Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa
File:                     588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa (raw, json)
Hash identifier:          PqX5zOxkZzcG1heOirL7BY5YDwFkh7wzCvKZCUMN9U0=
Subject key identifier:   4C:8C:21:A5:0F:8E:0D:FB:48:CD:C8:0E:12:52:DE:19:65:A3:F3:96
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858497279BD3D695B40537503EF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     20940
IP address blocks:        23.203.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:bd:3d:69:5b:40:53:75:03:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=ff2f2f9e-a758-4906-bb07-e310d373aa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:ed:c5:db:ea:1d:c3:60:d3:52:87:85:07:
                    f8:3c:d3:5f:76:6b:3d:57:17:65:90:43:75:64:1d:
                    bb:b1:1b:eb:63:69:4b:6e:45:74:e4:ff:ef:0a:8e:
                    a2:b7:d2:4f:df:88:84:b4:0d:19:3c:49:3c:e7:9b:
                    06:ed:e4:e1:d6:59:cf:e3:d3:f5:d3:ab:95:4d:1f:
                    37:0b:a4:3d:02:20:3a:ad:31:c7:c0:7b:ca:b2:f6:
                    8b:a9:c9:bc:25:48:1e:44:77:31:47:02:1a:bc:97:
                    78:56:3f:23:63:40:e1:a8:af:b3:85:fe:07:ae:87:
                    7b:23:26:87:53:40:48:32:d2:f2:64:f1:4e:6a:55:
                    1c:e2:e5:cd:61:7b:2e:3f:93:69:7d:a7:b7:ed:a0:
                    7f:33:d1:08:b4:c9:07:e3:52:fc:c3:03:4f:69:81:
                    bc:ce:4f:ec:c2:df:4f:28:9f:f6:09:99:eb:99:16:
                    31:95:6b:24:7c:9f:9d:70:ab:a6:96:ff:e9:25:fa:
                    cf:ac:ba:54:65:e3:79:ff:98:f6:a5:a6:f4:4a:21:
                    14:4f:17:a8:e2:61:bf:74:48:6b:de:cd:c8:c9:c6:
                    98:ac:bc:3c:26:47:8f:12:f1:3c:45:52:82:37:37:
                    5f:31:a2:1f:9b:8f:07:8d:0e:4f:bc:75:fc:64:a4:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8C:21:A5:0F:8E:0D:FB:48:CD:C8:0E:12:52:DE:19:65:A3:F3:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/588dc7c1-8534-3c50-b16d-730ecc0e8bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.203.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:04:b9:ac:a4:c4:0d:5c:50:2f:eb:a6:cd:72:e8:df:19:dc:
         40:0b:17:67:77:72:a8:e4:72:1a:9d:98:26:0d:3e:22:c6:a9:
         98:86:24:fb:36:42:09:37:db:0a:46:c8:98:58:77:25:21:3e:
         7f:e3:b2:e6:a2:de:0b:83:0f:02:12:22:72:87:b1:23:89:ba:
         21:53:bc:e2:b2:87:42:71:47:6c:ef:7a:65:25:67:7b:c8:c2:
         f8:9c:80:6d:ba:b5:82:f7:ae:72:c3:47:bf:65:c0:cc:e7:eb:
         8f:47:90:57:72:4a:82:44:22:2e:c0:7c:a2:a6:97:44:7d:20:
         e2:b6:c3:dd:74:43:98:63:16:e7:bf:03:d6:f8:79:c6:4b:80:
         8a:0f:c9:2b:09:5b:be:b1:e0:27:5b:ce:91:87:93:16:9d:b0:
         7f:51:93:cb:c7:69:24:aa:d8:c7:c6:88:3e:0d:66:4e:2a:af:
         8a:4d:cd:a2:f5:b7:fb:15:e9:6c:53:3e:c2:c0:d2:1b:05:4a:
         a8:92:93:7e:70:c2:1a:48:d2:27:07:d3:07:69:f8:f2:70:d4:
         61:f5:bc:9a:30:f2:b6:99:cf:08:c2:f1:85:d9:18:de:85:bc:
         d3:2a:81:75:a3:9e:d8:c7:72:9a:56:14:17:81:92:40:33:57:
         4d:8f:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:02 2025 by rpki-client on console.sobornost.net