Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
File:                     2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa (raw, json)
Hash identifier:          j07oCxEBex2V+1OpriRFzbzVagKPOFpPbkNOsnW5ZuE=
Subject key identifier:   B0:CE:AB:EE:7C:CE:D5:9A:B7:7B:12:30:5E:39:C5:D7:DA:C5:FA:B4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285849806F22CB4C6D64CA4AA84F40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     399641
IP address blocks:        165.254.23.224/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:22:cb:4c:6d:64:ca:4a:a8:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=7a051b10-f377-4170-abd1-5fb611ab36c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:f1:fe:f8:89:d6:ad:8c:43:81:26:81:73:
                    bc:76:da:f7:27:75:64:a6:14:01:84:e0:0d:bf:8a:
                    db:19:fc:d9:f9:2f:77:cb:3f:f8:43:f9:af:c9:bf:
                    04:15:67:86:62:7a:d0:03:bf:38:94:10:c9:b5:a8:
                    9e:9f:8f:0e:d2:8e:40:a8:01:77:4f:a3:2e:0d:2f:
                    0f:ae:9a:2c:74:23:97:cf:5f:b7:88:25:87:11:37:
                    e0:3a:83:dc:a1:1a:ea:e9:90:8d:7a:e1:5f:54:fd:
                    1b:86:bc:b1:51:5c:de:55:49:cd:30:ae:f4:bb:6f:
                    8b:be:8b:a5:1b:d9:da:75:1e:e4:33:49:94:f0:03:
                    5b:d2:21:30:5f:9b:1a:66:96:4c:64:db:d8:0b:4e:
                    00:25:38:6d:ad:5e:79:d0:29:f6:e2:2c:ae:2b:37:
                    32:58:c0:4b:38:62:0c:55:80:5b:b2:64:04:36:92:
                    60:4c:00:6d:51:ba:6c:b8:fd:df:80:2b:fa:c4:50:
                    64:fa:d9:03:91:f5:52:3f:e3:94:d3:5e:a4:5c:ed:
                    cb:20:1e:27:4c:73:75:87:e0:e2:a2:43:46:fc:4f:
                    d3:bc:59:aa:79:2d:16:86:dc:13:51:43:c3:73:94:
                    03:95:03:eb:de:4f:66:fc:e5:51:35:cc:9a:9a:22:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CE:AB:EE:7C:CE:D5:9A:B7:7B:12:30:5E:39:C5:D7:DA:C5:FA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.23.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:70:db:bc:5a:ee:82:3e:ee:99:0e:a8:4d:2b:29:1a:df:43:
         2b:25:c2:55:7b:18:1a:4c:2f:dc:c5:b9:33:92:a0:21:e2:d7:
         2a:25:ad:15:d7:51:b7:64:30:6d:01:af:0d:a5:2b:a5:e3:5f:
         d5:50:d2:13:e1:31:30:9c:06:04:a1:d6:d0:3c:93:76:95:cd:
         d5:a8:37:78:4c:d6:d9:66:f1:40:37:79:37:b1:5f:1d:21:63:
         e9:0e:a8:65:87:6b:0d:27:67:1b:f0:1d:85:b8:34:76:25:04:
         f1:d0:f5:18:4d:72:b9:08:6c:c2:88:6e:c7:c0:22:be:75:eb:
         97:c8:65:6d:4c:f5:6d:56:0d:96:0a:62:60:03:22:03:8f:b5:
         a1:76:fd:7a:f9:f0:00:69:d9:e6:72:78:6c:5b:c4:b5:16:1b:
         b7:cb:c5:2d:58:dd:7d:7a:cc:3b:8f:8b:0f:d2:83:c7:15:e1:
         93:d3:24:64:64:18:ed:3a:04:af:2a:f6:be:95:21:c8:af:62:
         0e:54:e3:cd:64:72:97:b7:de:b0:89:fa:dc:d3:5e:9b:1c:3c:
         21:85:7f:29:49:7f:de:d1:c2:5b:45:e4:62:a8:bc:cb:b2:d9:
         0a:fd:3f:8b:09:4f:3e:b9:c1:73:cc:16:a7:f4:af:14:73:ba:
         d8:30:56:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmAbyLLTG1kykqoT0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
N2EwNTFiMTAtZjM3Ny00MTcwLWFiZDEtNWZiNjExYWIzNmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7nx/viJ1q2MQ4EmgXO8dtr3J3VkphQBhOAN
v4rbGfzZ+S93yz/4Q/mvyb8EFWeGYnrQA784lBDJtaien48O0o5AqAF3T6MuDS8P
rposdCOXz1+3iCWHETfgOoPcoRrq6ZCNeuFfVP0bhryxUVzeVUnNMK70u2+Lvoul
G9nadR7kM0mU8ANb0iEwX5saZpZMZNvYC04AJThtrV550Cn24iyuKzcyWMBLOGIM
VYBbsmQENpJgTABtUbpsuP3fgCv6xFBk+tkDkfVSP+OU016kXO3LIB4nTHN1h+Di
okNG/E/TvFmqeS0WhtwTUUPDc5QDlQPr3k9m/OVRNcyamiIU5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLDOq+58ztWat3sSMF45xdfaxfq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmZmMGI5OGItYzhiNy0z
N2IzLWI2YmItMjdkNzU5OTdkYmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEpf4X4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQATcNu8Wu6CPu6ZDqhNKyka30MrJcJVexgaTC/cxbkzkqAh4tcqJa0V
11G3ZDBtAa8NpSul41/VUNIT4TEwnAYEodbQPJN2lc3VqDd4TNbZZvFAN3k3sV8d
IWPpDqhlh2sNJ2cb8B2FuDR2JQTx0PUYTXK5CGzCiG7HwCK+deuXyGVtTPVtVg2W
CmJgAyIDj7Whdv16+fAAadnmcnhsW8S1Fhu3y8UtWN19esw7j4sP0oPHFeGT0yRk
ZBjtOgSvKva+lSHIr2IOVOPNZHKXt96wifrc016bHDwhhX8pSX/e0cJbReRiqLzL
stkK/T+LCU8+ucFzzBan9K8Uc7rYMFZE
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:01 2025 by rpki-client on console.sobornost.net