Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
File:                     2ae97979-16d5-393c-a787-3ce400c70ade.roa (raw, json)
Hash identifier:          jbB9lvAE7LYiGzB/Qo9IvZJ5AoOghIPhTyD0vjzXB/k=
Subject key identifier:   D3:92:C3:F4:2D:C0:60:C9:85:DF:E0:63:EF:99:5F:DB:C3:5D:F1:3B
Certificate issuer:       /CN=143dcb45-9a31-4d19-a1e6-f07027b13219
Certificate serial:       010D0C9F4328584886B076CA22A8F6F74FDB8700
Authority key identifier: 1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     32281
IP address blocks:        23.140.184.0/24 maxlen: 24
                          2602:fb22::/36 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:76:ca:22:a8:f6:f7:4f:db:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143dcb45-9a31-4d19-a1e6-f07027b13219
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=837c4b5e-eb43-43ef-aecf-bcfdfc5b5e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:4a:b2:d0:1e:57:02:f0:25:77:01:a2:4e:
                    a9:1d:61:95:f6:c3:17:7f:10:74:c4:23:4b:e1:8c:
                    8d:cb:e0:61:d4:e5:00:1e:27:d3:4c:40:81:ed:86:
                    e8:2e:ee:db:54:c0:51:4d:27:0a:e3:f2:f1:d5:e3:
                    d0:a3:5a:fc:66:41:b9:a5:58:97:05:3c:50:46:a1:
                    19:13:7a:22:d5:20:99:fb:59:93:a9:12:cc:b5:27:
                    69:f7:70:84:24:d5:c2:5b:75:fd:4d:cb:85:28:c2:
                    88:85:c2:95:a4:47:6d:c4:50:a7:e8:cc:c9:03:df:
                    ab:a8:3a:2b:3a:35:99:96:1b:1e:1b:d7:74:05:e7:
                    65:be:15:51:88:93:76:c9:4f:6e:91:12:bb:0f:54:
                    db:65:b1:1e:ed:35:ed:b1:ad:67:96:66:a6:bb:7f:
                    dc:56:fa:a1:b4:70:d7:a0:be:d0:ac:75:b7:b2:02:
                    81:09:4b:00:0f:75:61:1c:db:46:bd:7a:61:53:18:
                    83:74:25:cd:5a:05:96:7b:e5:45:7e:f8:c1:fe:bf:
                    73:1e:4e:02:1c:92:2a:d6:ed:d1:5a:71:8b:ff:c9:
                    c9:0b:0b:7f:d8:5b:e4:19:a9:a2:0a:5d:17:7e:24:
                    a2:d1:fd:96:e1:42:a0:17:49:99:da:23:2c:c6:81:
                    0c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:92:C3:F4:2D:C0:60:C9:85:DF:E0:63:EF:99:5F:DB:C3:5D:F1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/2ae97979-16d5-393c-a787-3ce400c70ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219/143dcb45-9a31-4d19-a1e6-f07027b13219.crl

            X509v3 Authority Key Identifier:
                keyid:1D:02:1B:AD:49:59:2B:A2:AD:2A:37:5D:4E:62:47:28:4A:33:C2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/143dcb45-9a31-4d19-a1e6-f07027b13219.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.184.0/24
                IPv6:
                  2602:fb22::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c8:7f:8c:ec:0d:43:17:aa:3c:b8:98:d3:07:86:a5:f2:f4:
         76:af:49:19:e5:45:af:e1:da:52:f6:d2:d3:3e:0e:ce:6e:30:
         55:b0:a7:94:ba:90:30:d3:4a:8c:5b:cd:09:6a:dc:e0:7a:6f:
         96:ab:85:7a:f0:68:9a:f3:84:ed:bd:b0:86:c1:03:c2:c6:43:
         ff:03:27:8a:3b:f2:2e:36:45:c5:fb:40:d9:73:a0:ec:76:63:
         12:f1:51:5b:f7:32:9d:f0:b5:b7:92:80:08:c5:fc:26:1b:25:
         e9:c9:aa:d9:fe:98:4e:84:4f:58:bc:f5:e5:ed:da:02:1f:fb:
         37:47:39:f1:2e:a0:a1:5d:66:b8:fc:c7:76:f4:00:1a:75:0f:
         e7:d6:ca:eb:49:b9:c6:1b:a0:8d:66:b3:ea:ba:fe:ab:9d:d9:
         03:3c:31:fc:e1:e2:19:02:72:f4:99:da:1c:13:6a:f6:a3:aa:
         0e:f6:f5:07:f6:0d:2a:e2:9f:99:e1:3c:07:ce:76:a7:b6:3a:
         26:63:df:27:95:35:ef:2a:7b:06:22:1c:03:0b:d2:70:2a:04:
         b0:c2:ea:d1:15:c9:5b:27:8b:77:c9:00:86:d6:63:5c:71:1c:
         cf:ec:16:f9:40:34:8f:7d:9a:f4:b8:72:e3:51:a6:ec:dd:fe:
         d8:82:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----