Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
File:                     1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa (raw, json)
Hash identifier:          ZrrLZCTRDXiLyOGv4f9Sa+tP6Slasd+zRABWh40O9Rk=
Subject key identifier:   FB:01:1A:EA:BE:7B:C0:A3:B7:8D:EF:A7:6F:43:67:40:4A:73:B2:76
Certificate issuer:       /CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
Certificate serial:       010D0C9F432858495ABEDE1A78C55C282E4FD9AA
Authority key identifier: 4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     40788
IP address blocks:        108.170.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:de:1a:78:c5:5c:28:2e:4f:d9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464cd0d4-6da8-497c-b270-cb658d45f4e8
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=617343f7-db9d-4b03-a081-20a64c70b2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:19:c5:0a:15:f0:c3:1b:4d:74:11:e4:3b:
                    0c:05:16:84:14:a2:92:43:66:71:e4:f2:6e:08:98:
                    d0:c0:db:15:74:90:f3:ec:6c:36:99:2c:f7:19:e5:
                    5e:82:9d:05:4d:1d:5d:d0:94:b7:03:15:56:42:5c:
                    79:48:aa:d1:98:0c:76:4e:34:94:3a:af:b3:60:84:
                    04:b5:67:ec:2d:03:45:da:85:52:67:2c:41:ee:e1:
                    bc:0b:a5:d0:3a:71:b6:d8:bf:97:b8:7a:57:3f:0e:
                    12:52:9b:b2:9d:b1:ce:c3:42:11:10:91:62:c1:fc:
                    48:5a:af:ef:af:99:85:04:90:b4:67:af:0e:02:f9:
                    33:db:f9:fb:5e:5d:9e:2f:2c:80:0a:76:2c:e6:b4:
                    ad:3d:82:7a:d2:aa:0d:37:c5:39:50:70:0f:c9:2e:
                    86:f1:00:5e:3f:58:d9:79:a4:23:b9:f4:27:95:1c:
                    91:9a:4f:e8:33:96:4a:4b:68:83:3d:5b:d9:b2:93:
                    60:ee:5d:68:5e:f1:f0:c9:c6:9b:42:f6:18:4a:f0:
                    32:ed:bc:35:ab:8d:cb:3f:12:15:f8:90:a5:f4:e8:
                    ff:ab:99:2f:f1:1f:87:e0:da:f8:5c:27:95:fb:fb:
                    d6:c1:b5:2b:62:e6:cf:07:3b:0f:c6:9f:7e:01:c0:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:01:1A:EA:BE:7B:C0:A3:B7:8D:EF:A7:6F:43:67:40:4A:73:B2:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/1ab37350-f0e0-3e8b-b4fd-d4cc4ad7f369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8/464cd0d4-6da8-497c-b270-cb658d45f4e8.crl

            X509v3 Authority Key Identifier:
                keyid:4B:7F:5F:4A:10:ED:23:09:80:8B:93:88:D7:AB:BC:57:21:F0:6F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/464cd0d4-6da8-497c-b270-cb658d45f4e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:42:cd:e8:24:8a:f6:8a:84:62:17:e7:63:1c:11:88:52:1a:
         12:c2:e0:c7:2f:d5:85:43:91:c7:37:57:b9:26:85:ae:0b:88:
         6c:c6:d0:44:41:22:c9:1d:9b:a3:24:95:e5:6b:7c:39:cc:1c:
         51:85:eb:99:fb:84:2a:a2:82:3d:0a:33:9e:80:4d:cf:b2:9b:
         8b:f0:16:cc:67:f7:0c:8b:5a:6f:0d:af:15:cc:de:e0:ef:3e:
         83:1c:d2:8f:1b:19:78:5c:a9:dc:b1:10:6f:94:4e:14:8c:de:
         a2:4b:52:ca:f8:e6:4c:9e:57:61:44:47:79:5a:82:c6:21:dc:
         4f:25:92:0e:c3:12:b0:fa:6a:9f:a9:17:1c:18:90:3f:36:67:
         6b:e1:93:de:f8:7a:61:79:4b:f8:74:08:36:3b:d5:83:88:48:
         14:eb:fa:be:81:ae:a8:1a:2d:5a:5f:60:73:26:b4:9f:95:76:
         f1:cb:74:26:a4:f4:23:e9:06:ae:15:d3:15:ac:be:90:4b:3a:
         35:5b:80:35:2b:80:0e:94:9f:20:01:a3:16:53:25:54:d6:c7:
         f0:44:6b:c2:c1:fa:06:20:0b:c4:5c:7f:8c:22:cf:36:53:17:
         0b:ed:2f:f0:d2:29:b5:29:d1:18:50:53:8b:7e:44:a0:75:03:
         7f:5e:21:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt4aeMVcKC5P2aowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDY0Y2QwZDQtNmRhOC00OTdjLWIyNzAtY2I2NThkNDVm
NGU4MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
NjE3MzQzZjctZGI5ZC00YjAzLWEwODEtMjBhNjRjNzBiMmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsoZxQoV8MMbTXQR5DsMBRaEFKKSQ2Zx5PJu
CJjQwNsVdJDz7Gw2mSz3GeVegp0FTR1d0JS3AxVWQlx5SKrRmAx2TjSUOq+zYIQE
tWfsLQNF2oVSZyxB7uG8C6XQOnG22L+XuHpXPw4SUpuynbHOw0IREJFiwfxIWq/v
r5mFBJC0Z68OAvkz2/n7Xl2eLyyACnYs5rStPYJ60qoNN8U5UHAPyS6G8QBeP1jZ
eaQjufQnlRyRmk/oM5ZKS2iDPVvZspNg7l1oXvHwycabQvYYSvAy7bw1q43LPxIV
+JCl9Oj/q5kv8R+H4Nr4XCeV+/vWwbUrYubPBzsPxp9+AcDYXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPsBGuq+e8Cjt43vp29DZ0BKc7J2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80NjRj
ZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1OGQ0NWY0ZTgvMWFiMzczNTAtZjBlMC0z
ZThiLWI0ZmQtZDRjYzRhZDdmMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDY0Y2QwZDQtNmRhOC00OTdjLWIy
NzAtY2I2NThkNDVmNGU4LzQ2NGNkMGQ0LTZkYTgtNDk3Yy1iMjcwLWNiNjU4ZDQ1
ZjRlOC5jcmwwHwYDVR0jBBgwFoAUS39fShDtIwmAi5OI16u8VyHwb6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi80NjRjZDBkNC02ZGE4LTQ5N2MtYjI3MC1jYjY1
OGQ0NWY0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbKqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNCzegkivaKhGIX52McEYhSGhLC4Mcv1YVDkcc3V7kmha4LiGzG0ERB
Iskdm6MkleVrfDnMHFGF65n7hCqigj0KM56ATc+ym4vwFsxn9wyLWm8NrxXM3uDv
PoMc0o8bGXhcqdyxEG+UThSM3qJLUsr45kyeV2FER3lagsYh3E8lkg7DErD6ap+p
FxwYkD82Z2vhk974emF5S/h0CDY71YOISBTr+r6BrqgaLVpfYHMmtJ+VdvHLdCak
9CPpBq4V0xWsvpBLOjVbgDUrgA6UnyABoxZTJVTWx/BEa8LB+gYgC8Rcf4wizzZT
FwvtL/DSKbUp0RhQU4t+RKB1A39eIeQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:00 2025 by rpki-client on console.sobornost.net