Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/8c1c2b4b-8cef-38a5-a45b-9007a3e8eb63.roa
File:                     8c1c2b4b-8cef-38a5-a45b-9007a3e8eb63.roa (raw, json)
Hash identifier:          pdDaYvzvyDcClKUY4jfA2zjj08AjCUE87Ec4Ikl/kaI=
Subject key identifier:   A9:D2:79:7B:9B:CF:D9:BA:12:76:1F:78:1C:EE:79:BA:50:2E:50:0F
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F43285848EFC56A742C6F8FD829D1C878
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/8c1c2b4b-8cef-38a5-a45b-9007a3e8eb63.roa
Signing time:             Wed 19 Feb 2025 17:22:51 +0000
ROA not before:           Wed 19 Feb 2025 17:22:51 +0000
ROA not after:            Tue 20 May 2025 16:22:51 +0000
asID:                     13335
IP address blocks:        23.227.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:c5:6a:74:2c:6f:8f:d8:29:d1:c8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Feb 19 17:22:51 2025 GMT
            Not After : May 20 16:22:51 2025 GMT
        Subject: CN=9abed4b9-ca92-4ea2-b7af-d1fbcbc4e1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:37:18:a3:54:66:9b:86:17:cd:97:7f:c1:
                    e4:01:10:49:b3:2b:a2:f3:25:2a:ee:2e:be:32:c8:
                    21:a6:3c:3a:14:6a:ac:96:c7:94:fc:dd:88:05:d5:
                    6d:90:f9:63:1c:c2:d5:9c:9f:a0:d3:b9:cf:98:73:
                    d2:7c:1b:98:54:0a:2f:4e:d9:7e:a3:b6:2f:9c:bc:
                    50:89:d8:df:7c:8c:4b:f0:ac:cb:e2:ca:9a:08:a7:
                    44:49:ee:1a:7d:17:d1:6a:a4:85:94:91:24:08:15:
                    87:78:2a:ee:fc:98:a1:4c:2f:90:e2:6c:ac:e6:05:
                    bf:17:d2:61:7c:b0:fd:48:3f:49:00:b1:1b:84:24:
                    df:77:d0:1c:32:45:f2:90:c2:b8:97:94:a2:60:ac:
                    68:65:b6:da:20:49:fb:47:6b:2c:66:1c:a4:2b:a0:
                    d5:c9:52:57:14:59:f4:f5:65:da:2a:c1:0f:43:95:
                    82:fb:ec:2d:d8:95:d6:e0:ea:47:0e:cd:8f:32:18:
                    b3:79:9a:c7:76:4c:45:0e:28:3a:e1:d8:a6:0b:a7:
                    0e:15:6d:53:e9:a5:3c:cd:24:94:40:ad:95:f1:87:
                    bd:35:70:27:2f:f6:9a:02:3b:eb:60:6a:53:8f:58:
                    24:d0:17:15:86:00:f1:c6:a5:58:0c:1e:47:e4:65:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D2:79:7B:9B:CF:D9:BA:12:76:1F:78:1C:EE:79:BA:50:2E:50:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/8c1c2b4b-8cef-38a5-a45b-9007a3e8eb63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:52:2a:2c:8e:a1:4e:5f:94:24:9e:53:5e:bb:90:0f:da:
         00:14:29:10:12:49:29:0d:e7:5f:42:c2:12:c7:c3:a2:31:c4:
         d2:37:aa:a6:92:77:9c:bb:0e:3a:c6:b4:31:f1:55:57:a6:08:
         4b:b1:fd:09:93:b0:ff:70:8f:8a:6e:83:b9:e4:0c:03:49:ca:
         ec:23:e8:57:c9:0d:a4:0f:b7:fb:dc:99:b4:ec:a5:ae:67:97:
         56:26:de:0e:be:b6:7e:4b:de:d2:fb:15:90:63:f0:c3:9f:6f:
         ff:4d:9b:1f:3a:09:5e:dd:9b:30:55:1f:c6:0f:4d:bd:9f:94:
         23:0f:5b:25:8d:82:f4:e6:7e:d9:47:5c:3c:e0:f3:33:c3:38:
         70:4b:70:5f:55:f8:e1:9e:0c:95:9a:19:34:ba:e8:d7:82:16:
         85:b1:93:1a:77:eb:e3:ff:eb:94:1e:92:51:39:b9:52:52:c8:
         d3:d3:84:69:8b:15:08:ee:20:14:b1:e3:ef:33:6f:33:53:bd:
         e4:37:35:c1:2f:4d:b1:a2:98:0e:d9:53:db:c9:a5:c4:39:72:
         6a:1e:da:02:35:37:4a:f5:11:9a:44:37:75:67:ac:42:1e:28:
         31:8c:0c:5b:9e:73:4b:b1:6e:47:78:cd:38:73:f7:50:f0:e8:
         6f:b2:df:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:20 2025 by rpki-client on console.sobornost.net