Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa
File:                     3a26bc16-7afc-3fcb-b8db-830386abf560.roa (raw, json)
Hash identifier:          ee/zcaAIo7s+7wk/ZpiH4zFvV4meRTraHvOY536DrZY=
Subject key identifier:   CB:F8:DD:5B:FE:0B:A7:0F:31:8E:27:B2:43:FA:F1:AE:A0:80:21:E4
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F432858496FAF077958E7D5F492003580
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     397666
IP address blocks:        23.157.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:07:79:58:e7:d5:f4:92:00:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=ba97983e-0c43-4aa6-bb1f-14daa3e16ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:80:84:23:50:b3:f8:7a:6b:fa:fd:f5:b3:
                    c4:d5:06:f1:a3:91:2f:f3:b5:c1:9d:f6:67:9d:b9:
                    25:91:4c:15:70:be:b8:71:24:1e:90:2b:d5:b3:b5:
                    11:bd:6c:b7:35:8e:d9:93:56:9e:d6:80:d5:10:c6:
                    a8:b9:bc:68:ed:dd:dd:4c:fc:da:2d:cf:fc:9c:ce:
                    19:78:63:84:f8:d7:81:3f:d2:65:ef:f1:bb:49:f0:
                    67:30:f7:c1:ec:f8:dc:62:13:0f:77:47:01:af:27:
                    ba:24:2d:f6:93:8c:c6:29:b7:ab:f0:04:67:58:d9:
                    68:66:8d:62:e4:37:43:95:f6:34:6f:43:77:61:4f:
                    5c:19:63:43:2b:6a:1e:56:25:5d:aa:08:d7:39:f0:
                    f0:4e:21:fa:78:f5:35:29:93:25:a5:0f:fd:d7:2b:
                    dd:d6:e0:76:db:1e:3e:03:02:9f:ea:ca:94:d6:92:
                    1d:4f:e5:b1:25:89:f5:c4:17:b2:da:3a:69:3c:fa:
                    f2:dc:df:c4:11:a1:9f:48:67:cc:16:b5:79:b4:cf:
                    8b:9d:4a:ac:9c:85:35:31:b7:8a:26:b3:2b:3b:5f:
                    e4:36:2c:91:49:2c:43:7e:f6:c2:7c:ac:54:62:9f:
                    0d:ed:17:23:1e:0a:27:f6:ba:18:44:3c:32:fd:9b:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F8:DD:5B:FE:0B:A7:0F:31:8E:27:B2:43:FA:F1:AE:A0:80:21:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a1:ea:38:26:ba:9a:c8:7b:a2:5f:91:54:36:96:21:ed:39:
         74:f2:42:bd:cf:ed:2f:dc:1a:14:a8:bc:5f:a1:39:dc:72:68:
         4a:34:f8:43:cd:e0:d9:ae:4d:c9:c3:51:38:24:27:6f:98:2c:
         6e:48:6d:cc:e5:88:09:cf:0a:5a:6c:f9:9f:13:3f:27:8f:8d:
         97:62:99:b0:03:a5:4b:d2:aa:d3:6e:86:7e:c3:e7:68:5b:71:
         12:c8:fb:ec:b0:47:0b:d8:66:c0:f1:29:8f:37:01:ae:80:ab:
         00:41:f0:8b:f5:6c:72:02:23:4c:fb:dc:91:17:3d:42:3b:40:
         f1:5e:ae:7b:b1:40:f9:9c:0e:76:d9:3f:60:f9:b7:a1:a3:c3:
         bd:bf:64:5f:63:02:b3:c5:20:3e:97:ba:67:ed:81:0a:5a:f4:
         bc:82:1f:72:26:83:40:f1:85:35:c8:86:21:a9:87:f6:c9:fe:
         27:39:c2:6b:6b:4a:63:5f:0d:b8:03:58:01:17:30:59:2b:c5:
         b3:f4:65:59:4e:34:f3:33:ae:91:98:59:a3:55:53:2b:03:6a:
         fb:22:b0:c7:5a:69:71:d9:4e:e3:3b:e2:38:af:6e:a9:31:c9:
         b6:79:5f:a2:2e:b2:a0:28:4a:15:8f:c3:82:a0:d8:53:d4:df:
         06:d6:53:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:32 2025 by rpki-client on console.sobornost.net