Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/579c0ea6-4277-3f44-a66a-336a01dadf34.roa
File:                     579c0ea6-4277-3f44-a66a-336a01dadf34.roa (raw, json)
Hash identifier:          YPnsybNZYJDneuDyWfHFu8etfw9LqYZrvbNQfR1LiEE=
Subject key identifier:   C4:6D:EC:78:D1:61:EE:24:D6:6C:B4:91:BB:89:42:D5:FB:02:BF:D3
Certificate issuer:       /CN=d21f6ba1-d8bb-4867-84f0-92ade2719d36
Certificate serial:       010D0C9F432858425175D4FD7397E65412D989C0
Authority key identifier: 60:B6:F3:17:14:A2:B7:99:F4:70:7A:AD:F7:67:FB:F6:34:32:06:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/579c0ea6-4277-3f44-a66a-336a01dadf34.roa
Signing time:             Fri 23 Jun 2023 19:43:09 +0000
ROA not before:           Fri 23 Jun 2023 19:43:09 +0000
ROA not after:            Thu 21 Sep 2023 19:43:09 +0000
asID:                     212618
IP address blocks:        23.156.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:51:75:d4:fd:73:97:e6:54:12:d9:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f6ba1-d8bb-4867-84f0-92ade2719d36
        Validity
            Not Before: Jun 23 19:43:09 2023 GMT
            Not After : Sep 21 19:43:09 2023 GMT
        Subject: CN=fb34466b-7aa3-410f-9f44-0abd27e557c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:13:93:dc:91:18:27:cc:e2:72:c5:25:1c:
                    26:df:8c:79:e8:32:0b:ea:7c:26:95:4e:f5:52:c6:
                    eb:9f:e7:10:3c:a0:d7:71:f5:12:e7:63:5e:1a:6c:
                    0d:c7:21:3d:7a:ba:81:75:d4:0c:85:de:f2:9f:3f:
                    d0:f1:0b:44:cc:b8:0b:2c:49:a3:53:e7:66:91:0b:
                    96:73:fb:c5:6d:b2:89:35:b3:4c:5a:b0:59:86:4c:
                    c0:fe:9e:6f:3b:38:70:20:dc:62:59:a8:61:51:00:
                    bc:bb:9f:58:44:f6:ba:e6:32:2c:b7:2f:e1:c0:29:
                    dd:ce:e3:bd:90:31:74:52:49:88:df:97:df:cf:3d:
                    b5:dd:17:d8:72:70:2b:f8:42:75:c0:a4:95:0b:fc:
                    a1:86:40:3f:2f:ab:b3:9d:c4:a0:6e:d7:aa:3f:07:
                    9e:8f:65:63:77:5b:fd:3b:90:04:7a:fa:2d:cb:24:
                    5a:4d:11:87:47:4d:72:29:71:71:ad:c3:be:2b:ee:
                    b5:66:5c:fe:7e:d4:51:1e:09:d0:1e:1c:b6:c2:5a:
                    b9:ab:d2:39:0d:f2:09:cd:6b:4d:58:3c:fd:88:8b:
                    0a:5a:4b:dd:87:dd:be:21:22:6a:41:42:4f:db:c1:
                    e0:27:83:6b:1f:24:b7:8c:fa:a3:cc:97:48:16:91:
                    6e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:EC:78:D1:61:EE:24:D6:6C:B4:91:BB:89:42:D5:FB:02:BF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/579c0ea6-4277-3f44-a66a-336a01dadf34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36/d21f6ba1-d8bb-4867-84f0-92ade2719d36.crl

            X509v3 Authority Key Identifier:
                keyid:60:B6:F3:17:14:A2:B7:99:F4:70:7A:AD:F7:67:FB:F6:34:32:06:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d21f6ba1-d8bb-4867-84f0-92ade2719d36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:28:65:d2:49:7f:63:d8:78:ff:46:3f:cd:7a:e9:98:a8:
         4f:5f:2c:cf:4b:a2:fa:d7:81:e9:d2:5e:32:96:43:3e:86:fb:
         cd:05:b4:95:bd:c5:e8:6b:24:63:55:44:5d:6c:f4:2d:6e:87:
         7b:1a:23:c0:38:c0:a5:7f:7e:d3:fd:3f:85:bb:80:35:31:f9:
         fd:c5:78:a7:0c:72:0b:26:7a:2b:52:42:a2:39:2c:96:db:14:
         4e:8d:6b:45:3b:2f:20:95:a4:d0:a9:e7:ae:f3:e8:fd:4a:16:
         55:0e:ae:e1:72:97:a4:52:bb:d5:4d:8d:0c:29:9b:29:b8:83:
         85:72:79:51:d4:8c:11:a1:4e:68:cf:6a:72:3d:13:fc:9a:bc:
         22:27:ba:a3:26:b4:68:2a:2d:79:cb:e6:42:bb:ee:f9:34:5f:
         5e:9a:cf:30:da:39:84:22:fb:80:1d:07:12:7f:66:06:e6:a0:
         d1:49:51:24:34:55:58:33:5f:3b:b8:90:8e:ea:5b:d3:6b:01:
         06:fa:bc:15:37:57:ff:8e:2a:db:3f:23:c8:04:b2:93:49:a9:
         9a:51:6c:72:94:d0:5e:52:17:c4:64:d1:a3:a6:f6:b1:24:54:
         43:43:06:cf:0a:ce:2f:54:da:a0:a5:9e:df:25:88:10:42:a1:
         a9:c0:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:39:55 2023 by rpki-client on console.sobornost.net