Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
File:                     075439ad-b463-39da-bd19-5d02bddea01e.roa (raw, json)
Hash identifier:          sqjrQtXZr7oXHRFCzxX51dNor746e769WBsCbXEbqs4=
Subject key identifier:   77:D3:01:67:19:34:F9:59:1D:3F:8A:0C:E8:36:FC:93:D1:E3:CD:41
Certificate issuer:       /CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
Certificate serial:       010D0C9F432858494CC94570FE5D431997818180
Authority key identifier: 8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     212524
IP address blocks:        23.155.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:45:70:fe:5d:43:19:97:81:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=5b0d0bad-3303-438f-a810-5a2c3913c2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ea:71:96:61:4a:c9:a1:dc:a6:c0:f9:9f:83:
                    86:62:65:6a:7c:7b:0b:e4:57:5a:04:a7:2d:ae:ac:
                    e4:4f:ef:dd:11:c9:7c:bf:80:23:13:1e:23:31:97:
                    0c:19:a1:54:0c:b4:06:6a:ee:f0:be:8c:3e:ef:ac:
                    2a:9a:f4:bb:6d:f6:23:63:8d:9a:33:d0:48:d4:c6:
                    a7:28:ad:5e:1c:b7:ef:81:98:b1:99:9d:90:29:63:
                    e1:b6:9d:29:35:2c:cf:52:c0:c0:54:2b:a7:c0:bd:
                    a7:b3:e9:02:98:c1:eb:d1:b2:e6:42:8e:19:66:0a:
                    da:f7:14:5e:72:69:16:b0:62:dc:d9:0b:ed:1f:58:
                    20:b2:5d:a7:9e:12:fb:c4:52:ed:b7:0a:be:96:1f:
                    12:fa:7a:b3:c9:ea:8e:f8:f5:ec:15:ac:15:68:96:
                    c6:c0:68:34:27:31:2e:a2:6b:2b:c0:92:aa:19:a2:
                    c6:81:3d:59:99:d2:c6:73:76:a2:6a:0e:4b:af:75:
                    35:ff:dd:ff:25:53:0f:47:1b:2c:16:c0:12:18:aa:
                    b4:4d:df:03:1f:a4:75:1b:7b:9b:83:1d:e6:53:46:
                    ae:ae:5e:b0:b1:cd:f4:46:25:82:96:ea:40:d2:7b:
                    b7:63:77:da:ac:78:01:76:78:32:3b:46:21:b8:30:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D3:01:67:19:34:F9:59:1D:3F:8A:0C:E8:36:FC:93:D1:E3:CD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/075439ad-b463-39da-bd19-5d02bddea01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.crl

            X509v3 Authority Key Identifier:
                keyid:8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:a0:70:e9:cc:70:89:39:12:cb:aa:a5:00:d9:85:2c:b4:
         9c:e7:f6:fa:0a:72:af:ad:a1:7b:d9:66:46:4b:03:65:c7:09:
         f5:44:0c:ce:76:20:32:83:33:e6:97:a4:f3:a9:37:7d:e1:e7:
         c9:94:91:bc:4c:fe:e2:41:b1:2d:d2:79:9c:b7:3b:25:82:4e:
         fc:64:bc:d6:1a:c3:48:ac:4f:51:f3:33:be:e4:d6:48:02:38:
         85:6b:9a:d6:ba:66:97:f7:c7:50:44:de:9d:89:17:35:07:40:
         cb:a6:3a:7f:0b:a0:7c:2a:7a:45:95:c6:0a:9b:ce:aa:7e:5f:
         2c:38:79:c2:4d:54:bb:0f:f1:55:39:a0:f3:85:97:25:cb:ed:
         a4:6b:d7:8b:0f:58:19:ac:cb:83:2a:63:ae:93:90:8f:df:88:
         8e:06:d5:59:58:b6:64:c9:44:e9:3e:d5:57:35:61:47:f6:ad:
         fc:19:a4:04:66:d7:a6:2f:e8:5c:74:9d:33:24:9c:da:bb:a9:
         fa:d8:56:7f:f0:cd:2c:1b:37:65:4a:06:c7:aa:0e:fd:8a:59:
         82:4c:19:ba:62:11:22:3b:c7:94:ed:6b:e0:c4:85:92:f4:22:
         d7:77:ec:58:03:13:b2:0b:43:ad:cc:ad:c5:df:3e:c1:45:97:
         35:88:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net