Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
File:                     65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json)
Hash identifier:          2u0ncU11WHzCt0+KA5u3fJ6wV1BwhVKWr0axhdSOfXw=
Subject key identifier:   B0:1E:DA:78:D1:80:E6:9B:20:86:3A:3E:51:42:AA:D5:82:A7:28:0E
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F432858494E2EB1EF229060E5A9EF2700
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     13849
IP address blocks:        23.133.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b1:ef:22:90:60:e5:a9:ef:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=73de80f6-a234-484a-aa3b-aa9a8b6171ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:8d:43:da:1d:a7:b6:a0:6c:e4:7b:97:5c:
                    9e:da:ba:14:61:ef:1a:f7:32:20:bf:fb:1a:c9:ae:
                    3b:6c:30:e3:2b:2f:ea:04:49:66:77:10:fc:70:54:
                    af:7b:1e:03:29:3d:3d:81:8c:fa:ff:d4:10:41:db:
                    05:98:86:6a:96:b0:12:dd:c7:18:20:c2:9b:59:ad:
                    ff:b9:a1:b1:c3:a2:87:81:5a:53:e5:2a:ff:15:85:
                    c9:96:9e:5c:87:73:c2:8c:58:71:ff:ff:2c:99:93:
                    37:e2:12:16:e6:6f:86:0c:d7:d3:4c:51:1e:f1:a9:
                    6b:fc:36:df:3e:bc:59:35:ec:ed:da:cd:f1:b4:3a:
                    7e:a6:4f:ca:67:59:8c:08:92:39:d2:e3:09:56:d8:
                    d0:21:9e:a9:44:60:d2:85:48:a0:70:31:a5:0c:a0:
                    18:a7:46:7b:f5:10:9a:5c:a4:37:5a:a2:15:a9:a8:
                    81:ad:0f:a8:d9:a5:83:7c:1a:8a:55:de:aa:27:7b:
                    a2:54:4a:e9:8c:d5:ac:03:de:62:fe:dc:0c:76:cb:
                    be:9b:5e:78:72:e1:e3:08:c0:be:5c:ab:0f:92:6b:
                    05:fc:03:5a:b3:56:60:94:2f:b9:01:42:3d:ca:98:
                    c2:72:65:34:6c:66:13:f0:8c:55:fd:4d:44:41:50:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1E:DA:78:D1:80:E6:9B:20:86:3A:3E:51:42:AA:D5:82:A7:28:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:bd:aa:6f:df:53:bb:18:cf:09:72:36:5c:b3:cc:24:62:
         1e:9e:39:eb:b6:92:fc:57:c5:10:3d:5b:1d:29:0b:a1:3f:1a:
         e7:36:56:ac:1d:c3:47:10:60:b8:9b:e7:fd:6e:34:ca:cb:9a:
         29:43:ee:bc:2a:57:af:4b:96:d2:ca:2b:2b:60:16:d7:9f:4f:
         c7:ac:5e:78:b4:64:3d:fd:27:34:db:35:c1:82:48:66:79:7c:
         35:b2:bb:60:ee:d7:b5:2e:f6:1d:6a:d9:8e:de:dc:b3:1f:9c:
         8b:8c:0e:0e:fb:d2:58:8f:ec:23:51:d9:0e:66:00:ec:d4:7c:
         16:4d:b1:06:84:1c:d7:1e:03:74:e0:b7:65:23:ea:06:55:78:
         20:3c:45:1e:58:49:57:ab:ef:8a:2d:d8:b9:a3:fa:1c:6c:bd:
         fe:3e:ff:21:3d:1c:42:3d:fb:0a:84:0e:6a:f3:3e:46:50:2f:
         fd:02:ef:49:2d:28:22:49:06:16:af:65:a4:7e:5b:46:b0:90:
         f4:39:b0:3d:4d:f5:20:bc:d1:ec:1b:65:d1:b5:0f:23:17:5d:
         ef:d3:b8:98:d0:25:b4:bc:67:9f:2d:d0:a6:35:1b:56:cf:75:
         e2:14:36:97:a7:70:3c:12:72:05:3c:88:cc:7a:c3:a8:c0:24:
         60:13:79:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrHvIpBg5anvJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl
MDIwMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NzNkZTgwZjYtYTIzNC00ODRhLWFhM2ItYWE5YThiNjE3MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOiNQ9odp7agbOR7l1ye2roUYe8a9zIgv/sa
ya47bDDjKy/qBElmdxD8cFSvex4DKT09gYz6/9QQQdsFmIZqlrAS3ccYIMKbWa3/
uaGxw6KHgVpT5Sr/FYXJlp5ch3PCjFhx//8smZM34hIW5m+GDNfTTFEe8alr/Dbf
PrxZNezt2s3xtDp+pk/KZ1mMCJI50uMJVtjQIZ6pRGDShUigcDGlDKAYp0Z79RCa
XKQ3WqIVqaiBrQ+o2aWDfBqKVd6qJ3uiVErpjNWsA95i/twMdsu+m154cuHjCMC+
XKsPkmsF/ANas1ZglC+5AUI9ypjCcmU0bGYT8IxV/U1EQVDkZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLAe2njRgOabIIY6PlFCqtWCpygOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl
ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z
MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy
NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2
ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz
MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnivapv31O7GM8JcjZcs8wkYh6eOeu2kvxXxRA9Wx0pC6E/Guc2Vqwd
w0cQYLib5/1uNMrLmilD7rwqV69LltLKKytgFtefT8esXni0ZD39JzTbNcGCSGZ5
fDWyu2Du17Uu9h1q2Y7e3LMfnIuMDg770liP7CNR2Q5mAOzUfBZNsQaEHNceA3Tg
t2Uj6gZVeCA8RR5YSVer74ot2Lmj+hxsvf4+/yE9HEI9+wqEDmrzPkZQL/0C70kt
KCJJBhavZaR+W0awkPQ5sD1N9SC80ewbZdG1DyMXXe/TuJjQJbS8Z58t0KY1G1bP
deIUNpencDwScgU8iMx6w6jAJGATeYg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:36 2025 by rpki-client on console.sobornost.net