Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa
File:                     9cd416fb-8786-3914-9147-fb72fa08441a.roa (raw, json)
Hash identifier:          R7dPzcajgIPd6yyt4knst+XWzKSNJSAZncy3mqe3EBg=
Subject key identifier:   91:5D:33:CB:FA:83:87:3B:BA:36:88:E3:36:AE:01:C8:4D:BE:C0:E5
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339DD469EC2BA54904E5D80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.33.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:dd:46:9e:c2:ba:54:90:4e:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=015ebb0f-f86c-4baa-a5e5-0d98b435380a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:77:6b:6e:6a:91:8a:8e:01:95:72:9c:2c:
                    a9:41:2b:79:9b:74:80:80:f8:f7:45:b5:9c:4d:92:
                    5b:3b:7a:16:61:9f:9d:72:67:4f:54:0c:37:ca:ad:
                    77:59:9a:d1:19:5e:35:d4:fa:d8:f1:48:af:fc:1b:
                    0e:82:2e:45:08:26:87:a4:3d:26:55:ba:46:0a:36:
                    55:4b:cb:77:42:ba:32:d5:81:08:b1:b6:28:5d:86:
                    d2:fc:d1:0f:e3:a4:a0:a3:7e:f3:19:d0:ce:7c:75:
                    b6:f8:46:e4:6b:5f:fb:eb:df:23:14:73:26:22:64:
                    79:ad:65:98:f1:ce:8e:20:01:c2:ce:fb:a9:3b:98:
                    95:4c:66:80:48:49:f4:c7:01:f3:fa:73:a8:95:fc:
                    b6:04:97:9a:f4:dd:38:47:8f:85:ee:df:e7:cf:bf:
                    72:9a:8f:18:24:7a:40:04:43:2a:55:c0:1c:9c:df:
                    b7:da:d0:52:12:b8:e8:37:81:ee:5a:36:df:c6:70:
                    1f:a4:3b:24:cc:48:a9:f1:38:33:dc:e2:04:65:06:
                    6b:86:c6:74:34:c7:9b:0f:06:48:d1:22:c0:88:10:
                    8f:98:1e:02:0c:dc:21:97:97:fe:f7:1f:09:80:fa:
                    00:4d:d6:e2:86:8a:97:24:52:b8:93:7c:e9:1a:ac:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5D:33:CB:FA:83:87:3B:BA:36:88:E3:36:AE:01:C8:4D:BE:C0:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a6:7d:3e:0c:ca:77:bc:08:03:d4:94:5c:3b:30:35:ab:c4:
         0f:25:e1:da:f3:8d:65:6b:75:6c:80:71:49:f7:e0:c5:f1:b1:
         6f:21:5f:fa:f5:4f:ae:a1:dd:2e:eb:cb:eb:b1:89:5a:6c:89:
         fb:7f:e4:7f:bb:ff:b1:ca:7b:25:c8:99:71:ad:33:92:a8:4c:
         02:51:f2:36:77:6e:1b:7e:ff:2a:30:8f:f5:80:12:b9:31:85:
         f7:1b:0d:ae:3c:2c:39:6d:f6:9c:af:99:59:00:fa:cb:de:41:
         58:bb:b2:ed:ff:e1:e9:cc:0a:95:fb:ff:cd:0c:41:53:64:d4:
         33:28:7e:e2:e0:33:8a:51:31:8e:db:ff:dc:2e:24:2e:66:d5:
         e3:cd:41:b5:cf:71:58:7f:60:07:80:6b:99:c7:f7:72:b7:46:
         52:32:84:68:3b:e4:af:c3:c7:d6:4e:6d:60:b1:f2:51:51:7a:
         af:18:8d:e2:0b:a9:bc:3c:e5:18:fe:45:8a:d8:e8:9a:e1:fa:
         5a:f2:b3:6d:74:03:1c:d3:16:b2:50:7e:56:b4:e0:ce:fd:16:
         1e:b7:72:70:db:9a:3a:b2:a7:6b:01:b7:cd:52:4b:68:02:a4:
         7d:37:2d:69:b0:d7:c2:4f:a0:5f:1f:58:f7:3e:22:bc:20:17:
         d7:a6:6a:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd1GnsK6VJBOXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
MDE1ZWJiMGYtZjg2Yy00YmFhLWE1ZTUtMGQ5OGI0MzUzODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsR3a25qkYqOAZVynCypQSt5m3SAgPj3RbWc
TZJbO3oWYZ+dcmdPVAw3yq13WZrRGV411PrY8Uiv/BsOgi5FCCaHpD0mVbpGCjZV
S8t3Qroy1YEIsbYoXYbS/NEP46Sgo37zGdDOfHW2+Ebka1/7698jFHMmImR5rWWY
8c6OIAHCzvupO5iVTGaASEn0xwHz+nOolfy2BJea9N04R4+F7t/nz79ymo8YJHpA
BEMqVcAcnN+32tBSErjoN4HuWjbfxnAfpDskzEip8Tgz3OIEZQZrhsZ0NMebDwZI
0SLAiBCPmB4CDNwhl5f+9x8JgPoATdbihoqXJFK4k3zpGqyJDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFdM8v6g4c7ujaI4zauAchNvsDlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWNkNDE2ZmItODc4Ni0z
OTE0LTkxNDctZmI3MmZhMDg0NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSmfT4Myne8CAPUlFw7MDWrxA8l4drzjWVrdWyAcUn34MXxsW8hX/r1
T66h3S7ry+uxiVpsift/5H+7/7HKeyXImXGtM5KoTAJR8jZ3bht+/yowj/WAErkx
hfcbDa48LDlt9pyvmVkA+sveQVi7su3/4enMCpX7/80MQVNk1DMofuLgM4pRMY7b
/9wuJC5m1ePNQbXPcVh/YAeAa5nH93K3RlIyhGg75K/Dx9ZObWCx8lFReq8YjeIL
qbw85Rj+RYrY6Jrh+lrys210AxzTFrJQfla04M79Fh63cnDbmjqyp2sBt81SS2gC
pH03LWmw18JPoF8fWPc+IrwgF9emakI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net