Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa
File:                     abb243ee-ea22-3c57-9122-17d8552613eb.roa (raw, json)
Hash identifier:          i4XJkoEuc2FzqwnbeQi2QxaM1aw5dDtaLxnw4Ocd6oo=
Subject key identifier:   F9:B8:48:F9:BC:C7:5A:DD:37:39:0A:88:AB:C5:66:E5:5D:D3:E1:C5
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE467050086510E5F7057C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.58.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:67:05:00:86:51:0e:5f:70:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=0d590a7c-76f4-44a1-9c1d-15d5a0697640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:7a:2d:3c:88:6b:ae:ac:27:db:76:81:a4:
                    49:01:87:73:5d:57:e8:d2:53:59:f4:9e:89:82:66:
                    f2:b3:a9:b5:1a:e6:cf:1d:b1:f7:da:83:bd:33:3e:
                    76:c3:3e:f3:5b:09:8e:38:23:8d:14:8f:6b:21:76:
                    0b:b7:bf:e3:6e:2f:63:48:18:53:f4:4b:17:ef:81:
                    be:77:15:a0:d7:f1:0c:44:6f:ee:a2:af:d0:ff:8e:
                    ce:61:9b:e4:33:02:08:67:fc:0d:26:ab:25:6f:81:
                    26:d9:cb:a0:1d:e5:54:ec:45:3f:74:42:6e:09:0b:
                    dd:e1:5f:8e:08:f5:0c:bc:66:5b:db:0a:74:00:53:
                    91:ed:24:46:d0:94:2d:d1:11:73:6a:69:33:33:87:
                    fe:ff:0b:7e:83:7d:8c:05:8b:70:ff:e9:78:78:1b:
                    29:08:68:16:40:74:c4:5a:b1:da:32:0f:31:f9:3c:
                    5c:76:df:6d:4c:93:7c:e8:c0:0a:68:28:58:dd:62:
                    a6:4d:66:57:e2:31:57:7e:ff:4c:c0:f3:98:e0:9e:
                    98:7d:11:f2:37:30:ec:e4:99:0e:3b:be:5c:e9:4c:
                    a3:a0:40:9f:b3:30:7d:33:77:e1:06:6f:43:a6:09:
                    5f:80:fe:67:dc:3b:48:23:49:a6:56:63:1f:9b:46:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B8:48:F9:BC:C7:5A:DD:37:39:0A:88:AB:C5:66:E5:5D:D3:E1:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abb243ee-ea22-3c57-9122-17d8552613eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:22:56:73:66:c8:e4:e9:ac:c3:f2:3e:3a:f9:94:c1:e5:87:
         17:17:69:54:29:d7:88:a3:56:35:52:9d:7f:e0:39:cb:27:03:
         04:77:a7:8b:43:1a:3c:8d:b0:6d:3f:7b:a8:53:9a:0c:f3:c2:
         36:5d:d8:32:a6:a3:c0:58:6a:22:d7:29:d7:22:4a:4f:16:e7:
         1d:ea:35:ef:7f:e5:ac:b4:2a:b4:ec:b5:52:a1:0e:e1:08:76:
         85:86:3e:ae:ca:a2:c9:44:a0:17:43:0c:3b:8d:f0:26:ba:12:
         8d:52:e4:a0:c4:06:68:da:36:b2:df:43:9b:b2:62:26:40:a8:
         e2:b1:a1:39:88:94:3f:e8:b1:1d:da:9b:7a:25:79:87:0d:00:
         c2:7d:68:ab:8a:0a:a0:e3:45:8e:6b:41:f7:46:a2:a8:a6:f2:
         3b:02:0e:d2:38:a5:3b:3f:15:84:e7:14:3b:85:85:3b:7a:5e:
         1c:a8:ca:2f:03:c3:74:4b:e4:ec:1a:bf:98:b0:5c:62:4a:35:
         aa:29:48:54:8a:fd:53:70:be:93:3a:de:ef:05:8b:77:9c:21:
         c7:e2:39:5a:e0:87:e5:10:e5:00:62:e3:13:08:cc:ff:d0:4b:
         f7:23:5f:b2:32:4b:cd:6e:e1:c2:b3:d8:26:df:a6:57:04:e0:
         fb:e3:90:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GcFAIZRDl9wV8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
MGQ1OTBhN2MtNzZmNC00NGExLTljMWQtMTVkNWEwNjk3NjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypl6LTyIa66sJ9t2gaRJAYdzXVfo0lNZ9J6J
gmbys6m1GubPHbH32oO9Mz52wz7zWwmOOCONFI9rIXYLt7/jbi9jSBhT9EsX74G+
dxWg1/EMRG/uoq/Q/47OYZvkMwIIZ/wNJqslb4Em2cugHeVU7EU/dEJuCQvd4V+O
CPUMvGZb2wp0AFOR7SRG0JQt0RFzamkzM4f+/wt+g32MBYtw/+l4eBspCGgWQHTE
WrHaMg8x+Txcdt9tTJN86MAKaChY3WKmTWZX4jFXfv9MwPOY4J6YfRHyNzDs5JkO
O75c6UyjoECfszB9M3fhBm9DpglfgP5n3DtII0mmVmMfm0ZwCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPm4SPm8x1rdNzkKiKvFZuVd0+HFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWJiMjQzZWUtZWEyMi0z
YzU3LTkxMjItMTdkODU1MjYxM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQiVnNmyOTprMPyPjr5lMHlhxcXaVQp14ijVjVSnX/gOcsnAwR3p4tD
GjyNsG0/e6hTmgzzwjZd2DKmo8BYaiLXKdciSk8W5x3qNe9/5ay0KrTstVKhDuEI
doWGPq7KoslEoBdDDDuN8Ca6Eo1S5KDEBmjaNrLfQ5uyYiZAqOKxoTmIlD/osR3a
m3oleYcNAMJ9aKuKCqDjRY5rQfdGoqim8jsCDtI4pTs/FYTnFDuFhTt6Xhyoyi8D
w3RL5Owav5iwXGJKNaopSFSK/VNwvpM63u8Fi3ecIcfiOVrgh+UQ5QBi4xMIzP/Q
S/cjX7IyS81u4cKz2CbfplcE4PvjkC0=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:33 2025 by rpki-client on console.sobornost.net