Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/32332e3139302e32342e302f32342d3234203d3e203133383532.roa
File:                     32332e3139302e32342e302f32342d3234203d3e203133383532.roa (raw, json)
Hash identifier:          gfnT0gmo2tzBxWjqRjPsTbe1ajHKh7HBW6oFgzW8zN8=
Subject key identifier:   DE:A7:8E:EE:A2:46:28:23:B7:86:C4:1E:93:BB:B6:49:B7:01:A8:7E
Certificate issuer:       /CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
Certificate serial:       12DB4BA4FE24FBE8A53C8932AD67E420E767DE24
Authority key identifier: 2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/32332e3139302e32342e302f32342d3234203d3e203133383532.roa
Signing time:             Thu 10 Apr 2025 08:01:40 +0000
ROA not before:           Thu 10 Apr 2025 07:56:40 +0000
ROA not after:            Thu 09 Apr 2026 08:01:40 +0000
asID:                     13852
IP address blocks:        23.190.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:db:4b:a4:fe:24:fb:e8:a5:3c:89:32:ad:67:e4:20:e7:67:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac
        Validity
            Not Before: Apr 10 07:56:40 2025 GMT
            Not After : Apr  9 08:01:40 2026 GMT
        Subject: CN=DEA78EEEA2462823B786C41E93BBB649B701A87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:a4:ef:f2:4c:cf:8d:30:a4:0a:bb:90:1d:
                    43:f2:14:3a:cf:d4:e1:27:e5:42:45:f9:30:4b:be:
                    a1:de:ff:da:d6:da:2d:dc:a2:3a:60:64:3b:b8:f5:
                    ff:9d:78:bd:2e:3f:3c:6a:ed:33:26:90:17:5e:d7:
                    09:c0:80:f7:17:43:d5:d5:90:57:5f:c1:45:40:59:
                    de:8d:bc:06:ce:7e:c9:42:2d:c6:e1:db:26:b7:b1:
                    dc:42:9a:2b:70:1f:85:9c:41:b9:b3:84:df:21:b3:
                    a9:20:f4:fe:4d:8a:3f:d3:8e:38:dc:46:e8:57:b0:
                    8a:78:7b:55:3a:1c:72:9c:99:e7:b4:13:74:aa:78:
                    e7:e3:ee:89:f1:c6:f0:a0:6d:3b:47:75:c7:7b:4f:
                    01:2f:fd:cc:d1:92:2e:0d:34:4d:44:31:88:4d:4c:
                    50:05:01:29:84:ec:16:94:95:3b:51:d7:8b:31:f9:
                    ab:a8:2a:d8:d7:e4:ce:d7:54:a9:9b:4e:10:80:6e:
                    dc:af:d0:a0:71:a1:c7:54:81:85:5e:ca:ed:42:a2:
                    be:0f:c8:74:df:3a:19:89:63:db:7f:3e:1f:3e:06:
                    bc:b6:07:49:b0:34:0f:fc:6e:53:43:df:3c:33:9f:
                    d7:53:91:a3:bb:6a:c5:a1:8b:34:26:7f:90:34:fa:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:8E:EE:A2:46:28:23:B7:86:C4:1E:93:BB:B6:49:B7:01:A8:7E
            X509v3 Authority Key Identifier:
                keyid:2E:08:38:3B:BD:F8:9E:0A:4C:9A:C0:DF:33:DC:D0:1B:A1:9B:AB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/2E08383BBDF89E0A4C9AC0DF33DCD01BA19BAB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed355b47d87f13f1b68002bb4b0f191ef0e62798ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/026ce4d3a54f4a11ae5aba9833410701/0/32332e3139302e32342e302f32342d3234203d3e203133383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:46:bd:ce:50:6c:f0:b1:67:93:aa:0c:50:ee:90:fa:82:
         03:80:f8:9d:de:78:a1:f1:eb:85:a1:06:30:b2:0f:c9:6f:cd:
         21:1c:7c:71:7c:cd:cb:79:7f:9c:ce:c9:6e:87:18:8c:7e:f9:
         71:02:3c:3e:09:8d:c3:d5:40:ac:98:c4:f3:25:e1:ac:ea:de:
         d1:c0:75:e9:6a:ea:bf:1f:06:6a:67:e1:9d:7f:ef:c9:f2:44:
         e5:47:68:c1:99:9f:f2:58:23:bd:79:d9:9b:51:8c:34:39:e5:
         d7:2a:07:dc:8d:24:64:ff:ad:c3:c0:8d:e3:96:83:32:7b:12:
         b3:64:d4:69:54:ae:a3:65:65:df:fe:f8:be:8e:41:db:71:91:
         ae:bb:70:30:d7:f8:9a:67:f6:8e:75:5e:06:76:e5:05:f6:12:
         9e:f5:c9:e1:60:c7:30:7d:25:6c:f6:bd:d6:ce:49:f3:a1:9a:
         9c:17:a5:14:0f:ab:70:b1:f4:3e:03:3e:bb:eb:86:d1:61:fe:
         93:2e:b5:5c:ac:c4:b3:a9:b7:ed:a9:5b:47:82:ac:94:01:74:
         ab:69:48:1e:b5:92:6f:8d:3f:a4:33:98:4b:48:2b:2f:cb:3f:
         40:8b:fe:8c:19:d1:95:37:50:8e:a3:d5:be:ef:ea:59:56:e4:
         0d:80:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net