Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa
File:                     de5a1111-524c-34ad-ac5d-56928886b100.roa (raw, json)
Hash identifier:          xUjbFEJ/4uvlSSInjg29JtEVQmZ9bFnzyestljb1yuU=
Subject key identifier:   6F:BD:D0:62:1A:15:3B:18:98:62:DC:48:2D:D4:EB:E6:40:BE:8E:C1
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F43285849350E94915E339609F5E98A40
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     13576
IP address blocks:        216.106.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:94:91:5e:33:96:09:f5:e9:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=bbefbcc5-fece-462c-bdb2-bf1750a50aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:af:00:d3:40:89:d1:66:26:94:13:1d:9f:
                    6a:db:ba:cb:2d:85:44:da:45:b2:69:1f:35:78:5d:
                    31:a3:30:f0:85:55:62:24:23:99:46:15:a8:6c:bd:
                    c7:aa:ac:06:79:d1:9f:e0:d4:2f:cc:87:77:25:6e:
                    22:45:5f:2d:9b:a5:46:bc:7f:d0:0f:9e:85:1c:22:
                    c6:25:63:42:91:89:ae:5e:40:35:fe:18:e0:e3:85:
                    df:e1:3e:8e:3b:64:2c:8e:e1:da:0c:4c:11:ce:13:
                    62:2e:07:94:af:59:04:10:b2:e2:c3:17:6b:f6:d3:
                    0e:f4:57:1e:f2:e8:b3:e5:fa:5d:5b:d2:15:8d:4d:
                    07:68:ad:39:b1:3c:5c:88:22:3f:cb:c1:50:d4:2a:
                    37:3a:1d:07:82:7c:c2:bd:85:f7:83:25:46:fe:64:
                    d2:e8:e0:e7:90:df:94:ab:f9:b6:c2:37:1c:6a:d8:
                    fa:4d:95:8d:d8:52:a1:44:6e:2a:7b:ba:b5:8e:52:
                    93:93:da:61:7a:f2:45:ce:06:20:fb:90:2f:f6:22:
                    4c:b2:0e:4c:22:87:10:32:26:f5:94:5d:03:8c:b0:
                    2d:9a:9d:5a:be:59:e3:f5:41:eb:49:73:ff:21:57:
                    54:8d:2c:d7:2d:72:59:b5:76:4f:79:4e:57:3f:ab:
                    1e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:D0:62:1A:15:3B:18:98:62:DC:48:2D:D4:EB:E6:40:BE:8E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/de5a1111-524c-34ad-ac5d-56928886b100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:69:79:bd:71:d6:5a:5b:6f:62:d1:46:9e:63:8b:2c:3f:
         0d:47:cc:6a:81:98:3a:ff:c5:43:6b:11:8c:5a:1f:16:59:63:
         36:8b:9b:51:57:a0:4b:7e:d9:9d:c3:de:68:e0:e5:e7:ca:64:
         7f:38:e0:3a:d3:0a:9c:1b:e5:79:b1:70:ed:52:b8:3a:8d:8c:
         8e:03:db:cd:36:65:7c:c3:dc:14:79:65:68:38:8a:05:b8:59:
         f9:03:75:98:7d:90:a6:b1:7f:3b:95:50:16:11:58:e5:0a:8a:
         f3:4c:7b:0a:99:58:48:28:9f:63:17:6d:bd:51:d0:39:7b:a6:
         9b:72:51:c3:f5:0d:3f:bf:f6:b1:f9:96:5a:f9:77:be:60:c8:
         71:42:7d:eb:10:12:f2:c0:73:04:e9:20:25:c7:31:1d:dd:2a:
         2d:7a:00:d3:bd:db:45:00:23:e9:51:da:53:e4:cd:82:9b:e3:
         34:e3:38:45:f0:b5:4d:8f:34:3b:a8:28:aa:2f:35:e1:06:f4:
         29:f0:ab:82:36:73:6f:79:a6:d7:ec:ec:9f:05:77:b2:d6:b7:
         d9:0f:27:25:63:b7:59:71:f7:a0:fd:b6:ca:18:8f:de:14:96:
         59:bb:b7:05:21:7f:50:9b:dc:c0:5e:63:d3:7b:bc:64:40:fc:
         6b:ba:d7:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpSRXjOWCfXpikAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
YmJlZmJjYzUtZmVjZS00NjJjLWJkYjItYmYxNzUwYTUwYWVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQSvANNAidFmJpQTHZ9q27rLLYVE2kWyaR81
eF0xozDwhVViJCOZRhWobL3HqqwGedGf4NQvzId3JW4iRV8tm6VGvH/QD56FHCLG
JWNCkYmuXkA1/hjg44Xf4T6OO2QsjuHaDEwRzhNiLgeUr1kEELLiwxdr9tMO9Fce
8uiz5fpdW9IVjU0HaK05sTxciCI/y8FQ1Co3Oh0HgnzCvYX3gyVG/mTS6ODnkN+U
q/m2wjccatj6TZWN2FKhRG4qe7q1jlKTk9phevJFzgYg+5Av9iJMsg5MIocQMib1
lF0DjLAtmp1avlnj9UHrSXP/IVdUjSzXLXJZtXZPeU5XP6se8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+90GIaFTsYmGLcSC3U6+ZAvo7BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvZGU1YTExMTEtNTI0Yy0z
NGFkLWFjNWQtNTY5Mjg4ODZiMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9AaXm9cdZaW29i0UaeY4ssPw1HzGqBmDr/xUNrEYxaHxZZYzaLm1FX
oEt+2Z3D3mjg5efKZH844DrTCpwb5XmxcO1SuDqNjI4D2802ZXzD3BR5ZWg4igW4
WfkDdZh9kKaxfzuVUBYRWOUKivNMewqZWEgon2MXbb1R0Dl7pptyUcP1DT+/9rH5
llr5d75gyHFCfesQEvLAcwTpICXHMR3dKi16ANO920UAI+lR2lPkzYKb4zTjOEXw
tU2PNDuoKKovNeEG9Cnwq4I2c295ptfs7J8Fd7LWt9kPJyVjt1lx96D9tsoYj94U
llm7twUhf1Cb3MBeY9N7vGRA/Gu619Y=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net