Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e68011-0ded-3205-a826-639e5d33ae8b.roa
File:                     53e68011-0ded-3205-a826-639e5d33ae8b.roa (raw, json)
Hash identifier:          4tczlEY3itMnpQqiQ3VC7X1McdjQ2FQoRMSBsb6b9Aw=
Subject key identifier:   31:A4:F5:B5:A1:2C:B6:30:AF:6A:22:79:F1:1A:F0:E6:7F:EC:28:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849780F1D5ED636F484339F2F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e68011-0ded-3205-a826-639e5d33ae8b.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.192.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:1d:5e:d6:36:f4:84:33:9f:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=f9ebb3b4-c45e-4d1a-8fb9-0d5d3009608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:01:1d:44:37:06:e2:b6:69:96:a8:9c:95:61:
                    e1:68:65:cf:a0:60:5b:82:4b:47:27:41:ed:c1:a3:
                    b5:d7:e2:54:28:c3:1e:a1:a8:5b:3b:6b:b2:82:67:
                    4a:e7:48:c4:72:8d:49:fa:a1:30:4f:a4:c0:08:6f:
                    16:45:f6:a4:2e:89:2b:5f:ea:63:7d:c6:49:39:f5:
                    4e:d7:51:c8:ee:5e:97:c5:a8:b5:e4:42:58:d1:95:
                    d0:d0:7b:12:27:43:01:da:f4:91:e2:af:4f:f7:95:
                    bc:ea:1e:bb:5a:d4:63:d8:59:0e:97:37:c8:46:52:
                    0a:b8:1c:85:84:b8:57:46:ca:50:49:73:1d:9c:55:
                    2e:c0:d8:2f:bf:3d:68:ab:8a:c3:db:17:0c:2a:11:
                    cf:e8:e0:5f:c9:59:30:2f:f0:5b:6e:5c:a3:38:af:
                    40:f7:fc:17:92:84:16:a1:10:24:f5:a7:ee:63:c4:
                    66:1b:ba:be:5a:39:80:e2:56:3e:ed:1b:f5:c9:29:
                    c7:06:cb:b8:70:a3:3a:aa:25:cb:77:05:de:fc:cf:
                    e4:fd:41:fd:e6:e5:e0:ff:e2:e9:aa:c1:c6:00:1e:
                    57:8a:c0:ed:2f:13:36:6f:16:3b:d6:a4:0c:dd:aa:
                    6f:dd:cc:52:86:e1:a1:b2:49:6e:d1:12:8f:6c:54:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:F5:B5:A1:2C:B6:30:AF:6A:22:79:F1:1A:F0:E6:7F:EC:28:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e68011-0ded-3205-a826-639e5d33ae8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:13:3c:05:d9:23:aa:2c:f2:f8:aa:36:a2:f2:28:46:a3:
         b9:8e:a7:76:b7:07:1c:e7:f9:db:4f:d6:54:2b:3e:c4:3d:6a:
         ba:e6:87:7d:99:8e:25:3e:29:5d:48:e7:91:c1:c0:fc:93:f5:
         63:e8:69:f0:bc:20:04:5b:6c:e9:33:c8:fb:af:0e:9e:97:39:
         d9:79:9e:b7:cd:7a:56:af:b8:58:f9:26:82:97:fe:51:50:ba:
         8e:d8:ed:35:14:5c:00:84:84:23:b2:3b:f4:c1:48:fe:5b:e1:
         4e:d6:5d:ae:7c:a3:af:8c:1e:d2:7b:71:11:25:81:64:8f:e3:
         60:90:9b:61:5c:6c:95:b9:1a:29:f8:05:7f:45:e9:0b:39:ca:
         9f:38:f6:eb:df:23:45:43:4b:96:26:2d:62:73:cc:33:eb:be:
         e4:18:c6:ed:36:46:d7:55:04:ff:cf:e8:aa:47:59:23:af:f2:
         2d:7a:93:55:2e:bc:a6:e1:cd:8b:72:ea:54:f4:61:d7:02:86:
         9c:31:66:79:0a:73:5f:bf:c1:bc:8e:a9:70:18:f6:1d:24:15:
         bb:b0:f6:24:5e:57:2b:8e:21:88:db:bb:95:3e:31:bd:51:32:
         ff:e1:54:8a:d7:98:eb:c9:96:75:c1:11:2e:60:d2:19:4d:c1:
         99:17:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:01 2025 by rpki-client on console.sobornost.net