Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
File:                     6f2a8979-499b-3861-8229-f7dcb3b30854.roa (raw, json)
Hash identifier:          8KBDSiqNQddDI9bAKA0S05geHZpGEnLtHXraUl7M8dY=
Subject key identifier:   C7:56:C4:E4:69:49:05:76:8C:D1:BB:4A:3D:02:D5:46:7C:35:6B:4E
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584930DE62F94ECBB03FF71ECB80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     30607
IP address blocks:        198.41.8.0/22 maxlen: 22
                          198.41.8.0/23 maxlen: 23
                          198.41.8.0/24 maxlen: 24
                          198.41.9.0/24 maxlen: 24
                          198.41.10.0/23 maxlen: 23
                          198.41.10.0/24 maxlen: 24
                          198.41.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:62:f9:4e:cb:b0:3f:f7:1e:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=6736ca0f-a4f7-4dfa-8c55-4e77c04cf080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:04:9a:97:58:66:79:49:b6:20:bd:b4:bf:
                    fd:97:7c:0c:91:3f:14:d9:7b:dd:1f:53:b9:74:f5:
                    80:8f:ef:7d:de:38:b8:77:15:ac:23:3a:d8:4a:e3:
                    ea:e9:35:30:c0:d3:b2:73:83:a5:79:60:a5:2d:d8:
                    70:0f:4e:5e:3c:5f:e5:b0:2c:a2:3c:af:bb:84:f8:
                    ba:58:50:9d:28:ca:90:0f:af:f2:4d:1d:93:ac:2b:
                    b4:18:08:29:21:a8:09:c0:85:5e:16:6e:79:28:d2:
                    0b:03:5d:9b:b6:5a:af:48:ef:09:e1:05:48:98:3d:
                    3b:80:fd:36:0f:19:04:92:2b:f1:d8:34:81:82:c7:
                    2d:7a:84:ab:ea:d2:49:a1:5d:4f:fb:f3:bd:89:c1:
                    fd:3a:26:80:63:25:dc:f2:71:72:13:c0:fe:fe:34:
                    da:2c:97:af:d6:65:c6:7a:c6:c1:c3:f7:f9:70:ca:
                    d7:54:5c:1a:88:91:1c:00:41:01:39:91:0b:ea:7d:
                    d5:5b:3e:44:fc:bf:a5:94:24:34:4a:ca:96:cc:57:
                    d7:03:76:82:57:59:2d:dd:ea:54:97:b3:16:80:53:
                    60:c3:22:5c:6a:18:69:72:1d:e9:3a:47:e8:bd:4d:
                    85:a5:b2:6c:ee:0c:f5:f8:ce:f8:e0:e2:95:d2:57:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:C4:E4:69:49:05:76:8C:D1:BB:4A:3D:02:D5:46:7C:35:6B:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/6f2a8979-499b-3861-8229-f7dcb3b30854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:0b:0d:26:ab:b6:9a:8f:77:2a:d5:57:35:c7:01:fa:80:3f:
         11:ed:f0:cd:65:29:8c:12:4d:5e:6f:3f:08:5e:fc:48:1d:0f:
         70:80:93:90:cb:be:2e:b1:d7:5e:e4:27:6f:3a:31:4b:07:aa:
         d5:ba:e3:65:28:18:b5:93:48:f6:b6:d7:48:0d:3e:6e:f1:1e:
         28:0f:39:00:71:45:e5:6d:95:c6:c9:6e:45:f0:70:eb:70:99:
         fc:0c:37:09:c6:68:cb:8f:dc:e9:5b:9f:a0:8b:95:4d:ce:7b:
         a5:4d:ee:06:16:1b:bd:3f:cc:96:4b:c3:a6:6c:10:7e:80:26:
         48:91:45:ec:2c:34:41:71:55:d5:49:d0:94:44:7c:e7:9d:27:
         24:d9:74:9c:c6:8f:b3:bd:1f:cf:f2:f7:53:67:13:a4:6f:d7:
         86:80:79:19:2e:42:22:8e:4e:65:f4:a9:ae:31:cf:d4:5a:b9:
         1c:b6:e2:4f:96:dc:cd:4b:af:cb:24:5b:d5:1c:2d:31:5c:bd:
         9a:6c:7d:3c:8d:9e:d2:af:c1:ba:82:51:a2:c1:3d:b5:db:10:
         65:4d:42:31:36:da:3b:2d:c5:20:63:02:45:b1:5d:cb:a2:5b:
         05:a2:d6:ad:b5:b2:7a:08:2d:a1:0e:4a:a8:e6:70:58:01:0a:
         ba:9f:9e:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mL5TsuwP/cey4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk
ZWZjMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk
NjczNmNhMGYtYTRmNy00ZGZhLThjNTUtNGU3N2MwNGNmMDgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllQEmpdYZnlJtiC9tL/9l3wMkT8U2XvdH1O5
dPWAj+993ji4dxWsIzrYSuPq6TUwwNOyc4OleWClLdhwD05ePF/lsCyiPK+7hPi6
WFCdKMqQD6/yTR2TrCu0GAgpIagJwIVeFm55KNILA12btlqvSO8J4QVImD07gP02
DxkEkivx2DSBgscteoSr6tJJoV1P+/O9icH9OiaAYyXc8nFyE8D+/jTaLJev1mXG
esbBw/f5cMrXVFwaiJEcAEEBOZEL6n3VWz5E/L+llCQ0SsqWzFfXA3aCV1kt3epU
l7MWgFNgwyJcahhpch3pOkfovU2FpbJs7gz1+M744OKV0lc82QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdWxORpSQV2jNG7Sj0C1UZ8NWtOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj
YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvNmYyYTg5NzktNDk5Yi0z
ODYxLTgyMjktZjdkY2IzYjMwODU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm
MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi
ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw
NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxikIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwLDSartpqPdyrVVzXHAfqAPxHt8M1lKYwSTV5vPwhe/EgdD3CAk5DL
vi6x117kJ286MUsHqtW642UoGLWTSPa210gNPm7xHigPOQBxReVtlcbJbkXwcOtw
mfwMNwnGaMuP3Olbn6CLlU3Oe6VN7gYWG70/zJZLw6ZsEH6AJkiRRewsNEFxVdVJ
0JREfOedJyTZdJzGj7O9H8/y91NnE6Rv14aAeRkuQiKOTmX0qa4xz9RauRy24k+W
3M1Lr8skW9UcLTFcvZpsfTyNntKvwbqCUaLBPbXbEGVNQjE22jstxSBjAkWxXcui
WwWi1q21snoILaEOSqjmcFgBCrqfnsQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:06 2025 by rpki-client on console.sobornost.net