Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/1d114da2-cf8a-3ae6-a97f-a4cb7f9bb73e.roa
File:                     1d114da2-cf8a-3ae6-a97f-a4cb7f9bb73e.roa (raw, json)
Hash identifier:          y5Zo22OY9rj6qvSN3CPp9qQI0w2DdIhX4N8CCAbgbSQ=
Subject key identifier:   7C:53:77:BA:A5:7E:11:A1:4F:41:94:C7:F3:42:B0:58:0F:C5:A6:ED
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F43285848E9CBD8E40E3D110F03ADA320
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/1d114da2-cf8a-3ae6-a97f-a4cb7f9bb73e.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     2906
IP address blocks:        23.246.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d8:e4:0e:3d:11:0f:03:ad:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=5bcf93eb-89ee-4994-904d-0910f386588f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:c3:b4:d1:7a:75:1f:55:72:7d:93:cf:50:
                    45:af:5d:df:8f:75:66:8d:b7:7f:2d:4d:32:e8:58:
                    19:d5:a8:3a:5e:13:ef:84:fa:59:8c:7f:e0:0c:ed:
                    6b:7b:1a:c6:de:17:dc:74:53:cb:69:b6:9f:25:a5:
                    00:f6:e9:aa:ba:b4:16:58:1c:0a:54:73:df:12:50:
                    52:ba:f9:06:80:6f:ab:cc:54:0c:ed:83:d9:d3:30:
                    83:c4:1f:e0:52:f1:44:33:3b:40:af:3e:22:cf:70:
                    78:c7:d0:d7:f5:14:11:ef:9a:03:f6:04:9a:38:42:
                    9b:1c:0c:68:85:e0:b4:57:f9:51:1f:0e:38:4e:af:
                    d5:ff:00:77:00:fc:f9:d2:0c:d9:d8:38:5e:60:06:
                    52:ba:bd:9c:5f:ed:37:3c:19:17:fc:0b:39:a7:f5:
                    d1:d8:0e:d7:fd:09:4e:c1:cb:cd:47:eb:8f:bb:cc:
                    b3:7c:14:67:83:a9:f3:68:70:bf:94:1a:75:2a:fd:
                    77:1a:2f:04:54:54:05:82:14:3f:fe:36:f0:91:8c:
                    88:97:b7:fd:e1:ea:57:c8:a3:75:ac:57:26:68:3b:
                    31:35:23:8b:5b:15:ea:18:a0:40:1b:52:aa:b0:fd:
                    71:2d:34:c1:3f:b8:a6:5d:33:e4:24:0b:80:e7:96:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:77:BA:A5:7E:11:A1:4F:41:94:C7:F3:42:B0:58:0F:C5:A6:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/1d114da2-cf8a-3ae6-a97f-a4cb7f9bb73e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.246.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:35:01:90:1a:99:78:6b:97:b1:3e:cd:6b:a5:63:12:67:
         1e:84:82:d8:4a:4a:f5:95:4c:04:38:ba:89:86:14:c4:48:fa:
         9a:a3:8e:b6:20:a5:a9:64:8e:a2:e7:f5:58:27:de:99:cf:8d:
         8c:29:45:0c:2b:80:20:dc:d8:a1:3f:b0:d9:a5:95:ee:dc:af:
         42:cb:60:db:87:10:73:95:f4:b9:8c:81:b6:dc:52:06:00:3c:
         c0:dc:a3:b4:d8:18:34:a8:e3:2a:4d:d1:1b:d3:c8:8e:ea:06:
         ac:1b:9b:37:24:2c:ae:7f:94:f0:88:09:87:30:90:1f:36:fe:
         22:c2:1f:3a:25:09:98:78:98:19:80:71:a7:55:1d:3c:fb:1a:
         0a:4c:23:02:8f:7f:dd:08:e3:df:62:16:58:c5:ed:a3:3d:47:
         2f:09:6f:19:07:93:b0:ae:5a:2b:b4:0d:ee:21:fb:b5:f4:e5:
         19:76:71:a3:39:9e:f4:2d:f1:cc:9c:7d:5e:0b:9f:7d:f7:f7:
         aa:e9:69:ef:47:35:94:7a:50:d4:67:a9:60:8d:ea:dc:f7:09:
         77:48:e0:d2:6b:51:86:36:27:81:11:51:63:0c:99:2e:e2:47:
         31:67:df:ac:bb:4f:b2:46:d2:0d:5a:27:7f:e7:be:b2:34:92:
         29:ae:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:19 2025 by rpki-client on console.sobornost.net