Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a2ef53-3c83-3fe6-819b-fbc50020bea5.roa
File:                     c0a2ef53-3c83-3fe6-819b-fbc50020bea5.roa (raw, json)
Hash identifier:          LBS0gRugkzrtQkmprXnFqMkOXjbJCJt5kKaGtW4a1HY=
Subject key identifier:   10:30:E1:66:60:0B:02:91:1E:2C:0B:CF:D2:0A:40:5F:4A:46:D4:CF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849784AB00F9E107B3C51780100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a2ef53-3c83-3fe6-819b-fbc50020bea5.roa
Signing time:             Wed 09 Apr 2025 15:01:19 +0000
ROA not before:           Wed 09 Apr 2025 15:01:19 +0000
ROA not after:            Tue 08 Jul 2025 15:01:19 +0000
asID:                     20940
IP address blocks:        23.12.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:4a:b0:0f:9e:10:7b:3c:51:78:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 15:01:19 2025 GMT
            Not After : Jul  8 15:01:19 2025 GMT
        Subject: CN=c6468fc7-b3b2-4531-afc2-2f25791f34ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:a1:84:fd:b6:a0:c2:a5:70:6c:e9:5b:55:
                    18:a0:37:9e:dd:1b:f7:7c:10:fd:4f:5f:44:45:ee:
                    af:d1:28:d3:b1:9d:a1:8b:e0:ff:f6:09:1b:9f:ff:
                    23:92:72:4e:05:df:a5:f2:98:e1:63:17:a1:42:52:
                    e3:31:c0:15:e3:3a:88:b9:c4:34:4c:14:d1:9c:da:
                    ad:e0:cd:bd:6d:8b:58:f2:67:dc:c2:b5:d0:7b:58:
                    ef:75:c2:08:43:f3:60:63:e6:66:e5:5a:93:87:3f:
                    84:58:9f:39:84:11:c0:4c:e5:06:d6:c3:89:ba:77:
                    24:fc:88:20:e5:f7:a1:66:78:4b:f4:0c:62:7d:75:
                    18:cd:a0:67:c8:ea:6a:d1:40:e4:37:19:d0:fe:16:
                    0d:f2:e0:9c:1c:db:8b:a2:b0:76:59:a9:fe:bc:83:
                    2b:6a:02:e3:32:9e:14:2c:0c:6e:47:e8:23:5a:72:
                    63:50:d3:88:a3:7c:d2:9b:c3:16:df:9d:8c:1f:d6:
                    05:cc:4f:99:e0:b6:e9:f6:9f:28:32:1a:e7:20:52:
                    b1:00:34:42:2a:5c:a1:06:aa:57:9a:3a:6e:93:00:
                    2d:02:24:5e:70:e7:5c:12:9e:da:20:79:97:eb:cb:
                    72:be:5d:a3:c1:ff:c8:1c:ba:a4:b4:00:16:cc:11:
                    97:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:E1:66:60:0B:02:91:1E:2C:0B:CF:D2:0A:40:5F:4A:46:D4:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a2ef53-3c83-3fe6-819b-fbc50020bea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.12.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:98:72:6c:a5:31:91:66:a3:cd:98:0d:06:2b:f4:dc:06:
         c3:65:86:88:10:f3:cc:7c:4b:b4:16:86:d6:01:26:29:56:d4:
         0a:49:f7:2e:ad:24:1b:0f:7e:cf:e6:06:9f:f3:5d:9d:8c:2c:
         8d:1d:41:c0:52:d2:45:3f:e5:f6:58:03:99:43:33:a3:5c:c7:
         22:fb:b3:93:bb:a6:13:a7:81:de:0b:b6:a2:d5:19:d4:ec:2e:
         21:d4:c9:64:39:97:3a:8a:8d:a3:ff:25:cf:83:3c:96:56:e4:
         59:8d:ad:8d:e7:6a:02:1a:8a:1d:8d:e4:8a:1d:87:00:12:c4:
         f2:cf:f6:6d:c0:bc:fe:fc:f6:fa:90:04:36:40:d4:32:07:2d:
         54:bd:8c:14:2d:ae:45:86:5a:ae:50:42:04:2c:c6:6d:e3:1a:
         a0:53:52:86:a3:d0:81:0a:61:93:df:c3:23:fb:5b:69:59:4f:
         88:ee:06:ab:19:72:0a:73:e5:c1:dc:46:4e:5b:9b:6e:74:bf:
         f0:f1:b2:60:0c:f8:13:90:78:a1:d5:1a:eb:32:d0:82:e5:af:
         6d:b0:90:84:c6:78:6e:e2:e9:9c:da:0b:97:dc:7e:60:f5:c2:
         a1:27:29:37:8b:dc:03:16:c6:36:08:fe:b5:79:73:87:23:77:
         c9:a0:55:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:36 2025 by rpki-client on console.sobornost.net