Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bbc9b98-2139-35a4-96ca-601202e5672a.roa
File:                     0bbc9b98-2139-35a4-96ca-601202e5672a.roa (raw, json)
Hash identifier:          qP2F1Ow8uraIIle+RdGpeg0Ia6dZOjLYQ6as8v++qhI=
Subject key identifier:   F9:8A:35:64:97:D2:F2:B4:6C:52:82:B7:94:05:AD:69:8C:F3:7B:E7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496E498EA4EDAF234C8BC0A440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bbc9b98-2139-35a4-96ca-601202e5672a.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.62.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8e:a4:ed:af:23:4c:8b:c0:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=befcfbf3-ab08-4048-9db4-0eb72bbbeac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:da:b3:2e:d0:bd:fe:03:e6:7a:e1:4b:a3:
                    38:7f:62:b9:5c:e7:0c:dc:e9:4c:e2:c0:a2:59:34:
                    0d:8a:6b:b7:95:94:0e:11:5a:80:d0:20:cb:a1:17:
                    c2:3a:0b:37:e2:b7:53:d3:af:f9:db:c1:45:6c:f6:
                    46:6d:03:ee:b8:19:1f:a9:18:ce:14:ec:42:23:47:
                    14:d6:95:9b:f8:a4:c2:81:e2:dd:c8:77:01:d8:67:
                    8e:2c:f3:08:53:71:b3:53:ef:54:d1:6b:20:ec:57:
                    40:b9:c5:7e:fa:1e:44:81:f8:c1:01:24:42:03:73:
                    77:94:f6:5f:b5:32:e7:d8:78:79:4a:44:19:19:6d:
                    bf:44:58:bd:96:90:22:b6:27:1b:0c:98:7f:fe:ac:
                    05:aa:4c:c5:fe:62:7a:41:e4:9a:fb:0d:e7:1e:47:
                    4e:9c:73:97:d2:36:51:dd:45:ef:ca:ed:89:5b:03:
                    a5:d7:78:39:52:0e:7c:98:20:5a:36:05:4f:03:17:
                    ef:63:f1:c7:8d:18:65:95:70:8b:ef:cd:4e:02:ec:
                    95:d1:28:2f:fd:6f:ea:52:6d:68:32:d0:72:17:05:
                    3d:f0:a2:24:30:43:2e:fa:0b:e6:4a:98:6e:81:03:
                    b3:c0:e4:0a:7c:db:64:39:f9:e6:fb:45:ef:93:c9:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:35:64:97:D2:F2:B4:6C:52:82:B7:94:05:AD:69:8C:F3:7B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bbc9b98-2139-35a4-96ca-601202e5672a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:84:be:66:36:4e:eb:74:ed:6d:a2:9c:ea:4b:19:e1:ce:61:
         ae:4a:81:b9:36:ea:f3:32:61:70:9c:b6:63:e1:b6:df:e8:b5:
         e9:81:1d:20:00:5d:f0:50:c9:29:cd:f2:1d:d1:39:85:12:c8:
         57:1e:6b:bd:c6:d0:94:8c:d0:0e:0c:2d:8a:c3:15:3b:b6:d1:
         f7:3e:bc:d6:0f:cc:0c:3e:37:3e:2c:3f:85:33:72:62:8b:14:
         7c:fb:c4:1a:51:e5:05:eb:ca:13:8a:c2:cc:4d:27:cb:02:c8:
         56:78:b4:84:f2:57:ae:2c:13:49:de:9a:68:68:8b:64:b0:d0:
         b2:b6:ea:80:f6:54:1e:c3:3e:4b:e3:d3:81:3b:dc:99:65:af:
         63:7e:10:e3:84:80:4e:ca:33:47:f0:f7:3e:b6:36:ed:51:f8:
         fb:2d:81:cb:f1:52:f9:76:93:04:2c:fa:44:ef:b6:e7:87:7f:
         bb:c0:f7:1c:59:cc:76:fd:b9:05:3e:d1:d3:72:ac:35:4f:ae:
         cc:d4:11:cd:7d:31:4a:dc:0c:1b:1b:2a:ed:f9:3b:44:89:1d:
         0f:81:9d:89:68:03:ef:38:36:4f:fb:47:3a:dd:cc:9c:80:e1:
         e6:16:f7:d1:2f:bc:1b:f6:91:4b:88:d6:91:a3:90:c0:fd:1c:
         5d:5e:14:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:34 2025 by rpki-client on console.sobornost.net