Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa
File:                     503cdd68-aeb6-3449-a263-740c11bc2cde.roa (raw, json)
Hash identifier:          oefCqQH9c5AMtCv+hpNKjXYsuHkfmb8dKb2RzsjN37E=
Subject key identifier:   C9:6F:87:4C:A3:9E:FE:D2:84:0E:6F:8E:69:F3:0C:E3:6E:6B:B8:11
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858477230EF0B4219DB9320891140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     273741
IP address blocks:        23.26.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:ef:0b:42:19:db:93:20:89:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=0b1f181b-f3b1-4e36-ae6c-422e861abb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:ad:1f:f2:41:03:25:81:96:08:25:55:84:
                    36:2e:a4:93:46:5e:a0:56:a5:17:10:73:05:d7:35:
                    a6:be:db:a5:cb:b8:f3:46:3a:cc:98:23:2f:3d:50:
                    5f:49:38:74:00:7d:3d:12:57:33:78:46:06:f1:1f:
                    4e:2b:37:0f:d0:5d:0d:32:40:44:b4:4b:3e:74:59:
                    ff:97:b0:38:5c:c5:cc:54:97:60:cb:7d:c3:15:9d:
                    55:c9:03:66:d1:26:69:53:c2:d8:69:79:ef:41:f3:
                    2e:78:27:fb:2f:9b:1c:4e:19:fa:82:cc:ad:3f:92:
                    24:e8:46:cc:9f:57:9b:4c:35:42:ad:43:30:fb:79:
                    45:d6:1b:75:85:90:b2:04:10:62:18:46:ec:26:2c:
                    8b:1a:62:57:95:48:01:8c:c6:4b:ad:a3:be:d4:d5:
                    74:d0:9d:01:1c:d7:7e:c0:b3:a1:76:4e:9e:2b:60:
                    cd:06:93:9a:89:07:4f:e0:db:c8:37:8e:b5:77:e5:
                    45:12:96:a7:71:c4:71:aa:0e:69:2c:fc:dd:d3:ae:
                    e3:2e:f3:31:88:ca:ed:21:43:24:39:f7:fe:e4:b2:
                    4b:05:79:11:7a:fa:33:8b:0e:76:54:76:f3:e3:67:
                    23:05:e8:c0:26:2e:fe:e6:f7:af:35:6d:db:cb:78:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6F:87:4C:A3:9E:FE:D2:84:0E:6F:8E:69:F3:0C:E3:6E:6B:B8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/503cdd68-aeb6-3449-a263-740c11bc2cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:9c:80:fa:83:c8:0f:b2:0d:e9:41:90:e0:cd:1d:de:27:b1:
         93:41:a8:db:e4:c2:f9:ff:b1:4d:16:13:32:aa:9a:9b:63:9b:
         3a:81:e6:c0:15:46:ca:4b:c3:b1:ad:84:73:bb:15:f6:6b:a8:
         01:92:99:48:5c:3a:8f:f6:26:67:4a:05:1e:de:e2:0f:3c:f9:
         20:cd:6a:7e:e1:67:8b:84:45:0a:e4:60:a5:41:fc:00:40:08:
         3f:13:90:ed:97:7a:dd:62:54:a3:f8:79:5d:ab:7a:bb:29:9c:
         52:c3:8f:64:d3:77:8e:02:7e:a9:74:97:df:b4:69:ed:0a:37:
         c2:79:2c:87:e4:e6:a9:0d:d4:65:20:c1:95:19:85:61:bd:c6:
         d3:6d:41:97:97:2b:52:e8:bb:94:fb:30:28:e8:7a:0d:d2:bb:
         1c:3d:55:9e:81:03:27:5c:fa:50:1f:0b:18:79:73:cd:49:51:
         d5:89:0a:2c:e6:ad:62:f7:5a:38:a0:a3:0a:16:78:4b:da:69:
         95:ef:b5:e9:7d:25:34:93:0b:d2:17:86:e4:a7:37:7f:f5:e1:
         df:f5:cf:d7:18:ba:65:87:ed:fd:52:20:3a:44:fc:8a:47:2f:
         ff:27:d0:81:96:bf:97:f8:b0:a3:df:d5:97:5a:39:8f:62:3b:
         93:62:4a:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdyMO8LQhnbkyCJEUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI0MTAwNjAxMDAzMVoXDTI1MDEwNDAyMDAzMVowLzEtMCsGA1UEAxMk
MGIxZjE4MWItZjNiMS00ZTM2LWFlNmMtNDIyZTg2MWFiYjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqStH/JBAyWBlgglVYQ2LqSTRl6gVqUXEHMF
1zWmvtuly7jzRjrMmCMvPVBfSTh0AH09ElczeEYG8R9OKzcP0F0NMkBEtEs+dFn/
l7A4XMXMVJdgy33DFZ1VyQNm0SZpU8LYaXnvQfMueCf7L5scThn6gsytP5Ik6EbM
n1ebTDVCrUMw+3lF1ht1hZCyBBBiGEbsJiyLGmJXlUgBjMZLraO+1NV00J0BHNd+
wLOhdk6eK2DNBpOaiQdP4NvIN461d+VFEpanccRxqg5pLPzd067jLvMxiMrtIUMk
Off+5LJLBXkRevoziw52VHbz42cjBejAJi7+5vevNW3by3hB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlvh0yjnv7ShA5vjmnzDONua7gRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvNTAzY2RkNjgtYWViNi0z
NDQ5LWEyNjMtNzQwYzExYmMyY2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHCcgPqDyA+yDelBkODNHd4nsZNBqNvkwvn/sU0WEzKqmptjmzqB5sAV
RspLw7GthHO7FfZrqAGSmUhcOo/2JmdKBR7e4g88+SDNan7hZ4uERQrkYKVB/ABA
CD8TkO2Xet1iVKP4eV2rerspnFLDj2TTd44Cfql0l9+0ae0KN8J5LIfk5qkN1GUg
wZUZhWG9xtNtQZeXK1Lou5T7MCjoeg3Suxw9VZ6BAydc+lAfCxh5c81JUdWJCizm
rWL3WjigowoWeEvaaZXvtel9JTSTC9IXhuSnN3/14d/1z9cYumWH7f1SIDpE/IpH
L/8n0IGWv5f4sKPf1ZdaOY9iO5NiSug=
-----END CERTIFICATE-----
Generated at Wed Dec 25 03:21:52 2024 by rpki-client on console.sobornost.net