Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa
File:                     08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa (raw, json)
Hash identifier:          JdGu6+hqPH+3E/XJHOb1A6GbxTODZE0X1Vo4M5ljWN8=
Subject key identifier:   31:39:95:26:95:9D:45:07:0F:1E:AF:E8:65:A6:3E:95:45:88:67:DB
Certificate issuer:       /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial:       010D0C9F4328584965E970EB519356FC443179C0
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     16437
IP address blocks:        23.188.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:70:eb:51:93:56:fc:44:31:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=6475d9fa-829d-437f-b57a-8e643eb516f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:86:fa:80:4b:e7:25:74:52:34:e3:90:5c:
                    1f:31:40:8b:7e:14:81:8d:5e:da:89:2e:93:46:46:
                    f3:c7:3b:a9:b2:0e:03:30:aa:60:8e:c4:a1:37:8a:
                    86:76:3c:48:bd:61:e1:9c:2b:7d:69:a8:4c:f2:b1:
                    92:e6:ef:58:eb:e8:ca:b1:e3:8b:d7:56:f8:6b:be:
                    1e:29:67:36:75:97:35:50:70:60:4e:e7:7e:98:b9:
                    e0:56:2b:25:23:e7:2a:98:34:12:6f:03:2d:8d:a2:
                    58:00:56:8d:9f:b3:3d:40:6b:58:9d:80:a2:83:0c:
                    43:6c:e4:22:da:b5:e9:cf:35:64:82:f7:a8:7f:27:
                    9d:f5:9f:ac:4e:dd:4d:9a:65:a5:2d:f2:7a:6d:0a:
                    db:cd:b4:42:1d:fa:aa:f4:6d:f0:d3:ff:3c:df:28:
                    67:f5:cd:44:28:1b:74:a8:c6:5a:bf:c9:6f:57:5a:
                    54:e7:24:2d:eb:f9:80:e3:21:9d:16:ee:e1:37:60:
                    92:dc:5f:6b:64:56:e0:fe:a4:13:c7:ca:c0:33:6a:
                    09:45:76:77:ab:09:d6:14:50:ef:da:ae:0c:2b:3c:
                    bf:a5:3a:7b:38:87:2e:ed:96:4d:a2:1d:7b:9e:1a:
                    6c:90:6e:49:f9:f1:a4:ab:1c:c6:89:ae:d4:ac:7a:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:39:95:26:95:9D:45:07:0F:1E:AF:E8:65:A6:3E:95:45:88:67:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/08a7bded-2d5d-3c43-82c3-cf8cfc6bb171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl

            X509v3 Authority Key Identifier:
                keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:9b:02:9a:43:09:3d:99:26:28:4b:64:78:0b:64:74:4e:
         2d:b0:56:63:7e:fb:f3:b2:d3:bc:b2:b7:d4:6f:54:2e:97:d0:
         f2:71:23:89:b5:12:6f:1b:2e:f9:01:db:37:3b:90:cb:77:bf:
         42:13:42:da:30:4d:5a:60:47:01:4d:51:99:4d:fe:0e:8e:7b:
         48:23:3d:c2:72:77:d4:bd:a4:40:61:41:1f:99:67:98:8a:34:
         e5:fa:60:91:22:d2:b4:85:05:d4:56:d0:bf:5c:1f:2f:4b:54:
         43:02:f3:65:f0:bd:f7:fa:5b:28:66:e1:97:ad:7d:1f:7c:83:
         24:76:e1:af:d7:2d:4f:95:4a:d1:1b:7e:c6:e4:94:40:59:c5:
         88:5d:be:88:5e:e3:35:b3:e8:e0:e3:e3:b2:7c:14:26:a0:c8:
         a5:7e:37:6c:69:5a:5b:49:01:47:3a:06:0f:19:16:b2:61:d7:
         94:10:dc:99:f9:a0:5d:bc:14:d8:a7:fe:4e:e0:ed:b7:1d:f4:
         5c:70:32:68:08:69:b9:44:f1:70:29:f3:75:25:9c:5e:a7:73:
         4f:88:c3:49:6f:17:5a:0e:f2:bf:d3:12:87:ae:83:a6:11:e1:
         68:0f:46:35:cd:11:17:ee:18:af:09:69:19:eb:8a:3f:af:ed:
         41:93:bc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net