Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa
File:                     ff7e67dc-6ced-33fd-9a23-698773763d21.roa (raw, json)
Hash identifier:          YftgQkHL1ddBtCrFkAgqmQqp1HX72FgnoB6V0V/XgDs=
Subject key identifier:   C4:B8:5C:FE:70:9C:A9:47:36:18:2E:00:43:80:74:A1:A0:B2:BB:36
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F432858470B59859B251ECB73A0D6EA80
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa
Signing time:             Fri 30 Aug 2024 04:54:13 +0000
ROA not before:           Fri 30 Aug 2024 04:54:13 +0000
ROA not after:            Thu 28 Nov 2024 05:54:13 +0000
asID:                     6079
IP address blocks:        23.167.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0b:59:85:9b:25:1e:cb:73:a0:d6:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Aug 30 04:54:13 2024 GMT
            Not After : Nov 28 05:54:13 2024 GMT
        Subject: CN=b75dce84-4586-4fa9-a496-dd86ce9e9875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:2b:dc:ce:97:46:26:30:51:53:a7:ad:37:
                    5e:e6:78:3c:a4:f9:3a:5e:44:5b:09:22:a2:c2:bf:
                    67:ce:a5:8f:15:01:97:a3:25:d0:0c:b3:b5:45:00:
                    e8:bb:1d:8e:84:8c:7e:32:0d:83:ba:4f:49:a7:1e:
                    d0:03:de:61:8d:5b:55:40:c5:89:dd:c3:b9:24:67:
                    6c:ec:fd:ad:8c:a0:a6:33:77:ba:7e:15:47:bc:80:
                    4d:5d:d5:11:14:54:9e:01:4d:a4:3c:ff:04:f6:57:
                    7f:1a:c0:2a:ca:55:84:be:01:3d:58:4c:18:b9:0a:
                    f1:c3:57:16:c8:99:28:87:f3:2b:74:59:4d:58:b0:
                    d4:b4:52:31:84:e9:fe:9e:3f:87:ad:eb:a9:85:ba:
                    fc:bc:03:f1:cf:db:01:5d:7b:7a:24:4d:0f:75:b7:
                    75:b1:d2:aa:9d:59:9f:f8:d9:16:18:b7:f2:22:7c:
                    b2:46:09:fe:a1:5d:96:1e:25:93:14:b0:3b:f7:95:
                    8d:18:63:23:44:2d:45:2c:c3:10:fc:8c:4e:28:0b:
                    ab:8c:97:46:5d:c1:ae:23:3c:cc:e2:07:4a:e3:ea:
                    18:f5:a6:8d:4e:2e:17:7a:1d:37:13:5e:8b:13:c4:
                    73:33:25:8e:1f:ab:e8:04:3b:c2:bb:c7:87:6d:ac:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B8:5C:FE:70:9C:A9:47:36:18:2E:00:43:80:74:A1:A0:B2:BB:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/ff7e67dc-6ced-33fd-9a23-698773763d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:1b:cd:ef:2b:ce:b2:8c:1a:ed:0c:34:1e:91:9f:be:b4:
         ba:dc:cc:cf:3c:4a:f3:1d:2b:9e:7a:19:65:4e:9c:4a:84:7b:
         b5:98:cd:8e:4c:66:72:a7:79:42:dc:4f:b1:8a:d2:b7:19:af:
         b0:7d:ea:2f:21:63:b3:5c:2b:d6:2a:bd:cd:9e:07:cf:b2:37:
         a5:34:57:f6:db:84:c1:d5:0a:d6:8d:d2:4d:ca:b7:8d:98:1a:
         7f:73:a1:a3:c2:22:ab:bc:2d:a5:60:ad:d2:21:ee:7b:68:f6:
         1c:29:fa:27:fd:2b:da:5c:89:de:96:b4:34:20:26:f9:c1:4b:
         3c:6e:4b:56:94:92:80:dc:f2:c1:3e:9b:a7:cf:34:d7:14:99:
         70:b5:d3:0b:75:45:ee:d1:59:ec:5f:63:c4:9a:8c:52:cf:d2:
         cf:2d:5f:b6:19:cb:81:69:29:78:09:41:4e:38:c1:2d:88:23:
         c5:7b:4a:c8:98:e0:69:bb:c7:e4:be:e6:6f:71:76:19:6d:88:
         1c:91:7a:7f:08:43:fa:a7:9a:a1:59:b6:d6:52:24:a4:71:c5:
         aa:19:03:85:f6:2b:cd:d5:f7:44:6f:ca:f8:2e:f7:e1:49:6a:
         3b:5c:78:3f:51:76:b2:7c:05:1e:9a:5f:eb:e9:67:5f:36:64:
         77:85:2f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:31:19 2024 by rpki-client on console.sobornost.net