Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa
File:                     e23be030-470c-3c12-b4e7-b4b9a0759547.roa (raw, json)
Hash identifier:          /VVp10aJdBNlMOkaqEXhKZMu66pMHN4XMvB598NmKuE=
Subject key identifier:   8C:75:A0:86:9E:6E:BA:E2:23:89:0B:B2:C5:6D:71:DB:F2:FA:4F:82
Certificate issuer:       /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
Certificate serial:       010D0C9F43285849244E677DEAC46BDA720C4780
Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     64289
IP address blocks:        206.71.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:67:7d:ea:c4:6b:da:72:0c:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=d8d8db43-0b10-4e10-8fd2-943fb83a0fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:3e:d0:0d:c0:c0:dc:e8:4d:09:12:dd:78:
                    36:80:0c:1f:f2:bc:a8:c1:36:0a:0c:61:b2:7b:5a:
                    10:30:b3:ef:82:34:8c:61:a0:9e:3f:cd:e6:38:79:
                    95:0f:1e:ba:01:5c:64:87:c9:ba:86:46:c2:6e:d2:
                    bf:eb:72:fb:14:aa:ff:c0:f5:fc:60:c2:dc:0f:60:
                    9e:54:c7:56:a5:04:71:74:60:da:c9:ab:63:0b:94:
                    0e:d9:f4:c7:92:9d:b5:9c:2e:ca:20:6c:c0:be:7e:
                    2b:93:bf:39:3e:aa:13:0a:19:25:61:83:1e:b3:6f:
                    2b:e4:83:31:7d:3b:dc:6f:62:e9:24:e2:77:4b:07:
                    5b:09:3a:93:52:0a:70:b5:ac:d9:8e:5e:8d:16:60:
                    af:f7:30:64:4c:1f:a9:2e:32:77:6e:07:c3:c3:1e:
                    1b:63:fd:57:a1:95:ee:7c:80:6a:5a:b2:ae:de:99:
                    ca:43:f8:13:38:0a:e4:5f:15:d3:be:fc:f7:bc:29:
                    d1:4c:a9:28:e5:77:18:8e:83:69:4d:ab:49:ba:c9:
                    eb:36:02:55:fe:ff:77:f2:53:15:0d:f1:9f:5f:e6:
                    95:92:24:db:85:9f:38:3d:c7:18:b5:2e:41:3e:54:
                    dd:0b:89:04:d2:7a:ad:13:c0:2c:d7:81:87:a7:6d:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:A0:86:9E:6E:BA:E2:23:89:0B:B2:C5:6D:71:DB:F2:FA:4F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl

            X509v3 Authority Key Identifier:
                keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:74:fe:25:dd:46:dc:4e:7c:22:6f:a3:e0:45:df:45:94:
         46:7f:d3:88:01:64:51:0f:31:87:9c:47:d7:de:26:eb:9e:9f:
         54:ab:f2:82:b0:98:92:9e:bb:26:a7:ed:68:6a:dd:0e:06:e1:
         1f:90:01:af:80:b8:e6:fa:99:d6:b4:15:24:48:c5:94:81:e6:
         c9:cd:7f:c6:a9:cb:42:83:af:ff:6a:de:e9:30:fb:ab:bc:c2:
         8d:18:d4:9c:69:51:2d:8b:6c:62:2a:e9:96:7d:a8:d6:5e:ae:
         37:ce:ea:9e:a6:75:99:05:4e:ee:a2:a5:dd:f6:4d:2c:01:1c:
         4c:ac:e1:eb:05:ca:df:b6:26:ab:d3:4b:82:9a:5e:04:ce:6f:
         f4:29:ba:f6:d3:58:f4:69:07:a4:e1:b2:25:cd:85:81:77:12:
         b1:a8:f7:dc:ed:c2:6e:42:39:c8:bd:ec:6a:5a:c3:8d:a4:c8:
         14:d9:72:c2:60:17:2e:aa:8d:01:14:06:46:a9:a4:4a:11:5f:
         1c:37:50:a4:87:b3:4f:8c:a5:57:a3:be:7b:20:64:bc:09:78:
         95:a5:17:b1:a6:5a:50:a3:61:80:a0:ff:c2:d0:32:7f:21:25:
         b6:74:f2:fe:fb:08:db:ff:c4:11:1e:59:de:04:40:54:8d:7b:
         78:cc:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:53 2025 by rpki-client on console.sobornost.net