Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa
File:                     a225d617-d65c-3895-8039-5375646dc1b8.roa (raw, json)
Hash identifier:          26YprAz5/FLbkrASIJbGTtdAH1ObFEEPIQMFSWutB4U=
Subject key identifier:   E3:D4:98:E6:A7:DA:E9:BC:40:44:BF:C7:CD:AF:B2:AC:1A:E7:FE:14
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285848ECF68EFE688C0DC2074C8400
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa
Signing time:             Tue 18 Feb 2025 17:14:27 +0000
ROA not before:           Tue 18 Feb 2025 17:14:27 +0000
ROA not after:            Mon 19 May 2025 16:14:27 +0000
asID:                     11164
IP address blocks:        163.253.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:f6:8e:fe:68:8c:0d:c2:07:4c:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Feb 18 17:14:27 2025 GMT
            Not After : May 19 16:14:27 2025 GMT
        Subject: CN=a16d5cb0-bc39-46cd-a77e-ad05e20e3900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:c7:7a:77:92:0f:8b:16:a0:ab:6b:f2:b6:
                    1d:79:31:c9:27:4b:14:c1:4c:23:50:5a:41:6d:84:
                    68:64:8b:03:3c:66:ef:a5:bb:49:ba:4e:e3:8e:b8:
                    22:fc:c8:7b:b2:2d:8d:83:d7:98:ff:7b:95:00:1f:
                    dd:43:b8:e9:56:c3:84:cd:98:48:89:69:4a:27:26:
                    de:c2:6b:cc:63:01:bc:7d:2f:c9:c1:d4:67:30:9d:
                    82:90:cd:92:81:df:d9:91:ff:44:70:d2:8f:df:fe:
                    f1:47:ea:4f:3e:46:3a:1e:a3:20:5a:b5:fd:0e:45:
                    1a:70:aa:53:f0:15:a5:5d:63:b7:ad:30:5f:f7:6c:
                    ba:9a:1c:a4:e3:41:f2:c7:8f:9f:6b:fe:9a:04:71:
                    9b:a3:79:44:26:9d:52:0e:01:df:11:6b:10:06:77:
                    a7:38:4c:cb:39:f0:0e:ab:9f:4c:da:04:15:87:81:
                    d9:fe:3a:9d:c5:b1:65:24:54:06:cd:55:47:ac:8f:
                    20:f9:4f:58:6b:97:07:66:bd:c0:08:eb:b9:7e:06:
                    a0:93:ae:10:bc:63:49:c5:de:14:f5:6b:58:c2:d4:
                    a3:db:4a:ef:60:d1:fa:3a:13:6a:d9:07:54:be:f9:
                    8d:0a:4f:c3:47:a5:ae:28:96:87:70:1f:9d:aa:f4:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D4:98:E6:A7:DA:E9:BC:40:44:BF:C7:CD:AF:B2:AC:1A:E7:FE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:47:d4:74:9b:c7:05:f6:8b:bf:94:3e:2f:fe:10:4d:ff:
         98:0d:75:00:c3:62:de:32:e5:a2:be:77:94:57:6e:df:f0:91:
         77:ae:27:8f:fa:8a:5e:b9:9e:8b:92:0a:13:5b:b3:66:5e:c3:
         e4:56:c0:ce:74:06:03:ed:f8:53:b7:65:90:a0:dd:ec:e8:3a:
         4c:55:9c:d8:a6:e8:f3:a8:26:3a:35:cc:6c:2b:a0:5f:1e:3e:
         f7:8f:a5:67:82:b7:00:78:4e:50:dc:46:a9:7f:d2:9b:ab:a0:
         fc:ba:37:00:4c:8b:e2:7c:88:27:26:70:75:4a:79:54:8c:ed:
         52:56:be:fa:ee:78:b9:92:13:7b:cb:dc:31:82:87:43:a1:60:
         37:5b:c5:15:f2:8f:28:6a:40:37:0c:31:b4:8a:25:70:be:ac:
         42:ec:f4:22:36:81:f7:ec:54:fa:98:99:45:10:66:d4:80:99:
         00:d9:ef:6f:9a:14:ab:a0:2c:ad:2e:72:21:23:6d:db:b1:2e:
         9e:37:ac:2c:13:2f:b7:85:ff:a7:9d:1d:40:ce:c5:60:1d:e6:
         4e:b0:0c:6f:93:90:e3:0a:bb:4d:8a:22:8d:52:4d:50:46:26:
         d7:d5:79:af:e4:db:04:71:61:ee:2c:91:d5:ca:5a:39:64:97:
         7a:43:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:25:53 2025 by rpki-client on console.sobornost.net