Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cb009292-3039-393c-8397-9ea2c37ffc39.roa
File:                     cb009292-3039-393c-8397-9ea2c37ffc39.roa (raw, json)
Hash identifier:          xTlV2rK1X/clq5bIEKW6T4aNGXmHmA2y3iaDDvkTUU8=
Subject key identifier:   7F:CB:E6:22:B6:C5:8D:24:31:68:A9:98:F0:0D:8B:48:F1:C1:63:F9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285847F7D3CD61C837D0C2BB0EFA80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cb009292-3039-393c-8397-9ea2c37ffc39.roa
Signing time:             Fri 22 Nov 2024 21:51:22 +0000
ROA not before:           Fri 22 Nov 2024 21:51:22 +0000
ROA not after:            Thu 20 Feb 2025 21:51:22 +0000
asID:                     7018
IP address blocks:        64.22.96.0/24 maxlen: 24
                          64.22.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:d3:cd:61:c8:37:d0:c2:bb:0e:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Nov 22 21:51:22 2024 GMT
            Not After : Feb 20 21:51:22 2025 GMT
        Subject: CN=b3940451-6e56-42a8-b654-31548cb70434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:fc:33:ee:5e:81:bc:99:79:06:87:6c:83:
                    ec:81:1d:1a:7b:2a:32:85:43:d7:30:75:3a:29:9b:
                    52:0a:39:80:40:39:83:68:7a:c0:40:ac:3e:fd:19:
                    e1:54:cf:6e:9c:03:df:05:16:73:bb:71:b1:a8:51:
                    ba:70:e5:46:69:02:d9:30:92:f1:aa:ce:d9:2a:b1:
                    3a:57:ee:2d:db:91:02:0d:8c:fe:d4:53:06:76:7f:
                    55:60:e5:c8:a9:c3:5d:4d:62:e6:92:ec:64:c8:52:
                    c5:18:cf:42:46:62:d6:b0:0d:c2:f0:31:4c:0c:51:
                    e1:f2:31:24:a8:8b:8e:2b:48:67:1f:69:47:d4:45:
                    be:8c:35:49:5b:84:ef:6d:bd:ab:fd:0e:e4:bb:e2:
                    65:ea:ee:41:30:17:7a:a6:d3:fb:1a:14:24:16:87:
                    73:94:1f:8a:06:76:16:9a:19:40:e2:79:ed:d6:00:
                    a2:8b:6c:cb:79:9f:b1:1f:74:5b:b2:84:d2:9d:76:
                    f6:1c:42:40:b5:26:f8:06:ca:30:cd:22:2f:a1:8a:
                    09:e2:30:88:df:b5:4c:5c:3b:b6:d8:58:9c:3b:59:
                    6c:04:09:52:7d:93:e1:c5:58:cc:5a:d1:00:10:36:
                    41:20:6a:47:0d:e3:ca:de:82:59:84:9c:e4:79:bd:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:E6:22:B6:C5:8D:24:31:68:A9:98:F0:0D:8B:48:F1:C1:63:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cb009292-3039-393c-8397-9ea2c37ffc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:8e:f7:41:81:7a:ca:a0:0a:b8:2d:38:c8:8b:6c:97:9b:
         d5:67:6d:27:c1:03:c0:5d:c9:81:aa:12:ed:07:00:ad:ff:36:
         dd:d6:07:5c:09:7c:d3:44:40:f1:21:9e:b9:6b:cc:eb:80:62:
         1c:c2:06:29:b1:60:90:7b:d3:46:81:55:67:06:6d:8a:d6:1f:
         b8:f9:49:60:db:2b:52:a0:e0:36:fc:16:b4:de:3d:35:a4:4b:
         da:1b:c7:29:59:60:84:a6:7e:45:93:be:43:63:20:b4:80:9d:
         18:4a:b9:40:f0:96:30:6b:65:d6:66:b9:ab:bb:96:07:6b:cd:
         ce:3e:4b:63:21:04:f9:d9:22:a6:02:bb:14:30:82:cb:4b:65:
         2f:c8:6d:e7:f6:53:27:b6:6a:a2:3a:7c:a5:ef:2a:e3:7c:4b:
         3b:0f:22:ea:d8:e1:2a:06:59:b1:29:28:de:e5:d2:8f:05:19:
         f6:95:00:bc:99:b8:db:c1:f3:de:0c:c7:2d:3e:07:68:95:1f:
         bf:98:49:46:97:41:ce:86:0c:30:5f:1d:c1:d1:37:0b:09:bf:
         e0:f0:4e:00:cb:b6:22:71:0e:a5:f6:3e:74:ae:6e:fe:e2:1b:
         bf:f0:4a:69:5a:5b:74:49:7b:df:98:15:2f:11:ba:6d:06:f3:
         e1:d9:ce:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf3081hyDfQwrsO+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI0MTEyMjIxNTEyMloXDTI1MDIyMDIxNTEyMlowLzEtMCsGA1UEAxMk
YjM5NDA0NTEtNmU1Ni00MmE4LWI2NTQtMzE1NDhjYjcwNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD38M+5egbyZeQaHbIPsgR0aeyoyhUPXMHU6
KZtSCjmAQDmDaHrAQKw+/RnhVM9unAPfBRZzu3GxqFG6cOVGaQLZMJLxqs7ZKrE6
V+4t25ECDYz+1FMGdn9VYOXIqcNdTWLmkuxkyFLFGM9CRmLWsA3C8DFMDFHh8jEk
qIuOK0hnH2lH1EW+jDVJW4Tvbb2r/Q7ku+Jl6u5BMBd6ptP7GhQkFodzlB+KBnYW
mhlA4nnt1gCii2zLeZ+xH3RbsoTSnXb2HEJAtSb4BsowzSIvoYoJ4jCI37VMXDu2
2FicO1lsBAlSfZPhxVjMWtEAEDZBIGpHDePK3oJZhJzkeb2M+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/L5iK2xY0kMWipmPANi0jxwWP5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvY2IwMDkyOTItMzAzOS0z
OTNjLTgzOTctOWVhMmMzN2ZmYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFL6jvdBgXrKoAq4LTjIi2yXm9VnbSfBA8BdyYGqEu0HAK3/Nt3WB1wJ
fNNEQPEhnrlrzOuAYhzCBimxYJB700aBVWcGbYrWH7j5SWDbK1Kg4Db8FrTePTWk
S9obxylZYISmfkWTvkNjILSAnRhKuUDwljBrZdZmuau7lgdrzc4+S2MhBPnZIqYC
uxQwgstLZS/Ibef2Uye2aqI6fKXvKuN8SzsPIurY4SoGWbEpKN7l0o8FGfaVALyZ
uNvB894Mxy0+B2iVH7+YSUaXQc6GDDBfHcHRNwsJv+DwTgDLtiJxDqX2PnSubv7i
G7/wSmlaW3RJe9+YFS8Rum0G8+HZzkY=
-----END CERTIFICATE-----
Generated at Wed Dec 25 19:05:56 2024 by rpki-client on console.sobornost.net