Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa
File:                     8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa (raw, json)
Hash identifier:          6pgLHXfj3r6tUacb+PelOG2NVs7D6NM2fsoW4XcUjYg=
Subject key identifier:   FE:5E:7F:53:72:A0:D8:D7:F4:E4:6F:56:87:03:C3:AF:68:CB:CF:0B
Certificate issuer:       /CN=6283f7b1-718c-494a-9125-f81454a01548
Certificate serial:       010D0C9F432858496515428E33096238C4A8A4A0
Authority key identifier: CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa
Signing time:             Wed 02 Apr 2025 17:53:18 +0000
ROA not before:           Wed 02 Apr 2025 17:53:18 +0000
ROA not after:            Tue 01 Jul 2025 17:53:18 +0000
asID:                     399870
IP address blocks:        23.129.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:15:42:8e:33:09:62:38:c4:a8:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283f7b1-718c-494a-9125-f81454a01548
        Validity
            Not Before: Apr  2 17:53:18 2025 GMT
            Not After : Jul  1 17:53:18 2025 GMT
        Subject: CN=e9bd0270-e425-477a-b9b3-614c19457ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:e9:1d:f3:9f:aa:a7:ed:4d:ed:79:d3:7f:
                    09:fd:c8:4c:09:e5:b4:02:a5:bc:a2:a6:0a:a7:c2:
                    a5:93:be:bc:2f:de:02:19:59:a5:0e:76:ae:1b:63:
                    34:68:3a:63:2c:c5:68:7b:ef:bd:ad:bd:35:87:7e:
                    2c:7d:16:99:ba:25:92:74:13:ba:01:6e:25:4e:a9:
                    79:06:bd:4b:13:e2:b3:35:48:13:44:0f:22:06:b8:
                    6c:6a:fa:e7:50:9c:e9:08:0e:1f:4b:50:48:69:65:
                    70:b8:45:eb:9d:c7:2e:aa:d6:69:9b:8f:30:4a:fc:
                    71:de:1d:48:32:3f:4b:c8:72:95:4f:75:ae:9f:f8:
                    ee:cf:b9:7d:44:c8:98:45:df:7d:1b:03:17:ba:a3:
                    b1:6a:37:25:45:66:ec:11:58:5c:25:db:75:46:a4:
                    1d:f6:23:03:5b:48:7f:45:3b:92:87:6f:e0:54:7f:
                    c6:2e:cc:fe:c7:08:57:b5:3f:5e:b5:2a:cc:63:d8:
                    46:79:36:22:75:46:98:e7:9d:f8:8e:c3:c5:9f:9c:
                    24:9b:40:d6:4e:05:c4:7b:ca:b4:35:0d:29:0a:62:
                    a8:08:96:5a:3e:ec:c9:6a:95:02:8f:aa:6c:00:2c:
                    ba:47:62:24:2c:72:89:36:c4:be:ef:ca:4f:82:19:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:7F:53:72:A0:D8:D7:F4:E4:6F:56:87:03:C3:AF:68:CB:CF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/8c7fa4e8-20d0-3353-80d3-3c20949664d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548/6283f7b1-718c-494a-9125-f81454a01548.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9F:E6:C6:43:5C:E9:AA:36:04:DD:E1:81:D7:1D:D1:1A:E5:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6283f7b1-718c-494a-9125-f81454a01548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:cb:3f:bb:76:70:23:f8:9e:d2:e7:44:c8:71:6c:93:ec:
