Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5baa460-905a-3224-9b21-c62f5110d6fc.roa
File:                     f5baa460-905a-3224-9b21-c62f5110d6fc.roa (raw, json)
Hash identifier:          XJcVc1gGnPVOEIf/MDE3yT1NT0sUjZS8GI12dybTDj0=
Subject key identifier:   4E:CE:E7:E4:5B:E1:14:E5:B9:C1:2D:C3:C2:FA:1F:D9:3F:E7:A5:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE4691C0B9330C3C98E3A90
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5baa460-905a-3224-9b21-c62f5110d6fc.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.59.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:69:1c:0b:93:30:c3:c9:8e:3a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=77a574f2-438d-41bf-aa57-b128cd119f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:bf:34:46:24:0a:0d:04:bb:54:d2:79:cc:
                    27:95:24:6d:d8:25:be:6d:fa:2c:a2:b8:46:d2:fe:
                    fd:b7:58:2d:41:c7:8c:c4:26:2e:6c:1e:ad:93:3b:
                    14:fe:d5:bb:d7:34:f8:d8:bc:47:7d:89:ee:85:48:
                    5c:b4:0a:20:bf:35:23:e8:d6:8f:4a:7b:5f:8c:57:
                    75:25:2a:d6:6e:80:f4:33:87:cf:11:38:c9:de:d6:
                    77:d1:89:aa:80:9d:3c:65:26:5c:86:89:05:9f:3b:
                    5e:86:ae:8d:a0:63:f8:5a:1c:5b:a6:6c:a7:0f:2d:
                    0a:79:61:4e:03:5b:77:d9:b3:03:64:4e:b2:c7:7f:
                    45:a1:df:46:d5:87:52:f5:cc:6b:8e:7b:f0:9f:df:
                    65:e2:a1:c9:2c:21:e0:e6:3a:a3:d9:4f:68:88:0e:
                    6d:f9:40:3f:eb:9c:3f:a1:bb:43:57:eb:13:0f:04:
                    c9:5f:dc:11:83:99:0b:66:5f:7d:b9:01:7b:87:79:
                    16:1d:40:51:39:0a:54:16:64:40:ed:a6:4a:cb:67:
                    9f:6b:cd:de:c6:ca:2d:d4:e5:7f:42:5e:48:71:4c:
                    e4:c1:d0:04:79:49:cc:d8:a8:66:67:83:76:0e:16:
                    be:49:28:da:3d:ce:20:81:48:8f:5c:05:b3:2c:3f:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CE:E7:E4:5B:E1:14:E5:B9:C1:2D:C3:C2:FA:1F:D9:3F:E7:A5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5baa460-905a-3224-9b21-c62f5110d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:2d:11:cd:d6:1b:fc:30:b1:aa:b0:29:73:a2:10:5c:8f:
         d2:ab:87:95:66:8b:87:f8:a9:fe:30:20:79:b4:d6:53:4c:69:
         06:5e:1e:ff:c0:40:f2:b9:96:83:08:a3:86:c2:84:80:1b:64:
         57:e4:fb:ed:81:35:66:52:b6:61:ef:b6:c1:21:fb:f5:e1:96:
         ec:30:21:4d:12:6e:85:97:08:15:f4:56:c6:32:18:5a:7e:28:
         3b:8a:17:7a:0c:72:02:96:5d:ce:d2:38:be:b4:66:0f:12:78:
         77:a6:53:4a:77:2e:ac:1e:24:73:54:46:05:0a:ec:ea:bb:d5:
         23:7e:79:6e:87:d9:dd:a9:c5:58:ab:d2:a3:38:cb:ba:31:51:
         ea:14:72:2a:c2:a4:25:a0:c7:4c:43:d2:7f:4d:69:7c:99:fa:
         4e:63:4f:84:a0:1b:26:97:cc:fc:e6:69:3e:8c:0a:e8:e4:a3:
         34:ca:ff:02:45:8d:59:b3:5b:ac:57:0c:1b:c2:ca:0a:d7:94:
         cf:e1:71:61:c4:bf:ba:8e:47:b4:ea:5f:4d:af:ee:40:34:92:
         bd:fa:2f:54:f1:23:c0:1f:dc:6b:65:9f:8c:7b:a3:8a:74:dc:
         22:01:68:c0:8e:29:80:b8:6e:99:62:62:78:a4:ed:48:c7:72:
         67:eb:79:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5GkcC5Mww8mOOpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
NzdhNTc0ZjItNDM4ZC00MWJmLWFhNTctYjEyOGNkMTE5ZjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC2/NEYkCg0Eu1TSecwnlSRt2CW+bfosorhG
0v79t1gtQceMxCYubB6tkzsU/tW71zT42LxHfYnuhUhctAogvzUj6NaPSntfjFd1
JSrWboD0M4fPETjJ3tZ30YmqgJ08ZSZchokFnztehq6NoGP4WhxbpmynDy0KeWFO
A1t32bMDZE6yx39Fod9G1YdS9cxrjnvwn99l4qHJLCHg5jqj2U9oiA5t+UA/65w/
obtDV+sTDwTJX9wRg5kLZl99uQF7h3kWHUBROQpUFmRA7aZKy2efa83exsot1OV/
Ql5IcUzkwdAEeUnM2KhmZ4N2Dha+SSjaPc4ggUiPXAWzLD96rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7O5+Rb4RTlucEtw8L6H9k/56XUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjViYWE0NjAtOTA1YS0z
MjI0LTliMjEtYzYyZjUxMTBkNmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzuqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNfLRHN1hv8MLGqsClzohBcj9Krh5Vmi4f4qf4wIHm01lNMaQZeHv/A
QPK5loMIo4bChIAbZFfk++2BNWZStmHvtsEh+/XhluwwIU0SboWXCBX0VsYyGFp+
KDuKF3oMcgKWXc7SOL60Zg8SeHemU0p3LqweJHNURgUK7Oq71SN+eW6H2d2pxVir
0qM4y7oxUeoUcirCpCWgx0xD0n9NaXyZ+k5jT4SgGyaXzPzmaT6MCujkozTK/wJF
jVmzW6xXDBvCygrXlM/hcWHEv7qOR7TqX02v7kA0kr36L1TxI8Af3Gtln4x7o4p0
3CIBaMCOKYC4bpliYnik7UjHcmfreQs=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:57 2025 by rpki-client on console.sobornost.net