Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/5d0cc9ef-3c3b-3c3d-bc21-4799cec971ce.roa
File:                     5d0cc9ef-3c3b-3c3d-bc21-4799cec971ce.roa (raw, json)
Hash identifier:          wniRd/b98Kxn8QqwIFxGoahL6z/V4A1ykTk67hsd/2Y=
Subject key identifier:   91:56:5E:8E:3E:A1:C5:F7:FF:37:D1:B6:B6:7B:3A:FD:29:FA:22:56
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F432858496FAF111B64314864F15A2B00
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/5d0cc9ef-3c3b-3c3d-bc21-4799cec971ce.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397453
IP address blocks:        161.38.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:11:1b:64:31:48:64:f1:5a:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=1bfb927c-b934-499d-8057-3ad7185ee524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:ee:2c:6c:fd:32:51:e2:29:86:99:0c:7b:
                    29:26:1c:5d:0d:9b:52:61:63:e7:10:23:d8:1c:3f:
                    c7:40:00:71:e9:30:d5:6f:50:dd:03:dd:f9:8d:9d:
                    c7:6a:91:c5:cc:5d:ff:6c:59:67:85:d7:33:0b:fd:
                    48:dd:3e:bc:ce:35:22:91:11:97:01:d1:72:f0:03:
                    61:6c:fa:8e:4d:be:ab:d2:67:e9:9b:6e:d7:83:d9:
                    b8:cb:a0:06:d7:70:70:26:94:f6:01:97:b1:12:57:
                    a8:e7:52:5a:fd:5c:9f:3f:92:da:27:c5:52:14:65:
                    48:aa:38:42:65:37:0e:ae:d9:24:03:b8:2c:c9:a1:
                    c2:81:8a:fe:3b:58:ed:48:bc:4f:1c:e0:52:3a:ca:
                    5a:78:fc:c4:74:f9:29:23:b1:15:be:c6:f6:f5:af:
                    2b:bc:4b:c5:cf:96:d9:8e:52:b0:72:5b:ef:0d:55:
                    a5:67:45:41:d3:04:af:c0:6c:6e:5e:23:90:70:f8:
                    e4:07:f2:75:88:e1:2a:3a:bd:fc:1a:88:d3:1d:f4:
                    b3:e2:9d:b4:5e:b3:10:45:e2:56:17:f5:86:37:61:
                    e1:dd:70:45:3e:b2:69:06:08:18:c4:db:60:7d:f3:
                    19:23:dc:a7:b0:5b:05:1b:e7:ad:98:25:7d:7f:c4:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:56:5E:8E:3E:A1:C5:F7:FF:37:D1:B6:B6:7B:3A:FD:29:FA:22:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/5d0cc9ef-3c3b-3c3d-bc21-4799cec971ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:58:dc:91:7b:9a:16:3f:21:06:d6:11:80:95:c6:df:38:09:
         93:60:54:5a:bd:09:06:c7:bf:45:7f:3d:54:98:6e:a3:1c:2a:
         af:f2:d7:93:83:f9:8c:f1:f1:e7:ca:b6:36:b7:3e:53:8a:32:
         2d:b8:98:47:8d:c0:a0:ac:d3:8a:e2:64:68:3c:02:90:96:ce:
         3d:d5:c8:df:02:6d:e3:6a:c9:1f:f3:ff:9b:2d:86:af:da:3f:
         af:de:97:63:c7:ae:71:c4:52:f8:bb:7f:0a:98:d9:6a:a1:e9:
         a0:dd:57:c7:d0:1c:91:5c:e5:b0:9b:d3:36:d7:93:1e:45:fe:
         25:2f:93:5e:bd:27:b8:46:f8:e4:5f:de:1a:4e:4b:92:c9:c6:
         51:12:fb:13:cf:66:8a:3e:7c:87:d4:5a:53:db:94:91:84:c6:
         ff:a6:76:a9:5a:1a:bc:11:07:7e:6b:85:e3:ea:89:81:f6:fb:
         fb:d0:0d:1d:d9:e4:09:47:50:d9:b5:fa:e7:e0:8a:dc:4c:b4:
         44:49:10:97:da:bb:32:75:15:b1:2d:0f:6a:1a:6e:c0:05:54:
         21:ca:30:70:85:d4:45:86:8c:89:cb:8e:75:c1:17:78:0b:93:
         1e:b8:63:f8:74:a8:1f:61:60:11:da:ca:8f:7b:4c:82:80:3b:
         ff:c9:f9:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxEbZDFIZPFaKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz
NTgzMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
MWJmYjkyN2MtYjkzNC00OTlkLTgwNTctM2FkNzE4NWVlNTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM7uLGz9MlHiKYaZDHspJhxdDZtSYWPnECPY
HD/HQABx6TDVb1DdA935jZ3HapHFzF3/bFlnhdczC/1I3T68zjUikRGXAdFy8ANh
bPqOTb6r0mfpm27Xg9m4y6AG13BwJpT2AZexEleo51Ja/VyfP5LaJ8VSFGVIqjhC
ZTcOrtkkA7gsyaHCgYr+O1jtSLxPHOBSOspaePzEdPkpI7EVvsb29a8rvEvFz5bZ
jlKwclvvDVWlZ0VB0wSvwGxuXiOQcPjkB/J1iOEqOr38GojTHfSz4p20XrMQReJW
F/WGN2Hh3XBFPrJpBggYxNtgffMZI9ynsFsFG+etmCV9f8RsFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFWXo4+ocX3/zfRtrZ7Ov0p+iJWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz
OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvNWQwY2M5ZWYtM2MzYi0z
YzNkLWJjMjEtNDc5OWNlYzk3MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0
ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl
MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0
MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSagMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNY3JF7mhY/IQbWEYCVxt84CZNgVFq9CQbHv0V/PVSYbqMcKq/y15OD
+Yzx8efKtja3PlOKMi24mEeNwKCs04riZGg8ApCWzj3VyN8CbeNqyR/z/5sthq/a
P6/el2PHrnHEUvi7fwqY2Wqh6aDdV8fQHJFc5bCb0zbXkx5F/iUvk169J7hG+ORf
3hpOS5LJxlES+xPPZoo+fIfUWlPblJGExv+mdqlaGrwRB35rhePqiYH2+/vQDR3Z
5AlHUNm1+ufgitxMtERJEJfauzJ1FbEtD2oabsAFVCHKMHCF1EWGjInLjnXBF3gL
kx64Y/h0qB9hYBHayo97TIKAO//J+aU=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net