Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17663f0e-7d96-30b2-b84c-cbd4d4d59f57.roa
File:                     17663f0e-7d96-30b2-b84c-cbd4d4d59f57.roa (raw, json)
Hash identifier:          f73buIrA3nWKxRO3efBxyouh8Bt7oHn3Crm0maxLGQ8=
Subject key identifier:   84:6B:33:48:47:DD:30:36:E2:98:EC:CD:36:15:8B:9E:89:7A:9F:08
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584975BFEE303815DF5231022870
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17663f0e-7d96-30b2-b84c-cbd4d4d59f57.roa
Signing time:             Tue 08 Apr 2025 17:10:07 +0000
ROA not before:           Tue 08 Apr 2025 17:10:07 +0000
ROA not after:            Mon 07 Jul 2025 17:10:07 +0000
asID:                     30900
IP address blocks:        23.26.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:bf:ee:30:38:15:df:52:31:02:28:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Apr  8 17:10:07 2025 GMT
            Not After : Jul  7 17:10:07 2025 GMT
        Subject: CN=cc8194c7-bf29-4811-898b-b40dba0be3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6c:e9:2a:39:f3:7b:4c:50:e6:b0:69:78:9b:
                    13:f6:37:60:cd:5a:6d:c3:31:ac:3f:dd:d5:b4:41:
                    28:d2:cb:2d:61:ad:b0:1f:b3:d8:db:f5:6e:08:f8:
                    a7:a7:7a:7d:8c:58:8d:41:70:1a:c8:e2:96:02:17:
                    36:d6:0b:13:94:50:c8:8b:cd:3b:db:c4:dd:04:9c:
                    41:0b:42:a1:c5:56:9a:f4:ba:0d:10:5b:79:0c:2c:
                    2f:cc:70:9b:68:e4:f5:d6:61:97:7f:08:00:21:98:
                    7f:5c:35:7d:54:35:db:00:80:10:fa:41:08:ad:21:
                    95:c7:22:88:dc:49:e2:78:33:98:1e:4f:1d:3d:2c:
                    ea:76:42:19:c3:df:34:ff:1c:9f:8d:59:35:4b:fe:
                    8d:d9:09:4f:90:0d:d0:67:cb:e0:ad:40:2d:74:ec:
                    73:e4:39:51:49:83:d7:eb:de:5e:e4:89:f6:8e:fe:
                    00:e8:28:44:0e:67:6c:df:dd:da:e0:b6:aa:a4:e4:
                    66:61:17:c3:67:21:a3:30:56:d9:e8:84:2b:29:82:
                    68:7f:a2:7a:39:63:e8:19:47:c7:a0:74:60:ef:36:
                    ec:dd:fa:29:ed:8e:02:bf:83:8e:a4:f5:54:97:0e:
                    1b:4d:bd:c5:d6:b2:17:c3:f3:21:42:a1:4b:3e:2d:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:33:48:47:DD:30:36:E2:98:EC:CD:36:15:8B:9E:89:7A:9F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/17663f0e-7d96-30b2-b84c-cbd4d4d59f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:3f:d1:e2:e0:1f:fe:52:ae:b2:02:ea:6c:81:f1:05:63:
         32:0b:4b:f6:89:0a:98:c3:c3:80:3b:6f:38:58:b1:e5:4f:9a:
         c4:de:32:66:3b:c8:6c:2c:51:cd:52:79:d4:43:55:6c:ea:74:
         3d:fb:74:67:b2:e4:95:60:54:26:73:44:ad:c2:30:46:da:fc:
         49:7d:c5:16:79:81:51:6a:48:ca:b1:f7:9e:35:3f:57:3e:b9:
         ab:4d:87:16:2e:32:15:75:4a:cc:18:e1:e1:b9:77:e0:33:0a:
         51:2d:df:c7:e4:70:b2:be:5f:89:66:e9:93:ec:43:f9:f8:a6:
         e1:a5:57:01:df:6a:c6:e2:b6:1c:2a:0d:38:50:ee:c3:3a:9b:
         4b:0b:f1:6b:ea:3c:0f:0f:1f:a5:f9:bf:58:d6:a9:0e:35:02:
         c1:20:c8:44:39:50:8f:12:e3:11:15:51:1f:5e:bf:58:b3:9c:
         16:18:8b:0d:c1:32:0c:88:1d:96:19:e5:7a:68:69:3a:8f:0b:
         74:97:32:32:ec:a8:e5:3f:45:56:48:c9:f0:85:75:a6:de:13:
         ef:ff:03:24:88:91:f8:af:a3:8c:2f:52:6b:cb:52:65:c6:a3:
         3d:d2:de:0a:8a:ad:66:64:3d:aa:83:9e:1a:68:6f:ad:7a:cf:
         1c:22:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:03 2025 by rpki-client on console.sobornost.net