Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3eaf3ea-82a6-3a77-918c-05e81be5c81f.roa
File:                     f3eaf3ea-82a6-3a77-918c-05e81be5c81f.roa (raw, json)
Hash identifier:          cZ+q/wR54lXxgezEA2dgpBfULwLjRUmg5OgszzMG36Y=
Subject key identifier:   C1:93:AF:44:0A:ED:03:D1:F8:ED:FA:9B:8E:A4:57:C9:DB:84:45:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496E498EC8B5232715DF0F5740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3eaf3ea-82a6-3a77-918c-05e81be5c81f.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     35994
IP address blocks:        23.62.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8e:c8:b5:23:27:15:df:0f:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=3b5f8d7a-b6f2-4736-a3b0-cb0d0e8c2152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:10:63:4a:01:b8:8c:90:92:5b:c3:45:95:
                    a4:fe:78:19:c8:6a:f2:07:0f:d0:90:63:11:6b:53:
                    2f:07:aa:fc:a3:cc:54:7f:e1:38:ec:8f:00:25:c7:
                    22:46:ae:28:43:8e:79:f3:af:f2:00:fc:af:9c:83:
                    d7:8e:7f:75:bf:ab:40:4f:eb:6b:b8:ae:e4:16:12:
                    1f:eb:1f:9a:b7:bc:9e:56:10:45:13:ba:2f:5d:96:
                    ce:17:c7:c3:df:14:43:48:26:75:94:bd:19:1b:50:
                    71:08:01:1a:58:77:3a:2c:e2:aa:07:2d:10:d4:f3:
                    d3:6d:e8:52:d8:8d:3a:d4:36:30:53:18:e1:05:49:
                    df:67:7c:88:a4:fb:bd:3e:e4:a0:c2:69:d6:29:ff:
                    17:1b:7c:7b:76:93:76:f0:36:e4:06:fa:51:b7:8f:
                    db:7d:12:5a:3d:95:34:ca:d6:bc:70:13:66:2a:e8:
                    ca:06:8b:57:40:b4:3a:be:2f:0b:2e:9d:78:95:56:
                    b8:4b:4c:84:f1:77:37:30:98:10:7d:9d:69:4f:e4:
                    e5:e3:f6:47:9a:55:b2:2c:7b:aa:68:a1:e5:a7:08:
                    b5:c9:f6:8a:5a:ec:3e:ab:c9:89:bc:5c:87:23:9d:
                    ce:0c:7b:0b:fa:ed:9b:67:d0:39:09:87:62:79:f0:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:93:AF:44:0A:ED:03:D1:F8:ED:FA:9B:8E:A4:57:C9:DB:84:45:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3eaf3ea-82a6-3a77-918c-05e81be5c81f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:92:d3:2c:ce:2c:4f:a4:8a:39:fe:3e:2b:09:c5:71:f3:
         7f:15:e2:ef:e6:38:a6:b2:78:f8:4b:7a:23:cd:77:e2:9d:62:
         c3:a8:04:29:51:69:8d:19:3f:94:18:ec:70:31:33:4e:45:ec:
         01:74:e5:b3:8a:c7:78:63:dd:51:c8:a3:ca:84:a7:f0:15:69:
         9f:88:81:7b:4c:26:a1:e7:5e:f4:e8:ad:90:04:e9:9d:ad:d6:
         f7:cf:9f:a4:f6:a8:00:da:a0:b2:62:09:01:ab:cc:32:e2:08:
         a7:4f:01:ea:8b:69:59:0b:ea:35:a0:23:cb:7d:c9:3d:05:ff:
         cb:c9:66:7e:d5:5b:55:25:61:83:cc:46:a0:03:69:3a:41:d6:
         e0:70:99:61:bf:72:f1:f8:07:1f:c0:53:18:de:9b:af:88:64:
         56:5d:6c:29:02:8b:33:fe:01:f1:6e:b4:b8:5b:79:9e:65:10:
         27:fb:66:45:e4:cf:a1:b6:82:66:5f:e1:90:84:d0:ca:cb:b3:
         c8:56:cd:7b:ef:fa:2c:7b:b2:c4:94:1d:d9:6c:46:80:de:0c:
         b9:fe:cb:a7:14:4b:c0:97:3e:22:84:98:35:b8:97:cd:0f:d1:
         62:38:6a:00:a0:c7:2b:15:ec:80:d3:3b:36:f9:b9:33:c6:f0:
         b5:4d:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:57 2025 by rpki-client on console.sobornost.net