Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b12dfbfa-ad4e-3cf5-a2a6-7e621f4373cf.roa
File:                     b12dfbfa-ad4e-3cf5-a2a6-7e621f4373cf.roa (raw, json)
Hash identifier:          G0WkdiMBjqLlBdHtPpJ288WsRyPT9Mz33/2BBqIf7R8=
Subject key identifier:   16:22:A5:F1:11:BB:C6:42:76:A4:AC:D5:43:01:4C:4A:C1:BB:68:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496484553F056F538D97D84380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b12dfbfa-ad4e-3cf5-a2a6-7e621f4373cf.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.53.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:55:3f:05:6f:53:8d:97:d8:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=0c78c85c-fe4f-485d-8604-6d2732acb48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:83:3e:31:04:d3:2d:ff:6a:67:44:9c:75:7f:
                    3d:3b:c6:55:34:1e:29:29:32:84:2a:67:cf:d7:4a:
                    35:81:dc:8d:86:27:36:3a:45:8c:21:d4:a9:91:af:
                    e9:ed:11:53:ba:94:89:66:60:9a:c9:17:34:33:de:
                    aa:33:9c:d6:72:0d:a2:4b:8d:1a:22:25:d0:57:ad:
                    1c:e1:68:3d:31:c2:17:31:b9:43:6e:36:b7:2a:a3:
                    a8:e4:f7:56:86:d6:d1:7d:4a:4c:79:c8:d5:71:d8:
                    ae:c7:41:3e:0e:c1:35:30:1e:f9:7a:45:34:6c:5b:
                    17:53:e8:ec:f9:40:bb:e4:2b:3d:23:7b:ef:20:d5:
                    48:f4:b2:d3:72:e3:0d:3d:8d:be:5d:10:fb:88:aa:
                    39:64:8c:54:7f:c2:ed:e1:c7:20:62:ec:a9:fc:bb:
                    40:e9:eb:5b:c5:62:ec:49:46:c6:fe:de:99:6e:8c:
                    89:a4:02:05:cb:d4:de:3f:59:d9:27:e0:46:d6:6f:
                    2b:c4:9e:b2:08:39:47:12:9b:0f:ba:31:4d:a5:a0:
                    8d:cd:32:7c:92:fd:68:f8:c5:b0:91:10:12:27:5b:
                    7d:bb:7b:d2:31:46:82:0d:09:d3:d1:10:57:29:da:
                    4b:a1:9e:9f:ae:d3:c1:e4:ec:30:70:d1:9f:95:85:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:22:A5:F1:11:BB:C6:42:76:A4:AC:D5:43:01:4C:4A:C1:BB:68:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b12dfbfa-ad4e-3cf5-a2a6-7e621f4373cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:88:7c:77:ad:6f:f0:71:9f:f0:cc:2c:e8:ae:4a:1e:6b:2b:
         6c:5b:1f:50:a0:af:6f:c0:e5:92:32:be:0b:c9:36:ee:0e:90:
         92:17:86:1a:fc:94:ee:66:c5:5f:24:6f:be:89:90:0f:c4:e5:
         de:e3:aa:9a:33:8b:69:10:70:b5:4c:b6:50:13:8b:ec:b2:f6:
         81:9a:82:78:f9:39:dd:d4:70:c7:da:1a:02:b2:6e:dc:ae:1d:
         66:79:ff:e3:d9:4b:27:f5:e1:a5:6c:7e:f5:43:4b:09:33:22:
         b5:78:c3:b9:43:01:15:8d:8c:e5:cb:6c:06:a8:6d:a4:17:9a:
         a8:93:6a:e8:48:94:27:96:f9:49:fd:be:53:40:35:f2:1b:39:
         f1:e5:a1:2f:22:fd:64:91:94:c8:e7:6f:c4:90:d2:91:36:6f:
         ab:2a:49:5f:52:4d:64:39:8c:b9:41:f5:b9:9f:21:96:2e:63:
         ae:23:f0:a0:f5:de:0c:34:5c:0b:66:06:cc:7c:0d:f5:03:d6:
         ac:d2:37:e8:cc:fc:43:fd:b9:f7:aa:ba:53:6e:7d:8d:05:43:
         53:35:0d:4d:72:f8:c3:84:ff:f7:b9:4e:ec:42:73:4a:6a:07:
         f3:85:c0:17:9d:4c:7b:45:8f:7b:41:9c:52:6d:ad:d9:50:92:
         f9:46:84:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhFU/BW9TjZfYQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MGM3OGM4NWMtZmU0Zi00ODVkLTg2MDQtNmQyNzMyYWNiNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoM+MQTTLf9qZ0ScdX89O8ZVNB4pKTKEKmfP
10o1gdyNhic2OkWMIdSpka/p7RFTupSJZmCayRc0M96qM5zWcg2iS40aIiXQV60c
4Wg9McIXMblDbja3KqOo5PdWhtbRfUpMecjVcdiux0E+DsE1MB75ekU0bFsXU+js
+UC75Cs9I3vvINVI9LLTcuMNPY2+XRD7iKo5ZIxUf8Lt4ccgYuyp/LtA6etbxWLs
SUbG/t6ZboyJpAIFy9TeP1nZJ+BG1m8rxJ6yCDlHEpsPujFNpaCNzTJ8kv1o+MWw
kRASJ1t9u3vSMUaCDQnT0RBXKdpLoZ6frtPB5OwwcNGflYU4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYipfERu8ZCdqSs1UMBTErBu2j/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjEyZGZiZmEtYWQ0ZS0z
Y2Y1LWEyYTYtN2U2MjFmNDM3M2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzX8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGIfHetb/Bxn/DMLOiuSh5rK2xbH1Cgr2/A5ZIyvgvJNu4OkJIXhhr8
lO5mxV8kb76JkA/E5d7jqpozi2kQcLVMtlATi+yy9oGagnj5Od3UcMfaGgKybtyu
HWZ5/+PZSyf14aVsfvVDSwkzIrV4w7lDARWNjOXLbAaobaQXmqiTauhIlCeW+Un9
vlNANfIbOfHloS8i/WSRlMjnb8SQ0pE2b6sqSV9STWQ5jLlB9bmfIZYuY64j8KD1
3gw0XAtmBsx8DfUD1qzSN+jM/EP9ufequlNufY0FQ1M1DU1y+MOE//e5TuxCc0pq
B/OFwBedTHtFj3tBnFJtrdlQkvlGhLA=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:34 2025 by rpki-client on console.sobornost.net