Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
File:                     c18259ed-d891-320f-97b4-8a88abcf4ed9.roa (raw, json)
Hash identifier:          /tNlOhJ8HJ8jHeo8cueRk+yRdIogaWGTorUd0wixlC0=
Subject key identifier:   90:BC:04:4A:1C:85:59:BA:89:4A:4F:5A:36:C2:B5:A4:B9:A8:07:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858495C24527C7A1C0A2E78B38090
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     16625
IP address blocks:        23.43.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:52:7c:7a:1c:0a:2e:78:b3:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=8f4d5a5e-b983-43af-b535-c7a29d97e9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9f:55:2d:09:1b:17:9f:b0:cc:d6:89:b5:df:
                    24:b0:7c:10:74:da:e4:65:44:29:1c:42:1c:90:83:
                    b6:30:22:36:08:f3:90:60:bc:2d:db:ba:e5:86:42:
                    d0:c4:02:7d:5d:dd:9f:c7:95:4b:fa:62:3d:38:a4:
                    a2:53:d9:cf:94:5c:11:4e:50:bb:06:de:c8:24:d2:
                    40:4b:fc:03:c7:ac:eb:21:58:4a:e9:9f:d3:c0:01:
                    5c:00:d4:48:f6:a2:f4:56:e0:fc:35:74:d0:88:35:
                    8c:e9:3c:5e:bf:ae:6c:99:ba:ad:84:97:74:b9:ee:
                    eb:89:51:f7:11:3d:2c:20:95:5f:71:cc:e6:c9:27:
                    16:df:6e:76:74:d4:e1:44:c2:2b:63:9f:dd:37:99:
                    d6:e8:a0:4e:71:86:0c:41:e4:45:2d:fa:58:3d:b7:
                    f6:73:74:71:83:de:50:22:b9:7e:c4:74:70:6b:2e:
                    2b:56:82:ae:80:2c:7e:a0:d0:3e:3b:78:f3:66:78:
                    2f:1a:51:48:cb:4a:f5:84:e9:ee:78:d2:8c:30:52:
                    8c:2b:93:91:3d:29:ab:38:b3:d3:ec:c9:26:aa:09:
                    ed:1a:68:aa:21:e4:31:b9:25:9c:27:a3:85:69:dd:
                    97:c8:aa:d7:1c:96:8e:bd:39:22:0d:fd:a7:98:48:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:04:4A:1C:85:59:BA:89:4A:4F:5A:36:C2:B5:A4:B9:A8:07:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c18259ed-d891-320f-97b4-8a88abcf4ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:38:54:59:c1:4a:4b:f2:16:ea:da:bf:90:4e:c8:65:f9:a6:
         fe:c6:29:64:8a:ea:dc:d6:3c:fd:20:d6:d0:6e:5f:84:ea:d9:
         4f:0a:c2:ca:94:b0:32:90:e4:5e:76:0c:32:6e:dd:4b:32:17:
         b3:9c:23:83:8d:83:8a:74:86:e9:97:b5:06:b5:4a:e3:58:70:
         1a:6d:dc:71:72:ca:5f:0e:0a:75:56:f5:27:9e:53:4e:76:43:
         f1:34:91:a1:3c:b9:ca:2c:1b:ba:fd:f1:be:1c:00:47:bf:23:
         67:2c:ab:41:68:e4:55:dd:52:82:bd:72:db:96:c5:78:c6:8c:
         e1:6e:da:5f:b2:a1:cb:9f:23:e7:e1:7c:6d:f4:7d:b7:fd:bc:
         ce:32:85:14:49:d9:93:d7:fe:91:9b:ab:9f:c7:e0:9d:3a:39:
         1e:8d:c2:59:7f:17:d6:3a:4c:4a:07:4c:48:6d:08:e2:6c:4f:
         99:b8:f7:a8:c9:7a:89:a3:b3:6f:3c:29:7e:05:a4:de:61:53:
         bd:2e:b6:d0:ef:eb:2a:19:4e:4d:ba:05:43:45:fb:c5:39:15:
         fc:3a:f4:76:19:1d:36:f1:72:9c:e6:cd:83:47:75:11:ea:2c:
         eb:23:ff:0d:e7:ab:35:2e:bb:a8:63:82:ae:84:40:aa:64:df:
         8a:08:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:37 2025 by rpki-client on console.sobornost.net