Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda45dac-f25b-3932-aff1-b11947be55eb.roa
File:                     bda45dac-f25b-3932-aff1-b11947be55eb.roa (raw, json)
Hash identifier:          HmwofghE9AiQDYWlN8OxFK025emjCFoCcKTrIpd94Xo=
Subject key identifier:   54:3B:A7:4D:1E:59:B5:D0:9D:98:0E:09:C9:7F:96:94:FD:0D:5C:7F
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848F3911A533FFD8ADA705DF4F0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda45dac-f25b-3932-aff1-b11947be55eb.roa
Signing time:             Fri 21 Feb 2025 02:00:39 +0000
ROA not before:           Fri 21 Feb 2025 02:00:39 +0000
ROA not after:            Thu 22 May 2025 01:00:39 +0000
asID:                     401152
IP address blocks:        23.26.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:91:1a:53:3f:fd:8a:da:70:5d:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 21 02:00:39 2025 GMT
            Not After : May 22 01:00:39 2025 GMT
        Subject: CN=4d6d43fe-7f20-45a5-a695-7aefb67f32b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:e9:4e:33:f7:84:1e:4f:ed:1b:f9:bf:81:
                    05:45:e3:75:de:59:ab:7b:e2:bb:65:f5:cb:a6:9b:
                    8e:e1:1c:1c:4d:2b:13:05:08:d8:2d:cd:cf:9d:f1:
                    2d:8b:69:12:7a:1f:49:d2:9e:36:20:e7:f7:5c:8a:
                    c1:11:95:d4:12:26:18:bd:5c:62:e2:df:7f:c2:80:
                    db:79:04:fb:4a:56:b5:c5:4b:33:e5:cc:f4:1e:62:
                    22:2d:cf:2f:3f:e4:24:94:eb:55:dd:48:f5:a7:bc:
                    39:4f:42:0e:d5:c9:1e:e4:c9:ef:ad:b7:00:5c:2f:
                    d2:55:eb:c6:62:b2:2b:26:40:05:92:38:4c:cf:92:
                    68:d3:0f:2c:dc:a9:1e:e7:a9:b1:52:78:3a:83:16:
                    6f:7f:f6:4c:4c:4a:0c:40:2b:8b:eb:f0:e9:6c:58:
                    66:42:0b:53:36:e2:e9:0c:21:89:f5:7e:d4:7a:5d:
                    73:ca:c8:b0:69:24:e4:44:e2:fa:da:1b:23:6e:fc:
                    4a:cd:67:89:23:d3:f0:77:42:22:1b:71:fb:1f:4b:
                    e7:ce:a5:f2:68:be:84:d9:27:11:4f:79:5a:56:e3:
                    a8:82:5b:6a:61:9c:0e:d6:c5:f3:22:f8:b6:49:59:
                    fc:2a:07:c1:87:64:8c:90:8b:ea:de:33:00:f2:c6:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:A7:4D:1E:59:B5:D0:9D:98:0E:09:C9:7F:96:94:FD:0D:5C:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bda45dac-f25b-3932-aff1-b11947be55eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:00:11:4d:e1:4c:b4:eb:5a:cb:08:55:89:3d:57:2b:bf:
         7f:ec:73:07:83:1f:f8:1a:85:fe:c4:b7:23:d1:5c:4e:bb:91:
         4e:84:f0:07:99:f2:a0:69:e1:41:e0:14:34:06:9f:61:b0:ae:
         a7:1e:2f:5a:8b:ab:a6:33:d3:f0:ac:66:e9:5c:78:81:7a:be:
         66:21:84:d4:9b:ef:d4:00:8a:57:9c:b6:5d:7c:09:4b:70:e9:
         fe:c8:b5:13:56:d3:a8:ae:37:da:35:49:ca:dd:c7:b4:ef:87:
         d4:39:95:d8:9e:3b:72:32:96:cd:77:2f:20:ac:52:c5:7e:2b:
         55:b1:16:92:25:5b:cc:ff:4d:09:ee:9c:c1:c5:c6:af:9c:a5:
         a2:5a:53:3f:ca:e9:07:61:f9:38:da:ca:a2:47:f3:14:4d:82:
         d8:5e:77:5d:3e:34:d8:f0:52:81:49:00:a7:47:39:bf:80:7b:
         0e:de:2f:fc:b3:0b:67:15:71:f8:b5:e6:7f:9e:c4:f3:35:e2:
         23:5b:9b:67:e3:28:b4:99:2f:72:31:0c:30:10:1a:38:38:d4:
         1a:40:66:72:f9:53:bd:fd:68:44:0a:00:51:94:97:a3:6f:e5:
         71:0a:46:05:53:77:38:27:36:74:ae:32:db:5c:2d:6c:04:47:
         05:58:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:42 2025 by rpki-client on console.sobornost.net