Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
File:                     fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa (raw, json)
Hash identifier:          yR54mEaNMvD4853y3SE5cjsNa9eCJQ92+7Q9HmXWVbs=
Subject key identifier:   EC:87:42:E6:A7:6E:5C:BF:E4:C3:AB:44:0E:D7:39:3E:53:6C:3D:F5
Certificate issuer:       /CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
Certificate serial:       010D0C9F432858497279B4A028C86F971DFE3300
Authority key identifier: 23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     54316
IP address blocks:        23.175.208.0/22 maxlen: 24
                          2602:fcad::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b4:a0:28:c8:6f:97:1d:fe:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c33c08-b27a-4120-9af0-e2c3eef2713e
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=77b23571-684b-4ec3-9912-e8a164a16d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:b4:1b:16:90:40:87:0c:a9:3e:ab:1b:52:
                    b5:bb:f0:ca:74:cc:9c:89:1b:67:7a:06:c4:6e:39:
                    20:2b:76:76:e2:4d:fa:68:bd:fa:20:18:3c:ff:81:
                    ec:f5:1c:e0:9f:b6:35:1f:87:58:74:bc:9e:aa:53:
                    9d:fd:ab:29:4c:53:36:c5:3f:da:d8:ae:9b:13:fa:
                    6a:ae:7c:69:45:04:b7:71:67:15:73:5d:e2:6c:61:
                    bc:4b:92:34:52:3e:6d:e9:5f:ef:82:e3:af:7b:9a:
                    d8:98:8c:aa:02:48:12:80:08:c7:da:7c:52:83:ae:
                    bd:83:f5:f9:f1:26:4b:b3:6a:60:87:a4:f2:85:69:
                    45:56:dc:21:34:9a:f5:be:2e:bf:03:d9:68:4e:b0:
                    68:c3:8f:65:ca:79:7b:d3:f1:80:31:35:8d:2a:be:
                    3b:bc:45:0c:06:24:90:f4:43:bb:4f:6f:05:04:74:
                    8b:a9:ed:59:5d:a9:14:64:23:4b:91:73:95:35:00:
                    2d:db:c6:8c:26:9c:4b:7f:7f:3d:3e:18:f4:cc:7a:
                    16:5f:85:e8:0a:ec:4e:e5:6a:81:b4:6f:ee:4b:9f:
                    3c:be:12:57:55:40:d5:c5:0c:14:87:cd:a8:33:af:
                    aa:46:85:ab:d6:f7:17:de:60:ab:2b:fb:48:5d:2d:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:42:E6:A7:6E:5C:BF:E4:C3:AB:44:0E:D7:39:3E:53:6C:3D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/fad26696-a1c5-32d5-9507-e3a68a28d6f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e/a1c33c08-b27a-4120-9af0-e2c3eef2713e.crl

            X509v3 Authority Key Identifier:
                keyid:23:D4:80:FE:7D:88:22:2F:E2:ED:6F:EC:C6:1F:91:F3:9D:E6:02:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1c33c08-b27a-4120-9af0-e2c3eef2713e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.208.0/22
                IPv6:
                  2602:fcad::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f6:7e:9e:92:e9:dc:ce:8c:32:f6:04:cd:a5:69:9d:0b:c1:
         e3:50:01:0f:be:4b:04:e0:d4:8b:73:6b:9e:37:db:5b:a5:1c:
         38:7e:ee:4f:99:d3:77:c9:f8:26:bc:d8:06:9c:95:db:f6:c0:
         3d:b6:24:a2:b2:76:98:ac:29:b5:25:08:45:1f:fc:fe:26:06:
         3c:f9:b4:8b:2e:d2:be:44:0d:5c:e9:65:50:2f:9a:e4:2d:72:
         ae:cb:1d:74:c4:09:e8:74:12:bf:7d:68:47:78:c4:b5:5e:0d:
         be:52:7b:fe:74:36:1c:73:32:d2:d8:9f:17:3b:28:5c:15:b8:
         86:3e:8b:87:a9:f9:a7:5a:14:bb:93:3b:c1:5b:cf:9c:1c:8b:
         27:34:52:72:bc:7d:f6:59:25:11:4c:12:86:fc:eb:e7:96:35:
         00:c4:ae:71:4b:68:45:67:05:23:69:ce:88:2d:57:1b:e4:70:
         b2:91:8a:a9:ff:16:6a:41:48:86:e6:0f:08:6c:b5:bb:d8:dc:
         56:f8:0d:49:f7:89:78:7b:6a:c5:d3:bd:b1:bc:fe:4d:4b:b3:
         83:1f:71:35:36:02:2a:e1:8c:a0:1a:50:70:f9:83:94:a6:42:
         0b:62:cf:e3:d6:bc:e0:48:fb:49:ef:07:ce:9d:51:56:77:2f:
         89:67:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net