Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17361c26-4f5f-3f05-99d3-8d1f76ea8b77.roa
File:                     17361c26-4f5f-3f05-99d3-8d1f76ea8b77.roa (raw, json)
Hash identifier:          9EuM30jnM9aEHnD0fZ+QVxPSYGEr8Fl/V4KenFqsIQg=
Subject key identifier:   BB:BD:E0:D0:08:B1:0A:F4:CB:87:E2:89:D5:63:12:84:DE:F1:5E:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849833A0FDA26781796FB65F840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17361c26-4f5f-3f05-99d3-8d1f76ea8b77.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.197.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:0f:da:26:78:17:96:fb:65:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=8cc77a89-205f-40f1-ae06-06089169660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:16:09:94:c7:07:02:ef:cc:21:ff:5e:a1:
                    dd:fd:94:ec:8c:b4:68:6e:01:14:ea:cf:30:c1:b1:
                    d6:09:ce:a4:5a:d1:39:cb:f2:31:b3:6b:e3:ee:1f:
                    61:f7:84:fa:9b:e5:e1:14:a5:e8:4b:c4:54:ac:27:
                    18:44:d5:ac:0c:97:f4:8a:b5:65:c8:a7:37:80:7a:
                    cf:00:c0:a2:f1:4a:f8:8e:63:14:f0:e8:07:aa:ae:
                    c9:bf:ce:f1:0e:7b:54:11:c5:2b:89:71:a9:cd:cf:
                    5e:72:d2:5b:d3:a5:ed:b9:0e:19:70:87:8b:1f:08:
                    dd:9c:b9:ad:5e:e0:9a:26:db:df:42:ec:3b:04:ac:
                    67:0a:a7:bd:62:5d:12:31:76:bc:a9:45:94:75:e0:
                    14:e5:33:1c:c2:fa:3c:c1:a4:01:e6:13:78:27:c1:
                    64:ae:19:d2:0b:21:54:c5:f6:30:f7:4c:b6:d4:c2:
                    5f:ea:8b:13:5c:ed:10:5e:1d:69:d8:ac:5f:3b:4a:
                    b5:d7:be:e7:ac:58:8d:cc:9c:0f:5a:1c:98:ed:8b:
                    bb:fe:f7:da:f1:d1:14:9c:ff:1b:32:c5:50:3c:09:
                    7f:45:57:72:96:50:cb:e7:d3:b2:61:88:e6:13:90:
                    a2:06:99:ae:2a:12:11:8b:c0:36:a8:de:41:46:2e:
                    48:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BD:E0:D0:08:B1:0A:F4:CB:87:E2:89:D5:63:12:84:DE:F1:5E:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17361c26-4f5f-3f05-99d3-8d1f76ea8b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:53:56:49:ea:77:cb:a6:d5:19:80:19:14:0f:b0:13:e2:6b:
         bd:51:48:29:fa:5e:df:f7:73:5f:dd:8b:1a:03:c4:4b:db:08:
         6b:88:aa:b8:4a:4e:9e:ae:8b:8a:86:13:80:2d:03:bb:af:d5:
         82:9b:b6:dd:83:6e:c1:94:40:5a:90:76:a3:ec:9e:eb:39:fc:
         56:17:93:14:9b:59:f3:0f:b9:a6:34:57:57:d8:d1:6d:dc:40:
         1c:b2:09:53:dc:2a:e9:aa:ea:64:47:0c:ef:b6:e2:8b:22:a1:
         a1:85:0e:87:b3:ff:c5:9d:b9:13:72:2c:f1:0c:9b:c3:ad:a5:
         4e:fc:6c:4a:45:a2:54:a8:dc:e5:46:25:a8:e1:fe:1b:cc:65:
         b7:7e:ee:c2:b0:23:f5:13:7c:89:0e:ae:dd:6d:2d:6a:5a:d3:
         b9:2e:02:cf:1e:d7:2f:dd:e2:83:4b:dc:d1:af:ca:35:1a:6b:
         e0:0c:84:4b:27:1e:a4:14:eb:c8:18:37:a9:54:62:97:0b:83:
         00:19:91:0d:6f:83:1b:8b:0b:6b:bf:de:a1:6a:c5:dc:50:b7:
         29:1d:16:80:de:9e:59:29:98:3f:30:fa:a4:f8:78:ce:4f:68:
         f6:89:c2:f7:91:7a:6b:59:97:93:5a:77:4c:be:0c:4a:8d:06:
         e5:e9:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:36 2025 by rpki-client on console.sobornost.net