Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/935b67fb-b024-3873-ae5a-d227623fe962.roa
File:                     935b67fb-b024-3873-ae5a-d227623fe962.roa (raw, json)
Hash identifier:          WxKna2/apGuGw7aX8mTm6gK4ftpTBrPaTUuvPwNyJ1M=
Subject key identifier:   41:1A:3F:2A:0A:16:2B:B5:28:A4:46:DF:9D:99:D4:C8:0B:C0:74:18
Certificate issuer:       /CN=97b601f7-3a05-408c-a0f4-e54bf926b696
Certificate serial:       010D0C9F43285849287E6963ADC56B212C2A7108
Authority key identifier: CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/935b67fb-b024-3873-ae5a-d227623fe962.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     17095
IP address blocks:        23.176.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:69:63:ad:c5:6b:21:2c:2a:71:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b601f7-3a05-408c-a0f4-e54bf926b696
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=852451bc-a99e-4662-8154-ad74c9282652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:62:7f:c4:df:e6:71:c4:e8:48:dc:eb:e3:
                    28:13:69:b1:48:db:db:01:e3:76:e0:5e:47:52:29:
                    ee:23:ba:9f:91:11:6a:bd:7a:05:9d:dd:5e:e6:6e:
                    36:e5:4c:bf:66:82:45:d8:e8:a0:24:d5:4e:14:ef:
                    ca:2e:1e:4f:3c:c2:66:7a:c1:82:ba:32:13:61:d2:
                    98:0e:07:03:0e:44:c3:62:1d:8d:63:91:8f:bb:60:
                    97:7b:66:3f:51:da:cf:13:df:b2:df:ae:a2:0e:29:
                    32:a2:c4:ea:ab:59:89:09:64:31:1b:ac:a1:bd:0f:
                    f6:2d:e0:61:48:03:72:0a:f7:75:ca:55:8f:0c:2d:
                    0c:fc:ad:0e:fd:41:2c:4c:64:b0:92:bc:15:a4:a8:
                    ce:2b:20:a2:4a:3c:aa:66:a5:ea:bc:8a:63:65:d2:
                    3f:66:39:bc:00:f0:c4:95:a1:f0:6d:b4:41:78:b2:
                    11:61:32:69:b6:20:2e:13:36:89:81:6a:4d:be:c8:
                    f1:92:a9:c9:53:db:53:61:4a:5b:4f:aa:2e:bb:6d:
                    9b:6c:89:be:ac:86:be:fa:aa:42:38:0e:6e:44:e8:
                    bb:f5:76:80:b3:7f:78:ed:0b:c8:41:35:08:b1:95:
                    a7:e5:db:60:1f:ee:af:2e:e2:4d:e9:af:94:44:68:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:3F:2A:0A:16:2B:B5:28:A4:46:DF:9D:99:D4:C8:0B:C0:74:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/935b67fb-b024-3873-ae5a-d227623fe962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696/97b601f7-3a05-408c-a0f4-e54bf926b696.crl

            X509v3 Authority Key Identifier:
                keyid:CE:44:E5:87:17:80:18:EA:25:A2:2C:A5:FA:82:56:C4:AB:CB:1C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/97b601f7-3a05-408c-a0f4-e54bf926b696.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:2d:0a:4c:06:90:84:fe:0c:5f:f6:bb:a5:46:a8:e3:a5:70:
         bc:1b:76:24:67:9a:d7:49:7c:75:ee:97:9f:b2:d0:fc:f5:cb:
         8f:57:1b:aa:66:83:2a:9b:d2:1e:a8:42:41:e9:f5:b0:b9:80:
         ed:86:e4:66:d3:3e:28:c2:a1:d7:33:d3:78:20:cb:27:fc:cb:
         c8:03:b0:c1:4e:2e:cb:7c:69:83:cc:af:6c:6a:bd:ae:78:fe:
         33:ae:86:7e:8c:f4:06:d2:37:b1:ac:c6:34:30:a4:a2:a0:dd:
         b4:ef:9b:8e:97:49:e9:a5:cc:da:99:b0:8f:1a:5c:a4:25:2f:
         de:b5:e0:86:42:4b:2d:92:99:bf:32:42:6c:3f:5f:fd:d7:ed:
         86:4f:2a:ae:27:33:a7:24:d1:1f:bd:26:b1:04:34:20:86:0b:
         37:51:2f:17:49:d2:ac:7e:9b:e0:67:88:76:83:7e:eb:5c:76:
         6e:15:1c:be:d7:cd:61:52:0a:9b:ea:99:a6:b0:ac:04:cb:da:
         9d:18:e5:2f:cf:f6:70:7e:81:f8:a1:61:60:73:a6:de:e5:d5:
         bb:a2:ea:db:51:10:64:1f:c3:e3:d7:95:58:14:a0:b8:1d:4e:
         08:b1:85:c2:aa:46:a0:59:75:d6:e1:ef:9b:fb:60:71:0b:75:
         fa:68:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:22 2025 by rpki-client on console.sobornost.net