Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa
File:                     32332e3134322e32362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          UcSSlu++IypGzdJbYvyIiCGV522rfiUYx9B9HLoIOyI=
Subject key identifier:   3A:CB:A2:4B:08:09:A7:91:1F:1A:D4:50:DC:5F:78:6D:9C:94:F5:76
Certificate issuer:       /CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
Certificate serial:       2E155B04208EF88AAB28B8301E3AE836B97B8E91
Authority key identifier: F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa
Signing time:             Thu 10 Apr 2025 21:31:01 +0000
ROA not before:           Thu 10 Apr 2025 21:26:01 +0000
ROA not after:            Thu 09 Apr 2026 21:31:01 +0000
asID:                     63023
IP address blocks:        23.142.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:15:5b:04:20:8e:f8:8a:ab:28:b8:30:1e:3a:e8:36:b9:7b:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5
        Validity
            Not Before: Apr 10 21:26:01 2025 GMT
            Not After : Apr  9 21:31:01 2026 GMT
        Subject: CN=3ACBA24B0809A7911F1AD450DC5F786D9C94F576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:63:6e:d3:69:87:c0:fe:0c:eb:c1:8a:61:
                    2c:df:42:43:0f:78:f3:24:a4:c1:c6:ef:f7:00:2c:
                    7b:bb:a0:4a:d3:2a:c7:af:e1:5e:b5:a1:03:74:95:
                    35:2a:6f:da:4d:2b:29:0e:d1:fb:85:5b:ea:ec:46:
                    a8:75:99:99:a4:2a:20:36:d8:aa:2c:1e:1b:d6:5e:
                    ed:a4:29:3a:8b:e0:55:cc:2e:85:a1:ba:a9:e5:47:
                    73:5e:17:1a:b7:0a:cf:5a:d4:8c:53:3a:12:9b:ed:
                    f6:b4:69:d1:1a:a2:eb:2f:69:be:0e:eb:6b:4e:98:
                    41:93:52:09:aa:d9:1f:e8:7b:a2:08:6c:bb:db:ef:
                    a2:d8:95:ba:d5:d5:77:90:07:c4:06:bf:c7:5d:c9:
                    1f:19:20:ad:a3:1b:6b:21:77:d1:33:b3:3e:3a:8c:
                    51:75:5a:ac:26:ff:95:d1:81:b9:d4:bb:40:b3:e3:
                    c9:bb:5d:76:fa:99:d9:ac:55:5b:27:c4:0e:72:77:
                    b8:cc:0e:f8:e9:05:19:11:20:12:e8:aa:18:6c:38:
                    c2:2e:4e:63:17:ec:c5:bf:11:96:74:46:e2:6a:b1:
                    00:75:5f:cd:e6:94:24:a8:30:3d:26:40:16:55:38:
                    b4:6e:27:55:fc:fc:ac:22:a4:ae:87:d5:46:28:ee:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CB:A2:4B:08:09:A7:91:1F:1A:D4:50:DC:5F:78:6D:9C:94:F5:76
            X509v3 Authority Key Identifier:
                keyid:F7:CA:76:95:FC:79:BE:2F:5B:AC:B4:B4:5D:5A:A5:60:79:CA:93:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/F7CA7695FC79BE2F5BACB4B45D5AA56079CA9336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca586a822a5426c8bac8ea2e5e25e5def6c3210f28c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/0/32332e3134322e32362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:f2:8f:e1:ce:1d:93:68:96:87:14:f7:3b:13:cc:69:b9:
         ff:db:a7:b0:e7:fe:3f:88:da:10:25:0b:ef:ed:b9:12:35:07:
         4e:b8:ad:ce:45:22:1d:e4:04:91:b9:d5:c8:73:cf:b0:97:bd:
         e2:85:e0:ac:3e:a6:90:33:4a:35:81:34:05:23:72:46:4a:6e:
         ee:df:22:f6:fd:e7:dc:d1:f0:da:56:30:88:0b:92:42:bd:d1:
         dc:ce:24:22:c1:6f:d3:50:64:bf:ba:2a:fb:c7:ef:3b:8f:2b:
         e4:0c:93:3d:86:21:2b:c1:ac:8c:d2:03:b6:fd:71:d9:88:87:
         a4:c1:c3:e6:85:46:83:af:2d:90:42:15:47:7d:a0:fd:8f:ca:
         23:87:bf:fb:e3:bb:27:f5:c5:d3:c9:3c:c8:04:df:78:6a:9c:
         37:d1:54:22:a3:23:57:ab:8f:c6:37:a6:cf:b0:c5:a7:81:6d:
         e7:66:ce:61:72:98:41:81:e0:fc:ae:47:f8:b9:b7:cf:25:28:
         ff:c7:21:7b:23:7b:7f:1f:a4:a1:21:93:52:57:15:58:45:34:
         db:cc:55:ce:30:6c:53:a7:ff:9e:d0:ad:47:08:0e:f2:2e:e4:
         f0:ec:4f:62:d6:a9:bf:cd:a4:6c:66:0c:0d:92:8a:49:6f:ce:
         ee:3d:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:10 2025 by rpki-client on console.sobornost.net