         63:da:69:12:5b:77:d6:6d:59:c8:a3:25:ff:fa:c9:c6:a3:a4:
         c6:02:4a:32:55:80:59:25:38:c3:55:09:6e:00:66:99:7c:49:
         f1:aa:f5:88:6c:9e:99:99:5b:fb:c4:93:dc:89:f3:2d:85:42:
         d6:2b:24:fa:7e:e9:d2:44:ff:c1:9d:81:ca:dc:56:c1:ff:8c:
         49:56:38:95:18:fd:7f:8d:17:e6:a5:8f:5c:29:de:c9:6d:28:
         9e:ee:ee:13:a5:c8:04:ed:84:c7:b1:e5:ce:ed:0c:b1:66:b0:
         db:7a:70:ac:c8:64:4f:5c:2f:8e:01:8d:1f:3e:89:cc:3d:fe:
         ba:35:f7:67:3c:78:4a:87:96:09:12:5a:7d:f0:19:8b:2b:49:
         bc:e3:ad:b5:4d:01:70:d7:5a:48:db:25:31:22:96:34:4c:33:
         81:87:f0:bf:60:7c:da:51:eb:5b:18:ce:e4:3f:76:37:f2:df:
         a7:b4:b2:34:18:16:03:a4:08:45:74:31:7f:80:a8:4e:a8:28:
         2b:e3:55:cd:71:a4:47:36:cf:07:aa:6c:cd:e4:2b:00:15:c8:
         1c:b9:e8:68:10:df:d1:4e:91:d6:f8:22:bf:51:f2:a6:71:bf:
         97:48:ad:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEllFUKOMwliOMSopKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjI4M2Y3YjEtNzE4Yy00OTRhLTkxMjUtZjgxNDU0YTAx
NTQ4MB4XDTI1MDQwMjE3NTMxOFoXDTI1MDcwMTE3NTMxOFowLzEtMCsGA1UEAxMk
ZTliZDAyNzAtZTQyNS00NzdhLWI5YjMtNjE0YzE5NDU3Y2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul7pHfOfqqftTe15038J/chMCeW0AqW8oqYK
p8Klk768L94CGVmlDnauG2M0aDpjLMVoe++9rb01h34sfRaZuiWSdBO6AW4lTql5
Br1LE+KzNUgTRA8iBrhsavrnUJzpCA4fS1BIaWVwuEXrnccuqtZpm48wSvxx3h1I
Mj9LyHKVT3Wun/juz7l9RMiYRd99GwMXuqOxajclRWbsEVhcJdt1RqQd9iMDW0h/
RTuSh2/gVH/GLsz+xwhXtT9etSrMY9hGeTYidUaY5534jsPFn5wkm0DWTgXEe8q0
NQ0pCmKoCJZaPuzJapUCj6psACy6R2IkLHKJNsS+78pPghmahwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5ef1NyoNjX9ORvVocDw69oy88LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82Mjgz
ZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0NTRhMDE1NDgvOGM3ZmE0ZTgtMjBkMC0z
MzUzLTgwZDMtM2MyMDk0OTY2NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjI4M2Y3YjEtNzE4Yy00OTRhLTkx
MjUtZjgxNDU0YTAxNTQ4LzYyODNmN2IxLTcxOGMtNDk0YS05MTI1LWY4MTQ1NGEw
MTU0OC5jcmwwHwYDVR0jBBgwFoAUz5/mxkNc6ao2BN3hgdcd0RrlhtwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82MjgzZjdiMS03MThjLTQ5NGEtOTEyNS1mODE0
NTRhMDE1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxKyz+7dnAj+J7S50TIcWyT7GPaaRJbd9ZtWcijJf/6ycajpMYCSjJV
gFklOMNVCW4AZpl8SfGq9YhsnpmZW/vEk9yJ8y2FQtYrJPp+6dJE/8GdgcrcVsH/
jElWOJUY/X+NF+alj1wp3sltKJ7u7hOlyATthMex5c7tDLFmsNt6cKzIZE9cL44B
jR8+icw9/ro192c8eEqHlgkSWn3wGYsrSbzjrbVNAXDXWkjbJTEiljRMM4GH8L9g
fNpR61sYzuQ/djfy36e0sjQYFgOkCEV0MX+AqE6oKCvjVc1xpEc2zweqbM3kKwAV
yBy56GgQ39FOkdb4Ir9R8qZxv5dIrTY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:00 2025 by rpki-client on console.sobornost.net