Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66209116-9959-329d-a862-a26105fad3c1.roa
File:                     66209116-9959-329d-a862-a26105fad3c1.roa (raw, json)
Hash identifier:          bxrYXKrLeGw6GJ9Rp7OHLWHA7fF6VGiMb3tMvMBNCYE=
Subject key identifier:   7A:DA:8B:05:52:69:4D:00:5F:79:06:52:A9:74:06:01:9D:D7:AA:7F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE4654B32747644FDF06C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66209116-9959-329d-a862-a26105fad3c1.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.56.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:65:4b:32:74:76:44:fd:f0:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=610d13b5-d86c-4c82-a2a4-238ca1bbf422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:f2:94:9c:e1:06:f6:82:b9:b9:e6:e0:e9:
                    e8:6c:0f:78:18:30:4e:49:a0:f2:b2:04:2d:46:18:
                    6c:c9:44:c3:cf:c1:cf:37:c4:46:a2:48:c9:a7:00:
                    5c:13:c3:01:db:1a:9e:ac:28:96:e6:c2:51:6b:dd:
                    7e:62:e5:cb:90:76:b3:02:bd:03:72:a5:95:e0:aa:
                    5f:00:2a:cd:d0:85:0f:dc:e3:16:47:3c:a5:2e:8c:
                    f9:b7:3d:52:96:0a:15:b5:cf:88:40:a4:0b:57:a1:
                    8a:34:b3:8f:ca:bd:83:78:73:85:88:7e:c0:49:65:
                    de:19:2a:3e:13:be:05:b3:2f:93:ff:6c:52:cf:4d:
                    4c:4d:05:6e:d1:2f:af:5c:c6:13:67:a0:bc:84:41:
                    d3:fb:7f:bb:e6:97:54:1f:c3:71:05:3d:fa:45:62:
                    29:69:c9:13:e1:8b:46:5e:51:2c:21:58:49:1a:20:
                    69:65:26:85:fd:e8:68:da:ab:5d:57:87:19:44:2d:
                    f6:ec:a0:91:7a:15:31:90:7b:81:a6:b5:56:f4:f9:
                    0f:e8:3c:d0:af:06:59:ce:3d:b0:3c:bf:54:89:70:
                    4a:4e:c3:bb:12:5c:e2:00:fa:67:5b:6d:71:e4:bc:
                    d7:49:8b:01:57:56:88:6b:16:25:48:09:4c:5e:37:
                    5c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:8B:05:52:69:4D:00:5F:79:06:52:A9:74:06:01:9D:D7:AA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66209116-9959-329d-a862-a26105fad3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:07:f6:e7:ca:8e:f0:f7:0f:c9:55:56:4b:28:6e:70:83:
         73:25:60:61:1e:98:65:08:1c:2a:98:b8:a4:a4:b9:7e:7c:90:
         86:22:9c:b8:a0:de:b3:75:76:b7:79:08:79:7a:70:44:96:94:
         38:e5:2c:b4:04:91:2d:f9:1b:53:9b:e5:d5:f3:53:75:c2:4d:
         bd:dd:11:d4:a7:ae:af:76:53:66:47:3b:e4:4e:23:3f:c1:9c:
         76:74:6d:e2:6f:e1:88:51:cb:6e:ac:8d:22:b5:41:ff:1a:9d:
         6b:ba:8b:c5:83:c5:2f:54:43:48:b9:ce:97:bc:01:a2:33:59:
         97:9a:bc:8e:c7:c8:15:4d:3b:06:41:44:55:ae:05:4d:0f:ff:
         a1:b3:cb:c1:90:a0:8b:07:e1:bc:ba:e1:a3:64:5a:1b:b7:48:
         e3:da:0e:c5:23:90:83:42:98:01:a7:71:12:89:44:e1:9e:8c:
         c4:56:98:05:e3:bc:1d:b7:de:f4:41:7b:99:2d:8f:be:d4:01:
         a2:0e:53:80:4c:a8:d9:be:57:da:f3:17:b2:11:7c:39:ca:96:
         9d:29:9a:a3:62:ed:71:23:76:51:ca:43:5b:a5:ad:45:7e:50:
         f6:ea:6e:7f:ed:53:11:44:59:36:dc:f4:0b:7e:28:e5:41:23:
         b6:db:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:06 2025 by rpki-client on console.sobornost.net