Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
File:                     ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa (raw, json)
Hash identifier:          LZbYGhQ/k3K4D2auC5OE3rRoAU1ybE72nK7Tgu1z7A0=
Subject key identifier:   6D:CB:A4:B9:AF:D1:2A:3A:90:0A:6F:C1:56:F2:2F:F2:84:3E:2E:A2
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584961B99E2B6AC0A2ECA3B58F80
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     6498
IP address blocks:        75.78.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9e:2b:6a:c0:a2:ec:a3:b5:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=5963117e-aed5-4bd0-9e07-f3f534890c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:79:aa:90:f6:47:dd:f5:21:de:03:fa:fa:
                    f7:f9:41:e6:0b:3e:bf:ac:5d:8b:fc:b4:e2:ea:ea:
                    5a:07:29:35:37:4e:dc:6a:bf:c0:49:10:1a:ef:ba:
                    98:60:48:5b:2b:27:89:eb:af:91:1a:71:81:3a:6d:
                    5e:95:8d:ed:e3:4d:90:90:1a:f2:c6:c9:77:f3:ee:
                    7f:6a:37:34:8f:7e:29:37:55:9c:89:0b:94:b5:64:
                    2d:8e:1f:35:73:12:88:fe:5d:dd:d8:69:cd:a6:aa:
                    7a:68:c9:5e:42:67:07:07:dc:72:10:1b:2b:13:af:
                    66:47:1f:d3:be:cf:fb:83:73:77:69:3d:ea:78:48:
                    7c:d4:65:21:2c:99:c0:56:fa:e9:9c:1a:2b:4e:46:
                    ac:1e:18:05:3a:a2:bb:ab:de:ba:08:75:32:8f:fa:
                    74:56:f7:76:00:52:6e:e7:b9:4c:01:f5:6b:15:e2:
                    5b:4e:00:f8:16:c6:6b:17:6b:df:c9:dc:ac:ad:f5:
                    9e:57:4d:0f:e0:37:ff:9b:10:48:99:c0:1c:5a:8e:
                    28:71:aa:b0:59:2a:c5:ce:f0:4d:5d:04:1e:bc:52:
                    f9:20:86:0b:2f:26:af:35:f2:54:be:b4:67:39:54:
                    92:ce:af:5d:d5:4d:1e:97:3c:8d:d0:cf:28:a2:c6:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CB:A4:B9:AF:D1:2A:3A:90:0A:6F:C1:56:F2:2F:F2:84:3E:2E:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:28:f6:27:87:7f:1d:f9:ab:5e:64:64:9a:d4:8e:a7:9d:7f:
         f7:b2:03:d6:8b:38:25:f1:3a:0d:8b:43:c5:70:8f:43:57:c3:
         68:38:da:9e:c0:d0:21:de:40:54:53:d8:03:f6:ed:bf:db:3a:
         16:54:37:ef:cc:cb:b2:88:7a:36:5a:ef:a2:d9:65:37:4d:90:
         09:01:a6:0b:ec:f4:20:6e:6a:ed:fc:1f:b7:62:87:98:16:62:
         58:99:ad:24:b2:96:2a:7e:4d:4d:7c:3d:b7:9c:8e:e7:e2:e6:
         4d:79:a0:90:31:e5:d2:8b:83:3b:4b:a9:35:b3:68:49:eb:be:
         6b:a9:4b:4e:fd:99:da:02:50:d5:65:e5:47:b3:d3:03:6d:87:
         83:aa:6f:81:36:19:cc:a5:d0:26:13:72:a4:6b:33:00:6f:86:
         e5:3e:bc:55:d1:0f:ed:ee:cd:e5:65:ef:df:22:a9:86:f6:2f:
         01:2f:ff:49:48:fa:e1:e0:18:b1:23:6a:90:40:45:70:b5:2c:
         6c:69:4a:d6:73:74:8b:52:4f:b3:95:83:bb:29:8e:f6:6a:18:
         7a:be:5d:8c:3b:f4:c5:69:75:a4:e9:ad:b7:69:f2:c5:5b:68:
         1f:c0:73:18:26:2f:64:99:f4:0e:59:e0:0e:6b:36:b0:9b:27:
         a8:ea:78:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ4rasCi7KO1j4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
NTk2MzExN2UtYWVkNS00YmQwLTllMDctZjNmNTM0ODkwYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFJ5qpD2R931Id4D+vr3+UHmCz6/rF2L/LTi
6upaByk1N07car/ASRAa77qYYEhbKyeJ66+RGnGBOm1elY3t402QkBryxsl38+5/
ajc0j34pN1WciQuUtWQtjh81cxKI/l3d2GnNpqp6aMleQmcHB9xyEBsrE69mRx/T
vs/7g3N3aT3qeEh81GUhLJnAVvrpnBorTkasHhgFOqK7q966CHUyj/p0Vvd2AFJu
57lMAfVrFeJbTgD4FsZrF2vfydysrfWeV00P4Df/mxBImcAcWo4ocaqwWSrFzvBN
XQQevFL5IIYLLyavNfJUvrRnOVSSzq9d1U0elzyN0M8oosa/UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3LpLmv0So6kApvwVbyL/KEPi6iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvYWI5ZjNkODktNGU3NC0z
YzljLTk1NjItYjk0ZWQ2ZDJmYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS07YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIko9ieHfx35q15kZJrUjqedf/eyA9aLOCXxOg2LQ8Vwj0NXw2g42p7A
0CHeQFRT2AP27b/bOhZUN+/My7KIejZa76LZZTdNkAkBpgvs9CBuau38H7dih5gW
YliZrSSylip+TU18Pbecjufi5k15oJAx5dKLgztLqTWzaEnrvmupS079mdoCUNVl
5Uez0wNth4Oqb4E2Gcyl0CYTcqRrMwBvhuU+vFXRD+3uzeVl798iqYb2LwEv/0lI
+uHgGLEjapBARXC1LGxpStZzdItST7OVg7spjvZqGHq+XYw79MVpdaTprbdp8sVb
aB/AcxgmL2SZ9A5Z4A5rNrCbJ6jqeGI=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:21 2025 by rpki-client on console.sobornost.net