Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          pTOZd/NjdcPMgu/DteIK9+2v1w+Jzd6X+jiQcga4U00=
Subject key identifier:   D6:D4:EA:82:1B:C8:B6:AB:BC:A5:86:A8:DD:F3:2C:15:0F:3F:16:CD
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       32AECFDF8CEEE86753A121166FAFE224C65D8FB2
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 06 Dec 2024 12:43:16 +0000
ROA not before:           Fri 06 Dec 2024 12:38:16 +0000
ROA not after:            Fri 05 Dec 2025 12:43:16 +0000
asID:                     19521
IP address blocks:        23.144.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ae:cf:df:8c:ee:e8:67:53:a1:21:16:6f:af:e2:24:c6:5d:8f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec  6 12:38:16 2024 GMT
            Not After : Dec  5 12:43:16 2025 GMT
        Subject: CN=D6D4EA821BC8B6ABBCA586A8DDF32C150F3F16CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:76:0d:3b:f0:8e:cd:31:6a:aa:50:13:e9:
                    c6:b7:05:04:80:9f:c2:47:b5:bf:5c:fa:b0:66:19:
                    c7:42:1f:13:fa:df:33:25:f2:e1:ee:90:0c:b5:27:
                    37:9c:0f:22:df:fb:c3:ff:26:60:89:73:76:6b:a2:
                    8f:59:58:ab:3a:7f:5c:21:13:3c:70:f4:76:8a:56:
                    16:26:00:39:48:20:4a:2e:6a:04:e5:c4:3a:c1:f5:
                    68:aa:cf:32:f7:d3:ef:02:45:e8:97:9c:96:ca:9d:
                    df:13:7f:04:c3:77:e8:88:b7:17:3c:ec:1e:23:25:
                    03:d0:ef:cf:a7:f7:8c:b8:80:24:b3:0f:5a:61:c0:
                    e1:da:a9:2a:d7:67:0b:12:a7:4e:3b:2c:d0:93:c2:
                    28:22:37:ef:f4:40:04:9a:d4:51:5d:bf:ea:f8:1e:
                    ad:6b:c4:97:e6:fa:a1:2a:d8:5a:43:14:c4:51:4c:
                    bd:33:1e:b6:29:24:d8:67:60:22:76:76:b0:97:f3:
                    28:43:33:a6:9b:26:c2:21:77:e6:19:2c:45:c7:a5:
                    87:fe:69:f1:bb:f3:26:68:a5:f1:16:43:57:69:78:
                    01:f0:fc:88:63:a2:4b:fb:db:5f:bb:67:d6:23:cf:
                    8d:d7:34:7e:ee:2f:9a:f0:7c:02:04:12:a7:9e:8a:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D4:EA:82:1B:C8:B6:AB:BC:A5:86:A8:DD:F3:2C:15:0F:3F:16:CD
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:45:1d:0a:37:34:51:9e:56:fc:e4:a1:0f:95:b8:9e:2d:b3:
         cc:28:aa:bd:2f:bf:fb:e7:a8:32:b3:b3:ea:ee:88:37:6d:a8:
         5d:b0:3b:63:73:eb:73:c8:89:31:55:b7:ac:92:db:5f:f0:66:
         ca:af:30:6a:5b:ff:b4:3d:b6:8a:fb:6e:bb:e8:32:fc:20:25:
         bd:ac:0f:bc:13:d3:f0:01:31:f8:46:40:5f:22:5d:69:15:64:
         f2:20:54:92:01:bd:40:ac:6e:28:28:76:c7:d8:47:09:95:5c:
         e4:44:e1:78:6d:a6:1e:6d:06:8f:01:45:3f:c3:46:ff:fc:2c:
         4e:09:55:92:37:21:da:da:a7:63:72:2f:43:b9:cc:37:1a:bb:
         e1:96:0c:0e:54:6e:27:4a:e1:18:06:74:01:5a:c9:f8:9a:75:
         83:14:46:aa:1d:14:c1:14:ed:c4:0b:69:7f:02:46:20:f6:10:
         f8:a2:9a:06:36:33:cd:81:1c:7c:46:9c:46:83:e7:6b:01:07:
         a1:45:56:39:a5:1d:6f:60:24:98:40:01:8e:17:0a:4d:dd:93:
         b5:1f:93:09:48:a7:19:0e:ae:47:42:75:5f:9b:cf:c1:82:10:
         f0:1b:0f:34:af:06:02:ae:27:91:51:aa:22:8e:85:57:85:31:
         13:69:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:30:59 2025 by rpki-client