Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa
File:                     a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa (raw, json)
Hash identifier:          OLcSIBAxPyjPDq96vtfMFUlKbqaABCZ9zcG7zOwijhw=
Subject key identifier:   82:98:A4:4E:50:EF:1B:2E:0A:7D:CD:F1:82:63:C0:E4:CE:0C:AD:47
Certificate issuer:       /CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
Certificate serial:       010D0C9F43285848A6CB6AC5992ADB66E6C27E38
Authority key identifier: D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     14183
IP address blocks:        144.167.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:6a:c5:99:2a:db:66:e6:c2:7e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992a069e-bb9c-4ed2-85de-84d226ccbba2
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=aa6b6937-8181-4360-81c8-bfec030bdd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:00:2b:51:21:d6:40:07:1c:a9:8c:78:ad:
                    7b:5e:50:10:ea:46:6a:24:e5:42:0f:9d:b5:6f:95:
                    6c:98:9f:9e:59:bc:b9:08:d0:73:4a:f3:3f:8a:89:
                    c1:73:2d:bf:86:a2:da:2c:36:47:d0:1f:dd:3f:82:
                    d1:59:81:c1:3c:39:c5:15:02:63:36:85:62:09:79:
                    41:5b:1b:b9:82:ab:c5:e8:12:35:c7:48:d7:1d:37:
                    9c:1d:d8:ac:ae:14:58:63:22:67:30:21:14:7e:62:
                    99:f1:40:08:42:45:04:f0:e7:91:8c:7b:bc:ce:ca:
                    41:66:30:3a:c7:08:b1:74:f4:4e:bd:3a:d9:0d:51:
                    07:2a:4c:f5:f7:26:4f:1e:51:e9:c7:83:9b:06:fd:
                    63:be:63:64:16:c5:91:1b:2a:9d:c1:b0:0d:66:06:
                    95:ae:83:8a:f0:cd:8a:01:44:5e:38:91:80:c5:73:
                    76:98:67:65:ad:44:9a:56:7b:b0:e7:97:6b:9d:24:
                    ad:b8:9a:06:be:4a:56:ac:79:61:d7:68:96:8e:04:
                    38:fa:b8:4c:43:60:ef:8e:fb:eb:2f:83:2c:47:86:
                    80:e0:da:48:ae:47:a3:55:24:eb:68:35:45:17:44:
                    54:76:23:9c:20:b9:39:03:83:24:13:41:84:2a:31:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:98:A4:4E:50:EF:1B:2E:0A:7D:CD:F1:82:63:C0:E4:CE:0C:AD:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/a6d36a63-6ebf-353e-8f9b-930f6f6dab49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2/992a069e-bb9c-4ed2-85de-84d226ccbba2.crl

            X509v3 Authority Key Identifier:
                keyid:D1:7D:C7:A0:0B:B6:12:A2:2B:4D:AD:34:F8:33:88:B6:B9:37:E1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/992a069e-bb9c-4ed2-85de-84d226ccbba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.167.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:5f:7e:9c:ac:8f:38:d3:d1:f4:cb:3b:dc:38:e4:bc:95:
         2e:ff:bf:3d:26:c2:1a:6a:92:62:22:84:4d:61:7e:7c:4c:cf:
         43:f7:dc:b9:a3:a1:5b:66:28:df:81:d2:4b:98:bf:21:b9:3e:
         42:a9:ab:ed:cf:49:53:65:18:b4:41:1f:0d:42:df:f1:5d:c5:
         e8:b8:ac:3c:9a:15:64:b6:76:5d:e4:cf:aa:92:33:d8:45:8b:
         bf:a4:eb:70:6f:22:a0:33:bf:b3:65:86:f5:5c:c9:35:5c:49:
         3a:c2:a1:f9:7c:c1:79:16:71:3f:43:29:49:34:d9:8a:7a:a9:
         77:4b:cf:98:38:91:e5:b8:55:1b:53:30:b6:de:c5:f8:8e:83:
         35:a5:a5:29:19:73:de:97:31:1b:41:4d:73:1e:1d:61:af:90:
         dd:fb:dc:84:63:63:48:a1:e8:33:e7:cc:1a:ae:37:4f:4f:84:
         9f:22:43:5c:21:3c:8b:a1:12:6d:46:b7:61:d4:94:fa:20:58:
         2e:2f:b9:5e:10:61:c1:cd:63:46:28:ba:22:93:20:5c:37:6a:
         8a:67:e3:69:41:79:c4:bd:65:63:c0:93:4d:0e:3e:b1:eb:26:
         d8:86:4d:e6:cf:5a:93:fa:48:3e:fc:81:49:8d:69:68:62:5e:
         ae:0c:8f:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEimy2rFmSrbZubCfjgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkyYTA2OWUtYmI5Yy00ZWQyLTg1ZGUtODRkMjI2Y2Ni
YmEyMB4XDTI1MDEyNDE0MDA1MloXDTI1MDQyNDEzMDA1MlowLzEtMCsGA1UEAxMk
YWE2YjY5MzctODE4MS00MzYwLTgxYzgtYmZlYzAzMGJkZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv0AK1Eh1kAHHKmMeK17XlAQ6kZqJOVCD521
b5VsmJ+eWby5CNBzSvM/ionBcy2/hqLaLDZH0B/dP4LRWYHBPDnFFQJjNoViCXlB
Wxu5gqvF6BI1x0jXHTecHdisrhRYYyJnMCEUfmKZ8UAIQkUE8OeRjHu8zspBZjA6
xwixdPROvTrZDVEHKkz19yZPHlHpx4ObBv1jvmNkFsWRGyqdwbANZgaVroOK8M2K
AUReOJGAxXN2mGdlrUSaVnuw55drnSStuJoGvkpWrHlh12iWjgQ4+rhMQ2Dvjvvr
L4MsR4aA4NpIrkejVSTraDVFF0RUdiOcILk5A4MkE0GEKjHPjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKYpE5Q7xsuCn3N8YJjwOTODK1HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OTJh
MDY5ZS1iYjljLTRlZDItODVkZS04NGQyMjZjY2JiYTIvYTZkMzZhNjMtNmViZi0z
NTNlLThmOWItOTMwZjZmNmRhYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTkyYTA2OWUtYmI5Yy00ZWQyLTg1
ZGUtODRkMjI2Y2NiYmEyLzk5MmEwNjllLWJiOWMtNGVkMi04NWRlLTg0ZDIyNmNj
YmJhMi5jcmwwHwYDVR0jBBgwFoAU0X3HoAu2EqIrTa00+DOItrk34SQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85OTJhMDY5ZS1iYjljLTRlZDItODVkZS04NGQy
MjZjY2JiYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkKcEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF03X36crI8409H0yzvcOOS8lS7/vz0mwhpqkmIihE1hfnxMz0P33Lmj
oVtmKN+B0kuYvyG5PkKpq+3PSVNlGLRBHw1C3/Fdxei4rDyaFWS2dl3kz6qSM9hF
i7+k63BvIqAzv7NlhvVcyTVcSTrCofl8wXkWcT9DKUk02Yp6qXdLz5g4keW4VRtT
MLbexfiOgzWlpSkZc96XMRtBTXMeHWGvkN373IRjY0ih6DPnzBquN09PhJ8iQ1wh
PIuhEm1Gt2HUlPogWC4vuV4QYcHNY0YouiKTIFw3aopn42lBecS9ZWPAk00OPrHr
JtiGTebPWpP6SD78gUmNaWhiXq4Mj+U=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:02 2025 by rpki-client on console.sobornost.net