Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c0b311a8-18f8-33a8-8cb6-282a17f03097.roa
File:                     c0b311a8-18f8-33a8-8cb6-282a17f03097.roa (raw, json)
Hash identifier:          /cv0LImzgR45CJaaKTyYg9f+yVXFllY5EM4aGO+wWQ8=
Subject key identifier:   40:57:59:02:70:D7:22:25:AA:DE:59:30:22:38:F3:BD:E9:44:35:ED
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849780F0BB303D5829D83F54680
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c0b311a8-18f8-33a8-8cb6-282a17f03097.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     19905
IP address blocks:        208.50.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0b:b3:03:d5:82:9d:83:f5:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=fba6e0df-0623-4d4e-94ea-fe60cf3ed7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:27:b5:2e:9c:8d:80:43:e2:61:f8:86:1d:
                    30:f9:4d:8b:0b:a1:8d:22:7f:09:a4:ce:71:b2:04:
                    e8:81:a8:65:95:a3:ef:cd:fe:94:12:8c:6f:8b:fa:
                    c5:f5:bc:5a:6b:37:f0:e4:26:06:9b:26:0f:23:cf:
                    41:c7:08:9d:ed:23:22:d4:9e:b0:11:27:6b:51:95:
                    ab:9e:9f:31:52:cc:74:c4:fc:f6:93:cf:58:b4:71:
                    a7:bf:e6:3c:df:71:b9:a7:87:35:5a:bb:8c:56:95:
                    01:e7:7b:90:da:0d:0f:b7:40:6e:42:47:cb:76:c6:
                    00:06:b2:17:98:3e:0f:57:d5:73:d0:64:96:26:d8:
                    5d:eb:44:7d:db:5b:4f:91:38:e1:e0:19:fd:d3:a9:
                    72:a5:2f:35:5e:12:cf:15:9c:e6:a4:e0:51:c7:e0:
                    17:28:ce:9b:8d:6e:a1:cf:ce:a4:a0:fb:53:45:62:
                    9a:ea:c3:43:3d:2b:6f:6c:cd:12:82:98:69:ab:3b:
                    72:ad:35:8b:6c:f4:73:90:72:e6:4c:3e:4a:cf:f5:
                    91:38:38:33:c8:89:90:1b:56:e3:d4:b3:58:5d:58:
                    ab:87:34:81:26:6b:ad:62:4c:38:f2:7e:00:9c:18:
                    ac:b5:92:98:09:f8:b5:f4:7b:39:8e:b9:3e:fb:f6:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:59:02:70:D7:22:25:AA:DE:59:30:22:38:F3:BD:E9:44:35:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c0b311a8-18f8-33a8-8cb6-282a17f03097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.50.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:99:9f:63:74:14:93:54:d7:1f:8a:45:f9:66:93:eb:8b:3f:
         e0:06:91:e9:9d:d2:e4:d8:9b:60:de:25:4f:2b:26:77:15:50:
         64:49:eb:e1:50:93:51:7a:7d:94:6d:6e:8a:12:d6:97:f1:6e:
         43:30:65:a9:b2:ba:4c:2c:52:bf:47:9e:81:35:88:ac:bb:f5:
         73:7d:13:64:8e:7b:6c:df:2c:12:f7:16:2f:3d:b0:01:9b:78:
         a4:fe:ac:e5:e1:4d:ea:65:52:87:28:3e:e0:64:93:66:e2:5c:
         5c:94:64:07:f9:bc:ac:3b:f9:7f:78:0f:ee:ec:52:a6:20:1a:
         ea:b0:3a:dc:e5:d9:29:72:c9:56:b1:0e:85:7e:5d:4e:fa:57:
         35:5b:3b:6e:4a:0f:72:c1:c7:a1:f1:0d:42:d6:1b:19:e4:d4:
         d6:70:5c:77:e4:e8:c1:be:7d:fb:25:7b:98:cd:e4:a1:3f:67:
         d7:6a:a0:4c:b3:24:d9:31:3d:ac:2d:bf:a5:3e:66:56:d6:da:
         55:56:11:e1:10:e7:2e:70:18:c9:42:bc:35:38:46:b2:0d:fa:
         9b:05:55:b8:29:d8:a1:6f:94:f0:fe:2f:75:0a:7e:1a:ef:6f:
         a8:37:de:92:ac:63:3b:c0:8a:71:6d:f0:11:6b:ec:a3:5e:13:
         56:47:94:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:43 2025 by rpki-client on console.sobornost.net