Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
File:                     35aa566c-1d54-3f84-a686-08058cbecf0f.roa (raw, json)
Hash identifier:          X1QSVZIZIYwku5LHbMxwOw+6qo8B+X2v0i5NF/peJzI=
Subject key identifier:   26:4D:CF:63:BE:9E:D6:05:D8:76:4B:D0:CC:6E:F4:74:8C:C7:6B:8C
Certificate issuer:       /CN=d49d6e31-9274-4997-a718-4ba13c83041c
Certificate serial:       010D0C9F43285849754457953A2F537DADCEF180
Authority key identifier: 48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     63023
IP address blocks:        23.157.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:57:95:3a:2f:53:7d:ad:ce:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49d6e31-9274-4997-a718-4ba13c83041c
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=ffd9b740-0b7a-4fee-99f3-8fec14679a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:ac:b4:04:73:c3:2e:6d:42:12:2d:66:31:
                    56:1d:15:6a:44:66:71:e6:f0:c9:f6:f3:f8:a2:2b:
                    47:ec:6a:b5:67:5e:16:cb:9a:6f:3a:6e:55:6d:9b:
                    a4:1f:f9:25:7e:a2:ae:7d:9c:5d:0a:5b:08:2b:76:
                    e6:e6:e5:01:fa:58:ae:51:41:bd:39:e1:eb:b9:ff:
                    66:ce:e1:fb:23:5a:74:a0:c9:44:22:11:73:58:fd:
                    dc:00:e7:ac:e4:68:72:2c:2a:5b:61:f1:2d:33:c8:
                    63:47:3c:2c:e7:ab:22:59:2c:e3:cf:09:0d:49:a3:
                    09:eb:60:ad:7d:9d:75:d8:be:50:37:3b:98:ae:4e:
                    51:a0:78:44:ae:98:b2:6c:36:95:0b:29:a3:51:45:
                    5a:1a:c4:b7:06:cf:55:96:86:f8:78:06:05:be:a7:
                    23:7e:57:af:c3:24:cd:bc:6f:eb:0b:e1:9b:76:54:
                    f4:46:02:0e:40:e2:fc:90:c1:41:e5:fc:17:0f:ca:
                    92:e7:8c:df:6d:d5:57:6b:1c:ef:c7:ba:96:69:60:
                    6a:ce:a3:ae:ee:b8:df:04:f2:34:8b:49:b8:d4:fa:
                    16:c3:32:fb:08:2b:44:28:38:33:4d:29:ed:25:90:
                    f1:68:93:0f:17:26:5b:e5:7c:fd:69:f5:1a:99:30:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4D:CF:63:BE:9E:D6:05:D8:76:4B:D0:CC:6E:F4:74:8C:C7:6B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl

            X509v3 Authority Key Identifier:
                keyid:48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:98:37:9b:63:69:9d:aa:14:f9:a1:bd:1b:22:bb:74:cf:
         67:1f:ca:1f:ce:63:7b:0a:18:cb:dc:9a:ed:ae:15:9b:f4:b0:
         8c:f1:3e:f2:10:30:5f:46:87:ee:ef:06:5b:37:4f:73:cd:3e:
         52:4d:c4:d5:e2:b8:1a:90:a0:c2:8f:cc:4d:13:b9:7d:e5:da:
         47:f0:0d:e6:65:57:6d:b7:bb:aa:1b:5a:48:3a:f7:18:d4:06:
         6e:61:df:87:c0:ef:a3:7e:f0:2e:9c:30:35:15:25:de:b8:2a:
         45:a1:1e:ee:ae:89:2a:3d:e8:a8:41:04:5e:e8:96:4a:da:6a:
         93:2d:ec:8c:db:fb:e7:43:1e:8c:15:d7:f7:88:d5:7a:43:ef:
         62:60:65:8e:e0:e3:f6:59:ff:57:3a:6b:f0:99:34:74:b1:ee:
         f8:e3:d0:09:21:82:d1:34:8d:40:2c:ae:cb:0b:c1:8d:c7:d9:
         52:24:ab:f2:a7:76:59:8a:a8:2d:17:30:0b:77:77:03:7e:1e:
         56:c5:0a:d1:e1:d1:67:34:7d:33:3a:14:56:39:96:de:5e:ec:
         59:46:11:74:c4:8e:e8:2c:fe:ce:bb:8e:d9:76:59:cc:76:e6:
         85:a3:31:4a:60:8e:8d:14:40:41:4b:a4:31:ba:5a:f2:b6:e1:
         f1:b2:d9:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RFeVOi9Tfa3O8YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5ZDZlMzEtOTI3NC00OTk3LWE3MTgtNGJhMTNjODMw
NDFjMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
ZmZkOWI3NDAtMGI3YS00ZmVlLTk5ZjMtOGZlYzE0Njc5YTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZastARzwy5tQhItZjFWHRVqRGZx5vDJ9vP4
oitH7Gq1Z14Wy5pvOm5VbZukH/klfqKufZxdClsIK3bm5uUB+liuUUG9OeHruf9m
zuH7I1p0oMlEIhFzWP3cAOes5GhyLCpbYfEtM8hjRzws56siWSzjzwkNSaMJ62Ct
fZ112L5QNzuYrk5RoHhErpiybDaVCymjUUVaGsS3Bs9Vlob4eAYFvqcjflevwyTN
vG/rC+GbdlT0RgIOQOL8kMFB5fwXD8qS54zfbdVXaxzvx7qWaWBqzqOu7rjfBPI0
i0m41PoWwzL7CCtEKDgzTSntJZDxaJMPFyZb5Xz9afUamTBBZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZNz2O+ntYF2HZL0Mxu9HSMx2uMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlk
NmUzMS05Mjc0LTQ5OTctYTcxOC00YmExM2M4MzA0MWMvMzVhYTU2NmMtMWQ1NC0z
Zjg0LWE2ODYtMDgwNThjYmVjZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDQ5ZDZlMzEtOTI3NC00OTk3LWE3
MTgtNGJhMTNjODMwNDFjL2Q0OWQ2ZTMxLTkyNzQtNDk5Ny1hNzE4LTRiYTEzYzgz
MDQxYy5jcmwwHwYDVR0jBBgwFoAUSAABiSsbPwrMcBnY5jIusven2eUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNDlkNmUzMS05Mjc0LTQ5OTctYTcxOC00YmEx
M2M4MzA0MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3WmDebY2mdqhT5ob0bIrt0z2cfyh/OY3sKGMvcmu2uFZv0sIzxPvIQ
MF9Gh+7vBls3T3PNPlJNxNXiuBqQoMKPzE0TuX3l2kfwDeZlV223u6obWkg69xjU
Bm5h34fA76N+8C6cMDUVJd64KkWhHu6uiSo96KhBBF7olkraapMt7Izb++dDHowV
1/eI1XpD72JgZY7g4/ZZ/1c6a/CZNHSx7vjj0AkhgtE0jUAsrssLwY3H2VIkq/Kn
dlmKqC0XMAt3dwN+HlbFCtHh0Wc0fTM6FFY5lt5e7FlGEXTEjugs/s67jtl2Wcx2
5oWjMUpgjo0UQEFLpDG6WvK24fGy2a8=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net