Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff57843f-b0d9-3eee-a84d-04460829ef41.roa
File:                     ff57843f-b0d9-3eee-a84d-04460829ef41.roa (raw, json)
Hash identifier:          eNUMdU5GbWvS3oGQyAglvGnKXOSR/1v19HU6NshSOxA=
Subject key identifier:   33:18:BD:EE:23:69:65:E8:C4:D6:74:73:3A:43:0C:AC:B2:4E:88:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496CE473AC0FE1B8E2D4F1CA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff57843f-b0d9-3eee-a84d-04460829ef41.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.56.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:73:ac:0f:e1:b8:e2:d4:f1:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=9336763b-a224-4f02-aaf7-c51e8412bf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:38:b9:98:ff:66:6b:fc:29:d4:36:f8:cb:
                    20:6a:dd:78:c7:03:6b:a6:bb:c5:ef:21:7f:0d:18:
                    68:09:04:c8:1c:ab:df:7b:05:89:a9:2f:d6:1c:9b:
                    52:6b:77:7f:de:0b:6d:2b:b2:15:e5:ca:81:e4:ab:
                    fc:f7:04:68:3e:28:ef:34:09:9a:88:4a:04:1f:d2:
                    2a:c4:0a:b8:29:74:a4:83:1f:84:3b:cd:a4:b2:4b:
                    96:f5:b8:bf:16:a5:67:98:37:6d:bc:c0:0f:cf:ed:
                    9f:0c:ad:0f:33:ad:56:83:eb:f2:97:9d:52:00:bf:
                    c2:15:e4:18:a7:34:16:59:9a:e3:aa:84:b4:e8:07:
                    50:91:af:96:80:0f:15:28:d9:75:9d:a3:d6:94:1f:
                    b1:7f:51:af:12:4e:91:1f:99:44:76:9b:14:97:7d:
                    e8:51:ea:6b:e1:e1:72:ff:30:e3:34:a5:d0:20:15:
                    1c:96:ad:51:57:75:05:60:dc:a8:20:a1:29:df:72:
                    1d:77:a4:dd:f8:32:92:a4:0f:f0:d7:09:5a:16:2e:
                    a9:62:32:6b:18:ae:be:f1:8c:57:c2:2b:43:50:05:
                    a4:61:6f:fa:9d:91:32:c6:a4:b3:de:45:a3:01:36:
                    60:84:80:28:0a:03:d3:78:af:58:8f:f0:c3:72:aa:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:18:BD:EE:23:69:65:E8:C4:D6:74:73:3A:43:0C:AC:B2:4E:88:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff57843f-b0d9-3eee-a84d-04460829ef41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:ac:20:bc:76:25:9a:d9:b2:f8:48:c3:38:12:3c:b9:d4:
         55:98:c0:be:90:ae:3e:15:df:e3:93:c8:89:e5:b9:54:a1:56:
         b7:f4:7d:bd:59:ab:ba:b6:87:24:f5:36:da:a1:ff:ea:cf:a0:
         a6:ae:27:77:0e:9d:25:5c:6d:80:bd:39:29:34:7c:16:d1:c5:
         87:2c:f0:78:4c:ee:ca:29:ec:39:aa:e8:19:4d:91:42:63:b4:
         b4:28:30:74:de:8c:54:4c:f6:bc:b8:8e:3d:da:44:6b:71:c7:
         36:94:70:d4:d2:a4:17:4b:6e:15:55:04:74:bc:cd:b8:56:4b:
         22:d3:ca:b8:5f:0e:c1:9c:e8:34:48:1a:b5:19:79:e1:e7:db:
         89:2a:06:9d:64:64:26:29:c1:79:41:42:20:9a:b1:a5:02:8e:
         a3:08:76:64:aa:95:2c:ef:46:d4:df:69:6b:1b:49:58:13:eb:
         44:76:77:a9:df:7e:c5:98:c4:65:e0:5c:8d:7a:e2:5b:ae:29:
         85:2f:07:cd:1d:90:db:cf:0e:cb:9f:c5:73:16:0b:69:9e:43:
         21:20:90:d1:c6:00:7a:99:8d:e6:d6:7d:20:07:1b:58:ba:ed:
         6d:24:b6:8d:d7:62:ab:18:e1:f0:e8:f2:0a:fa:00:36:66:9e:
         6c:91:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:00 2025 by rpki-client on console.sobornost.net