Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fe978a60-de35-3568-ba0b-ee7a8ac8d9a4.roa
File:                     fe978a60-de35-3568-ba0b-ee7a8ac8d9a4.roa (raw, json)
Hash identifier:          LJw6xVXaGJyLCQj7SLULt1z+gSVx2Q33MrZrv8wMPqI=
Subject key identifier:   63:62:B8:4A:6F:13:57:A6:0F:AD:1C:E9:4E:C7:E3:F7:4B:AA:52:D0
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584839EAD025199A50CEE0665580
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fe978a60-de35-3568-ba0b-ee7a8ac8d9a4.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     393249
IP address blocks:        207.23.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d0:25:19:9a:50:ce:e0:66:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=37f8a9e4-81de-4001-897a-f72bfa2b81ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:af:89:a5:a4:22:16:75:06:f0:ba:f4:87:
                    92:43:54:c7:67:24:f1:ac:7a:9f:ac:4f:d0:4a:90:
                    9f:d7:20:b8:7a:6e:24:1b:53:67:02:06:3b:b0:87:
                    c6:83:82:de:d0:8f:b4:c2:20:e1:61:e3:78:48:e4:
                    a8:bc:99:60:41:e7:45:98:08:ec:82:bb:bf:d5:34:
                    34:90:57:20:5d:4b:e1:1f:29:cf:bb:30:3a:31:08:
                    6b:af:3d:55:ac:ce:8c:8f:8b:c7:51:e0:63:8d:ee:
                    cf:f9:53:d9:80:58:15:db:6c:ad:aa:9a:0b:01:a1:
                    6e:75:8b:e7:cc:37:44:48:5f:b1:95:e9:9a:0a:fa:
                    b1:5f:91:8a:de:ce:b0:2f:a4:6d:7f:e4:22:87:5c:
                    c1:a9:c7:f0:4f:0a:37:93:49:01:e7:0f:39:f5:66:
                    45:d1:35:4b:94:3e:1c:b6:dd:e8:5a:63:7e:36:02:
                    51:45:62:b9:7e:05:fc:59:3b:76:d1:63:ec:d0:f5:
                    e9:d0:f9:c2:6b:3a:79:63:90:b1:a3:48:c5:af:b1:
                    3e:11:fa:5d:be:c3:94:89:a3:2f:04:ae:b2:3b:34:
                    d4:c4:00:3b:d0:4d:a6:6e:be:d1:c0:aa:a9:68:2b:
                    ee:5c:14:25:81:34:37:82:dd:cd:2e:5b:0d:11:3a:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:62:B8:4A:6F:13:57:A6:0F:AD:1C:E9:4E:C7:E3:F7:4B:AA:52:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/fe978a60-de35-3568-ba0b-ee7a8ac8d9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:94:7d:98:31:4b:ef:f0:4f:97:4c:69:81:6c:5e:38:81:
         a9:6a:e6:d7:b5:d9:ee:b4:e4:15:65:3e:97:e0:bd:3a:dd:71:
         f4:bf:60:cf:e1:fa:c3:d4:64:c2:ca:8b:bf:23:4d:0b:18:2c:
         a4:9c:03:8a:a7:64:67:95:b9:65:e6:c9:3a:5f:8e:a3:e7:d8:
         99:08:a9:a8:06:47:05:08:31:2c:e4:09:dd:31:31:9e:ad:1c:
         16:ea:46:31:91:08:ad:af:92:46:f2:26:e6:98:37:5b:dd:d1:
         68:6b:66:3c:58:59:d4:2e:b9:55:d7:1b:e6:27:99:1c:b2:2f:
         0b:59:6c:2c:07:37:b0:7e:e1:43:37:44:9f:94:ad:3b:2e:fb:
         10:5d:fb:e3:5f:f1:81:e3:58:47:35:a3:d8:15:30:13:58:ff:
         7f:f9:e9:0d:30:a8:a0:5e:3f:ae:ac:0b:8f:08:48:a7:e4:38:
         76:85:98:21:59:15:8d:25:48:af:9c:10:82:67:1d:5f:03:87:
         44:01:da:8b:5d:ff:7c:c2:37:11:31:dc:44:da:c8:0f:0d:7b:
         71:a0:20:fc:1c:99:a6:da:3f:44:69:4f:90:b5:59:2d:f1:da:
         6d:fa:7e:5e:85:28:ae:1f:7d:99:c8:b6:d4:6a:bd:f4:42:10:
         f9:26:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:32:12 2025 by rpki-client on console.sobornost.net