Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa
File:                     e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa (raw, json)
Hash identifier:          pzHnRnBQHEJuPU+T7Uzo81y43byH5aUdbaXJNkjd+iQ=
Subject key identifier:   DB:13:66:5C:3A:9B:2A:17:17:28:FA:F9:FD:CA:F4:6F:24:FA:C7:20
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584854703CC4BE5376B22E41F080
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     7018
IP address blocks:        23.26.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:3c:c4:be:53:76:b2:2e:41:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=d5fd7fa4-8127-4ea8-82ab-617c320e3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:79:be:f6:fe:2f:ad:af:1a:cb:aa:c0:38:
                    30:b2:d7:74:73:99:ba:d2:96:3e:01:80:f9:9c:54:
                    60:bc:4f:02:68:b4:95:90:96:3f:e3:f6:be:33:c3:
                    03:ae:97:91:e5:cb:74:81:e1:0f:40:2f:d1:dd:d4:
                    e3:67:44:59:5f:01:84:47:52:7a:c7:af:f1:60:00:
                    13:40:20:aa:d8:40:37:53:35:81:50:1f:be:71:c1:
                    d7:96:e6:aa:4e:30:ff:91:d0:fe:e3:91:a4:ca:1e:
                    97:39:16:ac:3d:8c:2a:de:a6:17:6f:71:b3:d3:38:
                    0b:9d:e6:8d:da:39:1e:5c:a3:a2:94:32:b5:6f:4d:
                    ff:e4:e7:fa:19:0f:df:30:0e:30:a7:1b:61:b3:0d:
                    f8:8a:67:9f:f7:66:25:e9:40:3c:7b:e2:4b:f4:28:
                    f2:6b:6c:6a:18:e2:d5:e6:3a:05:55:6c:b8:1d:35:
                    19:d0:f5:0c:99:bf:d8:b0:c5:5b:a0:7b:14:8c:c0:
                    77:33:5c:de:f4:cc:99:e3:2f:9c:25:10:bc:7c:d8:
                    1d:5a:f2:7e:52:c4:6d:d4:53:1a:8e:6a:42:8c:bf:
                    42:94:03:b2:18:f2:db:02:20:96:68:b8:2a:a9:43:
                    5a:41:ad:14:9e:83:e7:68:c2:1f:dd:31:df:13:31:
                    07:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:13:66:5C:3A:9B:2A:17:17:28:FA:F9:FD:CA:F4:6F:24:FA:C7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e8bca8b3-32b9-3e3e-a25e-fbbb68121091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9b:5e:c9:47:43:bb:75:6c:31:fd:a9:c4:20:cb:40:4b:a7:
         2b:8d:8f:ec:bb:69:ec:99:bf:e2:da:0b:70:36:f8:b6:b3:11:
         bd:34:c4:97:ce:68:71:1f:09:91:b0:d7:37:65:a3:50:d1:94:
         34:95:e9:74:38:39:ff:8e:83:96:44:fc:12:eb:44:a1:b8:d3:
         a5:4e:66:2a:87:4c:83:73:d9:7a:a6:d4:2e:f1:b3:78:e0:c8:
         db:67:c3:1d:69:75:31:94:2d:ff:e7:c7:2c:e3:d3:46:63:f2:
         a9:06:50:e6:05:e8:e9:56:f4:a3:19:21:ed:f6:38:0e:4b:a4:
         78:3f:f0:0f:f7:37:96:92:36:97:a9:fb:43:58:a3:1a:1b:58:
         74:0d:eb:00:73:dc:9e:c8:b9:50:ba:c2:49:5d:b0:9c:bb:7d:
         3c:35:2a:64:6b:22:89:91:11:ea:0c:ed:81:65:11:31:22:c2:
         20:d5:f3:2f:64:f9:f8:07:f8:34:2c:73:ac:d0:33:e2:df:f0:
         49:80:33:e5:6b:de:05:94:f7:21:48:41:62:c4:fc:98:1c:c0:
         e5:0f:40:3f:68:b4:3c:a1:9c:5e:17:9a:99:d0:a4:a6:12:f7:
         fe:81:3a:d1:a0:16:c1:1b:46:89:2a:b8:82:35:92:97:3a:2c:
         7f:90:1e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:56:12 2025 by rpki-client