Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062e83a-f57d-398f-8df9-aa7ccfdf9bea.roa
File:                     a062e83a-f57d-398f-8df9-aa7ccfdf9bea.roa (raw, json)
Hash identifier:          UgM6OudLfawosfUTGb3eYVtIJgXbODvwLm6w8WvPjrw=
Subject key identifier:   4A:7A:B0:0F:9C:D1:57:FD:F3:6E:37:75:23:7A:D1:3B:08:D4:41:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849780F1869C2AC8F713C365420
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062e83a-f57d-398f-8df9-aa7ccfdf9bea.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.192.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:18:69:c2:ac:8f:71:3c:36:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=ee845bc5-417c-40cd-858d-878d84394ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:8d:8f:92:20:a4:fd:58:7b:b3:22:78:ce:
                    06:e2:cb:53:05:25:ba:67:2e:ad:50:55:31:40:24:
                    c3:56:af:b6:fa:8d:8b:4d:33:96:eb:f5:cf:ee:48:
                    d6:95:56:da:58:dd:7c:7b:0a:a0:f7:63:5b:51:0f:
                    13:7d:27:70:d9:16:c4:f8:9f:d3:cd:a7:74:06:9e:
                    28:79:6a:9e:ea:a7:2d:08:26:a9:85:1f:c1:1b:71:
                    46:25:77:89:9f:97:15:46:d3:28:9f:f7:a5:f1:3e:
                    10:5b:b5:55:8d:7f:82:76:0d:fc:2d:6c:d3:02:65:
                    a1:a2:47:ad:51:60:2f:e8:7d:9f:b4:4c:07:f2:d6:
                    44:38:51:f6:ef:59:f4:e0:ed:0e:15:02:d3:70:a5:
                    02:24:8e:8a:7d:1a:63:ce:46:79:1a:ff:93:e1:c8:
                    34:2c:11:a1:5c:41:b9:0d:41:f3:c6:2d:4c:f0:76:
                    3c:5f:46:2e:cb:45:fe:cf:83:fc:57:5c:59:8d:c1:
                    a1:a7:cb:7e:33:7e:07:ba:3c:08:93:34:cf:26:fc:
                    c7:01:cd:06:ce:fc:d2:5e:56:a1:cb:2e:3d:5e:d6:
                    47:a3:95:86:87:88:0e:a0:ae:fa:fa:ff:aa:d0:b7:
                    2a:12:31:fd:2b:60:f5:c0:a9:52:10:31:49:fb:8d:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:B0:0F:9C:D1:57:FD:F3:6E:37:75:23:7A:D1:3B:08:D4:41:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a062e83a-f57d-398f-8df9-aa7ccfdf9bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:42:92:c7:de:64:fd:24:c8:52:eb:93:71:7d:e2:84:7f:3a:
         62:3c:b2:24:fa:ca:c1:11:e0:a7:bd:b5:6d:50:e0:6f:50:58:
         48:23:4d:6f:47:ee:bb:ae:c9:d7:85:ae:bd:a8:f7:21:a8:19:
         05:62:32:f7:b3:d2:f0:ee:51:00:b3:12:7b:84:11:46:1b:49:
         74:cf:09:c0:ce:ac:7c:5a:fe:f1:5b:ba:de:56:84:71:5f:23:
         45:b5:9f:e4:80:d6:75:37:06:a0:e8:3b:c4:7b:53:15:9c:b2:
         cf:09:95:f1:45:aa:d5:4c:46:de:8f:a5:92:e3:11:be:86:49:
         c2:03:e9:96:fb:6d:54:f7:05:27:37:f5:6b:43:32:7b:0a:fc:
         15:55:0c:6a:0d:a8:54:bd:be:20:97:86:28:f5:13:ba:04:0a:
         ee:6f:45:b9:5a:47:43:0f:29:62:11:26:55:fc:47:41:5c:38:
         bf:c3:89:fd:dc:4f:77:2a:48:bd:28:0a:24:64:9d:f0:c9:4c:
         a3:91:87:2d:10:88:c9:a1:90:75:97:a6:71:8f:60:34:b1:d0:
         16:41:d8:52:9a:09:f0:74:2a:ec:c2:d0:ee:f8:25:5b:96:4b:
         20:31:a7:88:9a:db:90:e7:16:25:7c:1f:44:5f:2b:e5:cf:6c:
         28:ca:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:31 2025 by rpki-client on console.sobornost.net