Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4340b6ee-c812-3ea8-8126-a3dfa78b57fb.roa
File:                     4340b6ee-c812-3ea8-8126-a3dfa78b57fb.roa (raw, json)
Hash identifier:          g4zRKLZR5wHS+jPBGgGdl1OQhCku/nwn6nu5U4TKYG8=
Subject key identifier:   CA:0D:14:F0:D3:2B:67:F5:60:9D:38:C4:E5:FD:7C:91:C7:A9:D6:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495EEEF614CEC6419A1A51DC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4340b6ee-c812-3ea8-8126-a3dfa78b57fb.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.48.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:f6:14:ce:c6:41:9a:1a:51:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=b44e46e5-b5b8-4655-b749-79a9dee1d10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:13:a2:93:17:ce:81:0a:f0:1d:78:30:a6:
                    ee:3d:6d:40:28:fe:06:4a:28:ff:86:51:d1:16:a6:
                    42:26:25:69:0e:48:08:9f:d6:a7:e6:17:60:d7:a7:
                    55:e6:96:7f:43:c1:41:f2:86:5f:b9:ce:b1:db:30:
                    75:ee:65:ea:6b:b1:00:1e:63:95:d5:53:29:0e:ac:
                    94:6e:29:14:ad:81:90:ee:de:94:2e:66:a8:aa:f6:
                    3f:bd:c2:98:3d:a8:a3:3a:ce:b6:f8:39:04:98:17:
                    e7:db:8c:57:90:d6:70:17:92:5a:42:41:de:85:90:
                    c6:ea:cd:5a:40:ad:b9:09:30:1a:23:10:1e:7a:33:
                    a2:7b:e1:2f:86:e3:87:9d:be:b3:ab:38:2f:7b:30:
                    90:a0:8c:cd:0a:e9:ce:3b:9e:a9:d0:de:1e:bb:3d:
                    5c:0f:99:ca:ae:bc:1b:61:33:f8:b6:a2:5b:2e:e5:
                    2c:c6:c9:15:67:c8:dc:21:e5:32:62:59:09:d0:13:
                    7b:b2:bd:f5:2a:5f:c9:b0:43:37:cd:bc:91:ef:44:
                    75:cf:15:fd:52:e2:44:20:f7:56:7f:01:a1:11:22:
                    3b:a0:1f:19:1e:2f:c0:00:62:8f:4e:4c:8a:79:e9:
                    94:94:79:97:89:46:f7:ee:1e:34:c3:6a:74:c4:7c:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0D:14:F0:D3:2B:67:F5:60:9D:38:C4:E5:FD:7C:91:C7:A9:D6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4340b6ee-c812-3ea8-8126-a3dfa78b57fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:8c:4d:da:ac:26:b3:b8:4e:aa:59:9a:ce:8d:7e:d8:55:
         89:76:ae:b2:75:e1:0a:fa:22:20:8a:41:38:c8:8e:bb:8e:54:
         d4:c0:31:bf:5a:90:c7:46:cc:5e:93:0f:19:0d:5b:4f:22:32:
         e0:3b:8b:73:de:dc:20:c2:63:ef:f2:0c:19:36:ff:f9:ee:6c:
         09:c9:b6:80:b7:07:31:8d:ec:f6:b9:a0:ce:12:4e:9c:b7:7e:
         64:6d:fe:93:c6:cc:ac:d5:34:08:78:3c:5b:cf:58:38:f1:92:
         04:71:78:11:7a:bc:3a:c6:7c:12:89:96:8e:cc:55:3d:a7:cb:
         0b:33:55:05:c1:4a:dd:e5:ce:ff:84:3b:cd:f5:d4:b1:58:42:
         30:74:86:c4:de:23:07:d1:06:51:e5:33:6c:62:75:7f:78:8b:
         3e:ec:ae:5c:38:b2:24:21:14:f4:3c:47:df:6a:b5:d1:cc:bd:
         71:2e:c4:3e:86:96:81:e5:69:73:0a:b7:a1:49:4a:c7:5f:6e:
         7c:f5:47:da:78:6c:11:0a:0e:57:6c:00:e1:0c:82:21:1c:86:
         33:99:2f:08:3a:37:11:fb:c3:b0:d9:9f:5e:a2:cc:e8:dc:f2:
         49:9b:5b:8f:09:58:a1:82:ea:07:7c:17:e3:19:7d:8b:f8:24:
         66:44:b1:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7vYUzsZBmhpR3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
YjQ0ZTQ2ZTUtYjViOC00NjU1LWI3NDktNzlhOWRlZTFkMTBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN4TopMXzoEK8B14MKbuPW1AKP4GSij/hlHR
FqZCJiVpDkgIn9an5hdg16dV5pZ/Q8FB8oZfuc6x2zB17mXqa7EAHmOV1VMpDqyU
bikUrYGQ7t6ULmaoqvY/vcKYPaijOs62+DkEmBfn24xXkNZwF5JaQkHehZDG6s1a
QK25CTAaIxAeejOie+EvhuOHnb6zqzgvezCQoIzNCunOO56p0N4euz1cD5nKrrwb
YTP4tqJbLuUsxskVZ8jcIeUyYlkJ0BN7sr31Kl/JsEM3zbyR70R1zxX9UuJEIPdW
fwGhESI7oB8ZHi/AAGKPTkyKeemUlHmXiUb37h40w2p0xHyY7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoNFPDTK2f1YJ04xOX9fJHHqdaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM0MGI2ZWUtYzgxMi0z
ZWE4LTgxMjYtYTNkZmE3OGI1N2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzBgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMfjE3arCazuE6qWZrOjX7YVYl2rrJ14Qr6IiCKQTjIjruOVNTAMb9a
kMdGzF6TDxkNW08iMuA7i3Pe3CDCY+/yDBk2//nubAnJtoC3BzGN7Pa5oM4STpy3
fmRt/pPGzKzVNAh4PFvPWDjxkgRxeBF6vDrGfBKJlo7MVT2nywszVQXBSt3lzv+E
O8311LFYQjB0hsTeIwfRBlHlM2xidX94iz7srlw4siQhFPQ8R99qtdHMvXEuxD6G
loHlaXMKt6FJSsdfbnz1R9p4bBEKDldsAOEMgiEchjOZLwg6NxH7w7DZn16izOjc
8kmbW48JWKGC6gd8F+MZfYv4JGZEsSQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:57 2025 by rpki-client on console.sobornost.net