Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa
File:                     c084590b-3ab2-32dd-af28-d65751098d7b.roa (raw, json)
Hash identifier:          OX/0DR2Jm91tyIHuZLlj6HgSEhs4+YLoOz7jhtJeqUw=
Subject key identifier:   FC:14:4F:21:BE:05:1F:BA:75:89:2C:DC:9D:94:B9:94:9B:54:19:38
Certificate issuer:       /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial:       010D0C9F4328584975444BA8260980E105CB6E80
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     146806
IP address blocks:        23.145.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:4b:a8:26:09:80:e1:05:cb:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=149ed479-da66-4c92-8ffd-15fe48a66d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:3b:57:9c:b9:c6:c6:20:62:cd:b4:e7:06:
                    5f:65:7d:13:a8:e0:ea:80:34:e9:88:33:46:f2:15:
                    e6:c4:da:21:25:14:16:24:8e:9f:0e:9f:6f:86:4e:
                    7b:c9:4e:4c:2a:f0:aa:87:57:44:0a:4e:70:9a:12:
                    9f:4c:8d:b1:c9:64:20:3d:24:f8:2f:55:3a:d7:22:
                    68:e8:f7:03:ab:33:94:de:e3:96:9c:00:66:ae:35:
                    74:24:97:f6:88:49:e6:d2:6d:74:0a:40:fd:a9:fa:
                    3c:4f:84:87:cc:5a:78:8d:a2:40:55:c4:f5:f6:22:
                    64:33:46:26:96:ab:88:3c:bc:02:a1:82:68:89:11:
                    42:f1:de:bb:92:16:43:50:b5:16:0f:a5:fc:1c:a4:
                    60:b9:61:c6:3b:e9:8d:da:e7:e9:9d:fe:20:38:5c:
                    ab:46:f7:a1:82:bb:e0:15:8b:9f:1c:89:0b:28:d4:
                    92:ab:24:d4:c9:57:85:60:15:4b:67:e9:57:1d:ae:
                    0d:62:fe:cf:c6:ba:74:90:d9:de:2f:bc:0c:3c:f3:
                    3f:96:e6:e1:91:af:3e:f1:9c:c4:b6:79:44:c6:33:
                    62:02:c5:2b:2d:da:d1:01:e0:e6:35:9f:4e:50:08:
                    99:05:c8:94:f2:b5:be:a4:4c:99:6d:02:dd:2d:68:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:14:4F:21:BE:05:1F:BA:75:89:2C:DC:9D:94:B9:94:9B:54:19:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl

            X509v3 Authority Key Identifier:
                keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:1f:a4:8f:69:4b:be:5a:eb:9c:18:ed:98:96:c1:a5:74:
         d5:a0:ce:0e:15:15:fe:78:da:88:0f:e9:1c:31:58:0f:ad:94:
         c3:83:10:97:ec:53:91:29:59:37:63:9b:cd:c9:fe:ec:5a:fb:
         65:30:dd:e3:07:e3:78:f7:35:75:20:08:f0:b5:ba:a5:34:e6:
         71:fa:36:c0:2d:90:63:2b:ec:7b:74:eb:a0:9e:7f:28:8b:df:
         2e:a6:0d:26:68:57:a4:8b:a8:aa:0e:a5:06:4d:1f:40:f8:7a:
         00:3f:ef:7d:6d:70:b4:cf:96:d3:7d:e4:b6:9f:0e:0e:c2:0d:
         96:10:3f:3b:a3:21:45:3b:9f:b6:3a:a7:a5:89:71:1f:21:9c:
         fe:df:5e:5e:00:fd:56:08:fc:34:06:04:ce:eb:8d:97:2a:de:
         99:bc:1a:53:dc:86:7f:dc:7d:a4:c9:3b:97:06:a1:37:1c:83:
         91:16:4e:01:85:bd:8b:35:a0:8a:ed:42:ca:18:83:c8:e2:48:
         3e:cc:46:dd:22:c9:01:f3:4a:5f:8d:6d:3a:11:05:3c:ac:0b:
         e7:ab:02:61:c5:e0:1b:9c:16:2a:f8:56:ee:46:06:86:f1:40:
         4c:7e:05:75:51:92:d7:6f:65:9a:db:2b:59:1b:17:5e:ed:e6:
         ff:c9:36:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net