Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
File:                     bc01ea38-f371-3faa-acac-14ea10689699.roa (raw, json)
Hash identifier:          v2GVW4HoOMMBzXl0htwtK9xdH+JExgHhGjak+U6lgUs=
Subject key identifier:   0E:CC:01:1F:4E:B3:B7:7E:AD:F2:50:FA:94:26:3C:20:08:83:D5:D8
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D42FE6AA9990FCBC33C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.57.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d4:2f:e6:aa:99:90:fc:bc:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=bffafea9-2202-4990-b254-9e2e9f2e8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:d7:57:59:c2:c7:5c:2d:25:40:bb:01:6c:
                    d7:f8:e6:7f:00:06:46:36:9d:16:3f:c8:3f:f0:9c:
                    7a:f2:db:e5:da:06:92:16:61:53:f5:5c:88:04:d3:
                    e4:84:6b:3c:00:0b:7c:c0:e0:e4:61:61:ff:b4:30:
                    86:98:e7:97:f2:33:87:4b:75:90:89:f4:46:d6:bc:
                    19:09:32:4f:52:ff:a0:45:ae:02:60:2e:e0:24:f0:
                    46:e9:30:82:20:e5:ce:41:03:ed:69:40:67:e0:fc:
                    e6:81:7b:5d:1e:a4:47:40:f9:23:76:ec:92:4c:fa:
                    ac:00:b2:91:2b:35:a7:b6:7d:73:90:b4:49:85:83:
                    0c:f9:59:ad:60:03:0f:f6:c7:b8:09:86:da:cb:6d:
                    b5:28:4c:02:95:92:49:07:5b:9e:e1:45:65:f4:b1:
                    d6:c3:f2:36:20:08:b3:cb:64:52:75:e8:30:43:9f:
                    26:c1:8a:59:37:67:3b:a5:89:cb:ff:c1:6f:be:8e:
                    e7:36:ed:01:ca:4f:28:18:41:84:56:75:be:7e:e5:
                    99:b0:23:37:eb:8f:eb:c8:f9:46:73:a3:e0:40:99:
                    9c:83:40:84:77:f9:78:1f:6c:2c:cb:fb:62:43:42:
                    28:0f:30:95:3a:83:80:14:45:ca:48:7b:9e:45:c5:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:01:1F:4E:B3:B7:7E:AD:F2:50:FA:94:26:3C:20:08:83:D5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.57.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:61:11:87:b7:25:12:12:d7:85:00:50:6f:0b:83:0d:1e:3b:
         b9:a6:69:47:c2:21:80:a2:30:19:84:ca:5f:f2:e0:f7:03:7b:
         6a:94:00:69:60:f1:53:d4:79:25:c9:4f:83:b8:11:f3:22:73:
         45:f2:9e:f2:11:6b:0c:9f:26:34:2a:9c:b0:ed:08:92:f8:77:
         44:d0:d7:fa:16:b2:ad:fa:27:05:1a:dc:3b:7b:2e:7a:f5:59:
         4c:95:45:90:8b:cc:d9:ff:76:b9:39:f1:cb:7c:d0:6f:0e:a1:
         b5:de:87:8c:72:ae:1d:a9:9d:98:2e:4b:58:a4:c9:20:cb:73:
         a9:c0:d8:39:82:e6:c9:09:1e:d5:7b:51:2f:1b:02:1f:3c:ba:
         b5:65:79:d4:70:1e:85:43:2a:d2:fe:3b:6a:0f:71:01:e5:73:
         e4:49:75:f6:43:62:1a:b3:60:a6:8f:59:f9:df:b8:03:43:d5:
         49:db:03:8f:2a:99:5b:6f:c9:79:16:78:e4:e9:35:3d:1d:91:
         64:df:78:b2:cd:ae:74:c1:06:22:0e:0d:e9:a1:f0:64:3e:a1:
         97:45:28:5d:ef:9f:6e:a1:43:b2:70:50:b2:3c:af:5c:12:a2:
         cf:eb:02:be:7d:bd:1a:44:15:d8:46:c8:ad:0c:a9:08:a8:f1:
         f2:1d:85:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdQv5qqZkPy8M8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
YmZmYWZlYTktMjIwMi00OTkwLWIyNTQtOWUyZTlmMmU4MzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXLXV1nCx1wtJUC7AWzX+OZ/AAZGNp0WP8g/
8Jx68tvl2gaSFmFT9VyIBNPkhGs8AAt8wODkYWH/tDCGmOeX8jOHS3WQifRG1rwZ
CTJPUv+gRa4CYC7gJPBG6TCCIOXOQQPtaUBn4PzmgXtdHqRHQPkjduySTPqsALKR
KzWntn1zkLRJhYMM+VmtYAMP9se4CYbay221KEwClZJJB1ue4UVl9LHWw/I2IAiz
y2RSdegwQ58mwYpZN2c7pYnL/8Fvvo7nNu0Byk8oGEGEVnW+fuWZsCM364/ryPlG
c6PgQJmcg0CEd/l4H2wsy/tiQ0IoDzCVOoOAFEXKSHueRcUo3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7MAR9Os7d+rfJQ+pQmPCAIg9XYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMwMWVhMzgtZjM3MS0z
ZmFhLWFjYWMtMTRlYTEwNjg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdhEYe3JRIS14UAUG8Lgw0eO7mmaUfCIYCiMBmEyl/y4PcDe2qUAGlg
8VPUeSXJT4O4EfMic0XynvIRawyfJjQqnLDtCJL4d0TQ1/oWsq36JwUa3Dt7Lnr1
WUyVRZCLzNn/drk58ct80G8OobXeh4xyrh2pnZguS1ikySDLc6nA2DmC5skJHtV7
US8bAh88urVledRwHoVDKtL+O2oPcQHlc+RJdfZDYhqzYKaPWfnfuAND1UnbA48q
mVtvyXkWeOTpNT0dkWTfeLLNrnTBBiIODemh8GQ+oZdFKF3vn26hQ7JwULI8r1wS
os/rAr59vRpEFdhGyK0MqQio8fIdhdM=
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:39 2025 by rpki-client on console.sobornost.net