Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/151f05a8-f1ea-3c60-bf99-ab360acb067f.roa
File:                     151f05a8-f1ea-3c60-bf99-ab360acb067f.roa (raw, json)
Hash identifier:          9/j/JraVt9N1t0XA8ZTW4yrC0+uNOlq32UgCa44T7fk=
Subject key identifier:   8B:EB:01:06:D3:D6:4D:D1:02:88:38:86:B9:82:C3:31:68:81:0E:67
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE461230998286FB70EA960
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/151f05a8-f1ea-3c60-bf99-ab360acb067f.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.54.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:61:23:09:98:28:6f:b7:0e:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=026f3478-2786-4491-82e1-8c819b816481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:b7:87:88:ef:e2:94:02:c2:21:a2:e0:e5:
                    ff:5a:94:a3:9a:0d:6f:d7:a8:ea:18:a1:18:76:d4:
                    76:fd:4e:84:91:9d:1c:11:9b:f5:42:eb:89:47:e2:
                    9e:1e:dd:48:f8:b1:fa:8b:7d:c5:6b:57:22:33:04:
                    0f:b2:46:b1:4d:aa:34:38:98:2f:df:7d:45:13:05:
                    ea:b5:4d:50:c9:b8:b9:8b:40:a1:0b:f3:83:67:81:
                    a7:ce:f2:8e:73:d7:0c:04:20:0c:43:a3:23:9c:db:
                    b2:38:51:58:c1:08:5a:03:11:b1:b8:9a:4c:b2:4d:
                    98:9a:97:5d:58:78:0c:18:cf:b8:70:4e:b9:06:16:
                    39:d8:56:77:2d:f0:60:31:69:a9:f2:13:c6:de:19:
                    dc:36:2c:ff:97:96:99:c4:55:8d:20:f1:a1:15:c1:
                    66:9b:37:b1:b0:09:11:fb:08:5c:ac:8a:80:28:3d:
                    62:1e:d4:3a:62:b1:c6:db:44:3e:67:62:32:b5:c3:
                    cd:e5:01:92:07:88:73:ee:8d:27:da:7e:bf:c0:e0:
                    04:77:a4:c8:fe:fc:7a:23:88:28:e6:8b:ca:50:c1:
                    88:41:3d:ab:86:6e:2c:e1:1a:c8:92:75:b1:22:98:
                    05:05:21:7c:45:4c:7a:e6:70:74:4c:c9:bf:64:ec:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:01:06:D3:D6:4D:D1:02:88:38:86:B9:82:C3:31:68:81:0E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/151f05a8-f1ea-3c60-bf99-ab360acb067f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:e9:ec:10:1d:5b:69:ff:65:f1:52:2a:9d:a8:3c:a2:f1:
         0e:13:73:d7:54:c5:ef:6c:60:42:8a:66:cc:44:28:c3:1e:dc:
         84:b8:f7:42:d9:a4:ce:f3:d1:82:41:97:9e:47:04:56:e8:1e:
         74:82:7a:8d:83:5d:68:d4:4b:b6:8a:4a:fe:a8:34:b3:11:83:
         8b:48:50:9f:5c:26:51:2b:10:0c:9c:7d:48:a5:fa:00:11:77:
         7c:ce:be:74:a4:e2:fd:b2:b2:ab:dd:cc:c6:51:41:33:25:90:
         c1:44:ca:71:6c:b0:5a:1a:81:75:7a:df:fe:89:8c:2d:35:06:
         18:b4:be:4a:4f:dc:e5:6d:b3:ce:b2:4c:2c:08:f6:3e:49:ba:
         3c:72:83:66:9d:f3:82:41:fd:90:ae:10:e6:00:34:c3:19:88:
         9a:b2:7a:a0:f8:ea:4f:70:64:1d:59:8d:af:94:c4:17:65:00:
         5c:5e:14:d7:23:1a:01:64:95:34:0b:24:98:8a:fb:35:7b:72:
         06:8a:8b:34:b5:d0:78:7e:0a:b4:4c:fd:ea:62:82:f9:1c:08:
         28:3f:5f:74:84:f0:7d:9e:13:f6:f2:ac:21:8a:92:ef:ca:1a:
         5c:de:43:df:2f:f0:fa:f5:ee:2e:54:5e:a3:c2:a7:83:a1:18:
         7d:14:34:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GEjCZgob7cOqWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
MDI2ZjM0NzgtMjc4Ni00NDkxLTgyZTEtOGM4MTliODE2NDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCm3h4jv4pQCwiGi4OX/WpSjmg1v16jqGKEY
dtR2/U6EkZ0cEZv1QuuJR+KeHt1I+LH6i33Fa1ciMwQPskaxTao0OJgv331FEwXq
tU1Qybi5i0ChC/ODZ4GnzvKOc9cMBCAMQ6MjnNuyOFFYwQhaAxGxuJpMsk2Ympdd
WHgMGM+4cE65BhY52FZ3LfBgMWmp8hPG3hncNiz/l5aZxFWNIPGhFcFmmzexsAkR
+whcrIqAKD1iHtQ6YrHG20Q+Z2IytcPN5QGSB4hz7o0n2n6/wOAEd6TI/vx6I4go
5ovKUMGIQT2rhm4s4RrIknWxIpgFBSF8RUx65nB0TMm/ZOwL7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvrAQbT1k3RAog4hrmCwzFogQ5nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTUxZjA1YTgtZjFlYS0z
YzYwLWJmOTktYWIzNjBhY2IwNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzabMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpA6ewQHVtp/2XxUiqdqDyi8Q4Tc9dUxe9sYEKKZsxEKMMe3IS490LZ
pM7z0YJBl55HBFboHnSCeo2DXWjUS7aKSv6oNLMRg4tIUJ9cJlErEAycfUil+gAR
d3zOvnSk4v2ysqvdzMZRQTMlkMFEynFssFoagXV63/6JjC01Bhi0vkpP3OVts86y
TCwI9j5Jujxyg2ad84JB/ZCuEOYANMMZiJqyeqD46k9wZB1Zja+UxBdlAFxeFNcj
GgFklTQLJJiK+zV7cgaKizS10Hh+CrRM/epigvkcCCg/X3SE8H2eE/byrCGKku/K
GlzeQ98v8Pr17i5UXqPCp4OhGH0UNGo=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:35 2025 by rpki-client on console.sobornost.net