Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6535f1c-a5f4-371f-9a49-b1cc1e3b7ee3.roa
File:                     e6535f1c-a5f4-371f-9a49-b1cc1e3b7ee3.roa (raw, json)
Hash identifier:          hTEefoQFoMaDFh3ULMaVbWJaguKubV2LhGx5Z6/u6Zw=
Subject key identifier:   1F:FB:05:5A:67:D7:04:05:F0:48:85:96:26:F5:E3:C6:E9:09:E5:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE46413795C055AB1263740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6535f1c-a5f4-371f-9a49-b1cc1e3b7ee3.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.55.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:64:13:79:5c:05:5a:b1:26:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=8db5cb4a-316f-4d14-bc9c-31c78f7fa56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:10:34:34:e9:5c:b2:c3:38:c1:e0:27:ee:
                    ea:5f:9e:de:77:5c:47:5b:fe:ae:8f:da:6f:80:07:
                    ee:12:3e:58:b5:85:77:01:a7:fb:52:70:a1:d7:1d:
                    0e:ce:ed:7a:cf:c8:c8:ff:13:cd:5b:74:3f:32:cc:
                    a1:0f:e4:bd:c1:5f:14:b3:90:65:74:b7:13:ac:54:
                    44:69:d1:1c:8d:da:ee:48:1e:b6:25:2b:58:ee:36:
                    7a:ae:6b:93:c0:7a:b1:2d:f5:bc:56:bf:9d:d7:f7:
                    9a:bb:3c:d4:c2:74:25:27:72:bc:fd:ea:e7:8f:fc:
                    51:7b:51:82:b3:0c:fb:8c:ff:5a:22:14:f0:ab:6a:
                    c5:6d:d9:e9:57:6f:8f:98:4e:13:2a:17:1e:55:7b:
                    f0:25:65:c8:e7:3a:2f:03:6a:ac:07:31:ee:f1:2d:
                    50:5e:c8:93:fd:3a:89:cc:0a:26:9c:8a:ea:48:f5:
                    12:3c:3e:4f:13:99:06:7f:2e:1a:86:18:44:46:dd:
                    34:ef:eb:d6:5c:8e:c5:82:13:01:9b:45:10:4a:2c:
                    c6:f0:0c:ab:d0:27:f4:9d:a0:54:62:ac:77:b2:f6:
                    fb:e1:ff:5c:bc:17:dc:33:63:3b:5f:4b:6e:e8:01:
                    e0:8b:2d:2e:75:0c:9a:6f:47:d9:41:7a:dd:b1:97:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FB:05:5A:67:D7:04:05:F0:48:85:96:26:F5:E3:C6:E9:09:E5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6535f1c-a5f4-371f-9a49-b1cc1e3b7ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:b4:dc:2b:7e:18:0e:43:df:66:e5:85:ec:8a:13:30:b9:
         a6:c3:72:c5:3f:8f:4e:c7:a4:94:6b:44:f3:d8:90:e9:9f:9b:
         f8:43:be:a7:2f:68:a6:11:92:3a:62:2a:5f:3b:11:c2:b6:4f:
         cd:05:36:d4:db:74:8b:95:4a:61:d3:4b:29:6e:83:24:52:9e:
         cd:46:6b:80:6f:c1:e2:ea:bd:8b:76:09:df:80:4c:4b:7a:19:
         8b:23:b6:98:de:36:18:dd:89:de:da:00:eb:42:85:e9:c3:61:
         12:92:79:51:ca:57:92:ce:e8:0b:f5:c1:ed:c0:74:ef:91:ad:
         dd:02:39:d8:81:e8:28:f2:d6:4c:49:63:82:36:52:6c:72:5c:
         16:40:d0:62:ec:aa:37:de:70:01:72:f6:49:85:08:db:06:79:
         16:44:13:10:91:42:37:a3:51:6d:1f:86:06:21:94:6b:2f:15:
         4a:14:6a:6c:ab:12:87:b9:97:f0:cb:d1:5b:06:55:71:c3:77:
         87:d1:1e:48:ab:2c:74:7a:7f:85:10:46:e9:32:c3:57:c9:38:
         db:c1:3c:03:4d:73:27:52:b8:1c:4c:d9:24:83:20:4f:85:23:
         86:e7:8f:25:c6:83:4d:f7:47:e1:5a:9c:de:a6:84:c4:ef:fd:
         70:1b:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:54 2025 by rpki-client on console.sobornost.net