Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa
File:                     5d321907-381d-32af-ad76-b3fd1b984280.roa (raw, json)
Hash identifier:          0HVqKEtATb6AFmVSWZxM+wNUyaR7BZyMyfO9n0R6mug=
Subject key identifier:   B8:B6:B1:DC:35:68:20:B7:99:8D:A1:ED:9B:95:E3:2D:95:E5:FB:87
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F43285849781443337FE0F2B2609AD0C0
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa
Signing time:             Wed 09 Apr 2025 13:11:39 +0000
ROA not before:           Wed 09 Apr 2025 13:11:39 +0000
ROA not after:            Tue 08 Jul 2025 13:11:39 +0000
asID:                     31942
IP address blocks:        199.102.120.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:14:43:33:7f:e0:f2:b2:60:9a:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Apr  9 13:11:39 2025 GMT
            Not After : Jul  8 13:11:39 2025 GMT
        Subject: CN=8161cc27-41c9-4ac0-9b3c-e5629a63559a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:59:aa:ed:2e:65:3a:04:dc:07:f4:1a:ad:ba:
                    35:a8:a8:8a:74:4f:89:57:f0:f4:4c:cc:d1:52:bf:
                    d3:24:0c:f1:05:38:1c:03:4b:6b:bc:d5:1a:8d:fc:
                    26:ac:56:58:78:cd:40:06:81:29:b4:f8:e6:86:be:
                    bf:fc:18:cb:44:0e:10:2b:cc:1e:45:5b:61:52:bd:
                    44:81:2a:ee:a6:6e:35:5e:53:19:65:ed:ff:af:ef:
                    ce:0a:c1:e5:69:ae:07:58:e2:7c:1d:62:ca:29:e2:
                    b8:e1:4c:06:35:e7:e1:ca:9d:7c:fa:9c:a4:48:1d:
                    92:96:a5:7f:ad:ab:56:8c:92:bf:21:3d:e6:c4:b4:
                    e4:dd:30:bf:f8:84:3a:3d:ef:57:f2:7f:5b:ea:87:
                    21:90:7b:08:19:a4:99:74:06:a0:b7:5d:cc:3c:7c:
                    98:9e:26:c9:52:c4:54:94:2a:9e:42:ab:2e:f7:82:
                    1f:d1:64:a7:52:8d:d5:57:e5:84:56:cb:43:21:74:
                    71:6e:0c:ac:82:ef:17:39:55:3f:be:b6:10:3c:4e:
                    d0:62:de:89:c5:6c:61:e7:47:3e:77:19:01:ba:e4:
                    7d:69:3b:91:11:5e:a6:4d:04:18:ca:a2:f7:fe:87:
                    8d:63:19:85:51:68:0c:80:b2:a2:ce:02:db:a3:92:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B6:B1:DC:35:68:20:B7:99:8D:A1:ED:9B:95:E3:2D:95:E5:FB:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/5d321907-381d-32af-ad76-b3fd1b984280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:65:83:3d:fe:8c:b3:dc:10:4a:cd:22:91:a0:eb:79:bb:
         26:ad:98:f9:94:54:a3:aa:71:8e:29:c6:21:65:36:69:ce:ac:
         eb:32:0e:f3:7b:c5:88:06:17:f1:8d:a3:df:3d:19:7c:de:73:
         c5:24:4f:90:15:dd:b3:7e:85:82:f2:d6:f7:09:dc:e4:8d:4e:
         3e:bb:ca:09:23:e7:24:2b:42:f6:06:84:43:11:ba:19:96:e2:
         25:f9:9c:78:b6:89:9f:ad:5e:bc:20:95:93:b5:6f:51:68:81:
         7c:88:bb:55:66:77:03:44:45:05:da:5e:a6:31:0b:0a:90:32:
         e4:56:13:53:fe:60:58:57:d0:b5:23:91:c5:1d:38:03:bb:92:
         01:bd:b9:19:d0:b5:ae:84:3c:35:7c:c2:79:7b:69:6a:7a:54:
         a0:25:b2:b4:cb:71:41:0a:0c:fa:2c:ab:4c:8a:8d:c8:81:88:
         34:82:21:a3:6e:57:79:49:b4:6e:d2:df:89:5c:f1:2d:42:e1:
         73:6d:06:d9:c0:5a:29:24:bc:d2:e9:05:17:ea:21:69:07:94:
         fa:28:df:13:e8:0e:b3:d3:b2:5b:8a:a9:dc:34:50:a0:9f:1e:
         2b:3b:3a:50:13:78:cd:c2:07:79:c6:b2:6d:5a:63:4d:fd:44:
         2f:70:be:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4FEMzf+DysmCa0MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTExMDU3NGItYjBhOC00MTE2LThmYmEtNjNlNjllYmE5
ZDkyMB4XDTI1MDQwOTEzMTEzOVoXDTI1MDcwODEzMTEzOVowLzEtMCsGA1UEAxMk
ODE2MWNjMjctNDFjOS00YWMwLTliM2MtZTU2MjlhNjM1NTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFmq7S5lOgTcB/Qarbo1qKiKdE+JV/D0TMzR
Ur/TJAzxBTgcA0trvNUajfwmrFZYeM1ABoEptPjmhr6//BjLRA4QK8weRVthUr1E
gSrupm41XlMZZe3/r+/OCsHlaa4HWOJ8HWLKKeK44UwGNefhyp18+pykSB2SlqV/
ratWjJK/IT3mxLTk3TC/+IQ6Pe9X8n9b6ochkHsIGaSZdAagt13MPHyYnibJUsRU
lCqeQqsu94If0WSnUo3VV+WEVstDIXRxbgysgu8XOVU/vrYQPE7QYt6JxWxh50c+
dxkBuuR9aTuREV6mTQQYyqL3/oeNYxmFUWgMgLKizgLbo5JXwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLi2sdw1aCC3mY2h7ZuV4y2V5fuHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEw
NTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2OWViYTlkOTIvNWQzMjE5MDctMzgxZC0z
MmFmLWFkNzYtYjNmZDFiOTg0MjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTExMDU3NGItYjBhOC00MTE2LThm
YmEtNjNlNjllYmE5ZDkyL2ExMTA1NzRiLWIwYTgtNDExNi04ZmJhLTYzZTY5ZWJh
OWQ5Mi5jcmwwHwYDVR0jBBgwFoAUhXIn2CcZk3NA37m6vD9oxagZ474wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTEwNTc0Yi1iMGE4LTQxMTYtOGZiYS02M2U2
OWViYTlkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2Z4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfnZYM9/oyz3BBKzSKRoOt5uyatmPmUVKOqcY4pxiFlNmnOrOsyDvN7
xYgGF/GNo989GXzec8UkT5AV3bN+hYLy1vcJ3OSNTj67ygkj5yQrQvYGhEMRuhmW
4iX5nHi2iZ+tXrwglZO1b1FogXyIu1VmdwNERQXaXqYxCwqQMuRWE1P+YFhX0LUj
kcUdOAO7kgG9uRnQta6EPDV8wnl7aWp6VKAlsrTLcUEKDPosq0yKjciBiDSCIaNu
V3lJtG7S34lc8S1C4XNtBtnAWikkvNLpBRfqIWkHlPoo3xPoDrPTsluKqdw0UKCf
His7OlATeM3CB3nGsm1aY039RC9wvjE=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net