Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa
File:                     1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa (raw, json)
Hash identifier:          PD6itpcBYyrNLcVkM5keEAFZG6MUOTjceGWHjoAYmDE=
Subject key identifier:   06:6A:58:5D:35:2C:B3:33:9B:39:16:50:09:9D:84:18:74:97:4D:A3
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F432858487CEB2DCEE229E0B0D6C64C00
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        23.131.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2d:ce:e2:29:e0:b0:d6:c6:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=e48c4189-bf6b-432f-8164-f2e7e86e0279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:cb:62:8a:0a:13:40:61:6b:25:41:e9:d7:
                    0f:c8:d2:44:f0:11:be:b5:b0:be:81:ee:b5:b1:47:
                    5b:e6:98:8a:ce:68:bc:de:2f:a4:8e:07:40:81:01:
                    76:cc:37:9c:9b:f8:12:20:11:a3:82:60:1a:05:e1:
                    0d:80:8c:98:34:ad:90:89:63:b2:56:df:3f:4a:6f:
                    2a:ea:a0:2a:5f:60:89:81:00:19:67:8a:cc:78:45:
                    b8:cf:41:79:e6:4a:a8:d4:07:fa:27:5c:db:68:86:
                    4a:08:ee:f4:eb:3a:83:23:50:23:a8:ac:5d:0f:14:
                    8c:77:e2:45:a5:5f:aa:d8:75:2b:de:e2:3f:34:1e:
                    ab:b3:27:4b:c8:65:3a:d1:04:ee:e8:41:96:fd:6c:
                    84:75:91:47:02:83:64:05:45:7f:2b:12:a9:a7:d7:
                    bc:34:fc:2e:5c:23:a0:c1:d8:f3:20:17:fe:18:97:
                    da:43:e2:cc:7a:4a:60:30:77:f6:46:3e:a2:f5:f1:
                    1d:92:dc:83:97:38:66:13:1a:ab:72:7e:e9:0e:b6:
                    ea:16:ad:88:ce:4f:0c:92:83:49:0a:b2:dc:35:f6:
                    6d:35:e8:f8:0d:0d:61:d1:93:3e:04:80:b2:72:9f:
                    72:10:23:89:af:81:1a:7d:41:1e:67:41:28:e6:28:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6A:58:5D:35:2C:B3:33:9B:39:16:50:09:9D:84:18:74:97:4D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/1d3b32e2-7980-33e0-9ed1-e1734c07196b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:56:07:7e:60:60:db:1d:fe:cd:1b:93:40:d7:35:c0:ff:
         71:3f:fd:e7:ed:df:1c:30:9c:b4:54:db:4b:79:a4:e9:dc:1b:
         00:13:ff:49:cd:1a:d4:78:da:05:09:c2:bb:b2:b1:00:56:d1:
         61:f2:91:41:73:e8:a4:83:48:5b:2c:0d:e0:c8:a5:3b:f6:27:
         44:c3:1f:81:0d:3b:b4:42:e5:9f:ed:bb:ed:f6:9e:47:61:68:
         bf:85:e2:86:78:45:09:bd:cd:3c:4b:c9:84:c3:48:7e:ff:f0:
         ca:8e:7b:8f:6b:ca:42:e9:0c:e7:f5:8a:a1:10:d7:09:9d:38:
         b9:76:20:0d:bd:2e:1c:24:bc:6a:ab:41:ab:e5:56:9a:c9:3c:
         b1:e9:7c:e4:79:2c:ec:dc:9d:2a:2f:e1:99:fa:9d:56:4c:59:
         14:36:66:f7:fd:b8:80:f9:79:47:40:9b:1e:23:4d:fb:b3:bb:
         5e:48:4f:5e:13:e8:76:85:bd:9a:9b:e4:8b:c7:de:6c:c5:07:
         98:8d:70:fc:94:d6:f3:db:ab:7e:6f:53:5c:e1:93:a1:b0:6e:
         2b:0f:9b:9e:c7:a5:17:d7:5f:79:7e:6e:3c:3a:a1:42:13:be:
         b5:0f:f6:e2:c1:76:87:20:c6:f5:c4:78:6f:c2:b8:5b:76:f6:
         f3:ed:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:19 2025 by rpki-client