Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa
File:                     b8a761f3-fa00-3fd6-9bad-ff2689305468.roa (raw, json)
Hash identifier:          Ni7M7hk13uWAU3NICS2/mOur9nksq8GpNtzSY03+XQ0=
Subject key identifier:   58:75:60:76:AF:B9:07:DC:D3:3B:79:8E:6D:09:E4:84:72:C3:07:0E
Certificate issuer:       /CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
Certificate serial:       010D0C9F432858489340AC1E0DAEADD4DE5D4C40
Authority key identifier: E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     25899
IP address blocks:        23.187.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ac:1e:0d:ae:ad:d4:de:5d:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=4c127a7b-669d-4b11-8e70-23e4b8c05a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:63:6b:8c:51:90:17:4a:37:94:64:d4:02:
                    46:af:be:37:e8:c9:5b:cb:ec:25:38:86:fe:43:25:
                    00:8a:eb:60:ff:76:20:5a:32:14:fd:b1:71:c1:1f:
                    74:0d:19:d3:e4:ae:31:88:3f:b0:79:1b:b8:f7:e4:
                    91:46:7f:ef:ae:b7:a5:43:20:d8:b8:4e:1a:76:67:
                    89:5d:88:7b:32:10:66:40:28:15:87:40:9d:74:22:
                    81:bf:b3:7a:aa:f8:85:13:fb:6d:56:32:14:4d:f3:
                    de:90:cc:97:10:61:e1:0b:42:96:90:80:ea:b4:79:
                    5d:9c:29:6a:57:2d:3a:8d:21:62:19:c4:f2:34:3a:
                    93:bb:39:b4:86:1e:b3:bc:e9:ca:23:a1:49:63:ba:
                    3e:27:91:d8:f3:fd:fa:b1:be:ce:2f:87:e2:de:2c:
                    1c:91:19:7a:55:32:a2:f2:0e:84:79:ef:ed:75:ad:
                    ab:95:9c:e2:d5:22:c6:b1:81:fb:7c:55:ba:b2:b9:
                    b0:5a:f0:39:2b:03:79:18:89:8d:cd:e4:40:e4:82:
                    6e:75:ba:06:e2:e5:f3:d4:08:d5:51:64:38:51:cb:
                    97:a4:e6:30:a1:05:8a:a9:14:f8:c7:1a:0b:08:cc:
                    11:a4:58:e6:5f:0a:f0:4f:1c:00:87:55:01:c7:1a:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:60:76:AF:B9:07:DC:D3:3B:79:8E:6D:09:E4:84:72:C3:07:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/b8a761f3-fa00-3fd6-9bad-ff2689305468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.crl

            X509v3 Authority Key Identifier:
                keyid:E5:F0:1F:26:87:96:B9:D0:16:5C:86:6A:BB:7A:57:97:ED:D8:9F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f915d3d3-1b8f-42c7-8c4d-f9fce80d9a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:8c:dc:02:06:8d:ac:38:01:91:df:8a:d6:64:87:f7:74:e7:
         7a:1b:80:76:5e:47:88:a5:89:c9:62:4b:2f:ac:51:2e:4f:1f:
         a8:60:49:40:8b:d5:f5:22:36:ee:96:6b:0e:55:d0:fc:4f:1d:
         5c:52:13:a9:39:da:25:e3:27:43:a4:09:6a:75:ac:f7:b1:ae:
         7d:1d:b8:bd:a1:d7:10:06:d5:36:ff:d9:4b:e1:94:35:41:45:
         72:9d:d0:cd:cf:ea:75:c8:ca:7f:8b:9b:93:3a:b5:0d:dd:7d:
         97:99:17:f2:87:08:5b:01:97:f7:0e:7b:d5:4e:5b:8b:06:f6:
         41:f4:24:ca:57:10:f3:da:2e:84:f7:14:cb:f9:8d:f9:23:8d:
         2d:86:64:01:bd:21:37:8d:5c:9b:72:0f:28:1a:59:2d:40:9d:
         84:1c:03:1e:1a:07:ec:d5:df:9c:38:23:9e:c4:b8:f7:53:11:
         e7:69:11:78:21:af:c1:26:74:0b:58:0f:86:fe:96:00:75:e7:
         b1:6e:e3:17:dc:b9:f5:da:1f:8e:a5:44:5c:31:dc:5f:7c:75:
         25:b7:6b:ea:5d:38:4a:e6:1c:72:f0:b1:ae:73:80:61:1b:0e:
         5c:0e:5a:99:a3:7d:02:f0:1d:3d:69:20:99:e4:60:cf:eb:93:
         a9:32:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:20:16 2025 by rpki-client on console.sobornost.net