3:3b:56:aa:51:b4:f9:18:7f:f1:d4:
         a5:72:77:fc:20:3e:57:81:02:5c:df:44:ea:c7:c1:38:97:d5:
         77:0b:0e:e8:ce:a9:57:39:c1:96:3f:d3:e3:35:1a:6b:fb:6f:
         31:be:11:70:a7:52:e5:b3:e7:fc:f7:9b:91:1c:44:ff:54:5d:
         21:c9:a1:60:74:24:5b:ff:99:80:85:07:34:12:84:1c:b1:e8:
         d5:b9:72:02:31:94:2a:df:96:a2:55:22:41:4d:a6:d4:60:70:
         eb:d0:33:4e:56:ed:3c:f9:59:65:76:f8:26:36:e1:09:85:0a:
         55:bb:8d:e8:36:33:e7:c3:48:69:a1:80:eb:6e:90:8d:1d:f7:
         32:cc:90:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62b+IGfbVaMVGhMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk
OTkwMzJkYjItMTIyYi00ZTdkLWJiNjUtMDNjY2I2MzVlMGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8+wwKrroK7P4eKPUT+YcNZP8DBHPOn7+9BU
IbbS/ssUnimcigxJ7zHYvcZoXCkmMwomZf1f8MOF4Kb0T5BzyLodKOtF0VYRHJ75
nJlgxPX6jURuUmnUhxaD233d51fYrPba9GE4iSPgj6wffUggXoA/3rtruy7+IK0u
f6YNQva0FY8ds5mEZRQcS6eFMSnLccQWuxVYztwBT50adHDmG6RTse/4JcFmuNck
ICDBl8iudzOPlJUkCSgM4MZ1ea4nqGFNDdw7D0efpfCB9Q45l2xqxo/VUCQ0eks0
mlu53svmheXJMvl/fQWe5Tbhb4h4XCPRlwwc0h3XDf7kyMuJnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDjNVQHLys0AkQ6niyk5afvUiKauMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvMWZiMThhYjYtMzNiNC0z
ZTJkLWE5NDgtZjhiMDE1YWJjOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtmLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9gT2hO1NhtZ2a+Ty0ym8t9pp+ghIsfQyn8k9qQDz96LLiGpLg2V0Bb
5uzI/s6zsARQk4P1he/lU0bnzGYcVC/qybXVV4+3WdHv5vGJ/S38Tiol/2v72hTa
OK6+y4truUCePO3DxfX/CsAG2lBFejyhxwHTO1aqUbT5GH/x1KVyd/wgPleBAlzf
ROrHwTiX1XcLDujOqVc5wZY/0+M1Gmv7bzG+EXCnUuWz5/z3m5EcRP9UXSHJoWB0
JFv/mYCFBzQShByx6NW5cgIxlCrflqJVIkFNptRgcOvQM05W7Tz5WWV2+CY24QmF
ClW7jeg2M+fDSGmhgOtukI0d9zLMkDk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net