Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46164d15-2fbf-368a-b623-f65832ea88dc.roa
File:                     46164d15-2fbf-368a-b623-f65832ea88dc.roa (raw, json)
Hash identifier:          sB2YyFB2UjeaheXTXlSpWbh4N0OGQIrumb3/LIpFmzA=
Subject key identifier:   66:77:C5:01:A0:7F:F6:78:22:81:B1:95:59:5F:BB:03:38:CA:08:A3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858484C1240AC206E0A582EA6C700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46164d15-2fbf-368a-b623-f65832ea88dc.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     33287
IP address blocks:        71.230.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:12:40:ac:20:6e:0a:58:2e:a6:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=9d0e5be6-1280-4c3f-b2cf-810436b74c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:3e:32:d2:a6:34:31:7a:4a:ca:c4:bf:f4:
                    0f:09:f7:77:b2:10:b5:4b:16:b4:31:4b:cb:fc:51:
                    02:7c:ce:6c:24:a2:3d:69:73:2a:4d:a4:aa:3b:b9:
                    41:ac:f7:7a:15:92:ce:dc:3a:0d:a0:75:67:e6:67:
                    db:93:4f:64:b5:bd:3a:ce:22:89:b1:af:fb:96:8f:
                    97:0f:4a:7b:b2:83:df:b6:6b:18:ae:d4:6d:52:4e:
                    8f:df:6b:c9:5b:52:2d:a2:0e:89:e4:30:78:00:7b:
                    f4:0b:90:84:db:d3:12:e0:0c:44:7f:50:c6:89:37:
                    a1:7c:d4:6d:be:a6:0c:79:50:56:53:93:2d:a7:f8:
                    31:f8:ba:15:ab:9b:ef:f5:68:7e:18:78:e8:40:6b:
                    19:01:64:88:e8:5b:98:00:28:f4:a3:ef:60:d6:bf:
                    2c:78:7b:11:bf:c4:eb:ed:97:67:3c:a2:5b:2d:16:
                    40:e7:cc:69:d1:5e:7b:56:ac:cc:25:d5:35:5e:de:
                    2b:d4:28:52:ba:69:9b:6a:f6:ec:e7:db:a3:53:cf:
                    b3:88:e5:c7:4c:e6:4c:6b:d3:e8:c5:5e:dc:ee:0d:
                    29:4c:c1:eb:13:16:40:82:25:92:06:ba:f4:cf:4b:
                    4a:e1:eb:e7:29:c1:57:a1:a0:a3:c7:cf:ed:4e:0b:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:C5:01:A0:7F:F6:78:22:81:B1:95:59:5F:BB:03:38:CA:08:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46164d15-2fbf-368a-b623-f65832ea88dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.230.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:a6:38:9c:95:ae:2c:cd:f8:ac:8d:9f:3b:97:aa:47:d3:
         e9:ba:9e:7f:24:45:28:6b:57:cd:ce:d1:2a:a8:7e:7a:3f:57:
         73:b3:c8:17:24:9b:0d:23:2f:2a:fd:97:11:d7:59:c4:b2:c4:
         16:0b:15:07:a1:0c:4c:5b:19:0d:e9:55:af:d9:0a:a3:e3:e1:
         c7:2e:80:cc:d4:ef:d2:c7:ae:04:82:97:00:8f:0c:27:d2:40:
         b9:00:14:76:bb:09:36:2f:b6:3c:77:50:05:e4:07:1e:83:65:
         82:ca:db:56:ef:55:de:3e:d4:88:f8:19:eb:87:20:dc:c8:9b:
         6e:6f:bc:fd:6a:a0:da:93:48:10:10:9c:68:7a:e6:11:9b:54:
         84:41:4b:4e:a2:08:f4:45:2a:fc:53:f6:cd:c5:58:c2:d1:69:
         1b:81:b1:04:63:3a:76:64:6f:9c:60:7c:f9:f3:0e:61:1b:a7:
         dd:b3:bf:53:7d:70:f6:3a:62:db:8e:db:15:ed:67:90:90:7d:
         65:56:09:2d:38:46:7d:27:ed:e5:ed:5a:35:da:e6:f8:a8:ef:
         bc:e6:c5:af:ba:be:78:38:75:50:d9:1c:af:6c:14:a1:51:d0:
         67:43:a2:17:54:6b:37:27:3b:63:0c:33:cc:10:4b:11:59:7e:
         60:1f:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:46 2025 by rpki-client