Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce8ec05-d111-344e-a8c2-6ae7d57968b4.roa
File:                     4ce8ec05-d111-344e-a8c2-6ae7d57968b4.roa (raw, json)
Hash identifier:          IZ5AAVOX9rIZXMX7cJaT4ofzP61NSF/+O4j6WOi1Wr0=
Subject key identifier:   23:C0:11:F4:C1:C9:6F:4F:ED:E3:5E:89:49:9C:74:1D:61:CB:E1:1C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848B2DFA893B7D62DBE3E8E9B00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce8ec05-d111-344e-a8c2-6ae7d57968b4.roa
Signing time:             Tue 28 Jan 2025 21:51:25 +0000
ROA not before:           Tue 28 Jan 2025 21:51:25 +0000
ROA not after:            Mon 28 Apr 2025 20:51:25 +0000
asID:                     401152
IP address blocks:        23.26.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:df:a8:93:b7:d6:2d:be:3e:8e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 28 21:51:25 2025 GMT
            Not After : Apr 28 20:51:25 2025 GMT
        Subject: CN=0790558b-8dbb-4028-8723-cc01bfe48448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a9:42:b4:aa:42:71:61:66:55:65:64:ab:d3:
                    1c:57:b9:5b:61:d8:07:0d:df:23:41:08:7f:27:ab:
                    0d:af:ad:6e:33:aa:4d:70:ee:3b:9c:95:e1:b0:47:
                    a2:15:63:90:0b:1c:68:3b:91:30:fd:5f:d6:5b:c2:
                    78:8c:b1:24:67:4a:9c:b4:65:02:cc:c9:05:ae:11:
                    6c:fa:8d:ae:52:49:5c:bd:65:e8:79:4b:81:ec:e0:
                    50:f7:40:a3:6d:21:e5:2f:d0:58:98:e1:64:80:72:
                    61:e2:94:74:7b:7f:eb:f1:ab:e4:b3:c4:09:34:de:
                    de:da:1a:a8:7f:14:ff:49:07:a9:91:87:3b:50:10:
                    9d:80:72:91:a5:f6:21:b9:59:af:ae:24:d2:0a:b4:
                    15:2b:29:ee:0a:62:df:2c:92:7c:27:7b:1c:e5:22:
                    0b:18:ed:20:0f:61:cd:4e:65:fb:ae:31:7e:d3:f7:
                    75:74:34:25:aa:eb:e7:29:2b:8c:ec:c0:10:53:59:
                    12:c1:4f:20:6c:45:e6:cb:90:25:89:eb:68:b5:22:
                    40:a2:49:96:92:54:42:f8:bf:ab:49:b3:02:5a:95:
                    60:a4:6c:2d:78:c6:b1:7f:ce:0b:0e:7c:ce:2c:5d:
                    6a:6e:ea:d4:57:2a:91:f6:53:a4:61:15:35:da:3b:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C0:11:F4:C1:C9:6F:4F:ED:E3:5E:89:49:9C:74:1D:61:CB:E1:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ce8ec05-d111-344e-a8c2-6ae7d57968b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:10:eb:14:f4:05:68:29:e8:4c:84:b4:e1:9f:0f:49:c4:69:
         a5:98:17:01:d0:33:e9:0e:05:11:ef:5b:bd:39:f1:c8:38:ed:
         a2:2f:16:25:b7:aa:3e:11:ab:bf:33:85:b8:46:6b:2a:99:a6:
         fd:d7:fb:65:52:06:46:89:f6:ae:d4:45:83:06:ae:bd:9b:d1:
         dc:23:57:40:36:2e:e0:50:ca:0b:fd:90:74:a4:e9:e6:8a:b7:
         2b:63:81:64:9f:63:50:1e:fe:42:2e:d5:63:51:91:77:e8:93:
         87:34:93:7b:49:8b:0c:f9:cf:ea:ec:68:7a:40:6f:19:be:4b:
         85:bc:1c:46:ee:18:e3:93:3a:e9:fe:d1:7f:d1:33:5c:36:17:
         d0:99:0b:af:c6:0b:90:bc:28:22:d5:88:ae:12:24:1e:ce:99:
         33:d5:9b:51:51:1e:b4:7c:d4:25:b1:b5:1a:ce:5c:87:2f:4c:
         a1:c1:0e:6b:2b:09:a5:e3:48:04:a1:dd:49:cb:14:03:7e:d3:
         8b:90:46:d2:b2:d5:63:b2:3d:6d:3f:04:04:bc:0c:74:0e:7b:
         0c:e0:c4:7d:8d:49:df:0f:8d:21:02:3f:8e:41:bb:fa:3d:7a:
         e5:74:cc:ce:80:0e:30:cb:15:06:dc:a4:fb:5f:69:58:68:f8:
         81:d5:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:12:10 2025 by rpki-client