Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f15a236b-7a18-30d9-ac88-e5b180231492.roa
File:                     f15a236b-7a18-30d9-ac88-e5b180231492.roa (raw, json)
Hash identifier:          +ve+X296A6RBIS7hMpTIhYzA4di9dRobDGpS67qCyfE=
Subject key identifier:   4C:90:03:72:22:98:E4:11:F2:35:35:60:FA:21:B1:D5:26:22:DE:DE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584838855A164C38B11B18C7E700
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f15a236b-7a18-30d9-ac88-e5b180231492.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     19437
IP address blocks:        23.26.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5a:16:4c:38:b1:1b:18:c7:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=4728e104-0eb9-4168-a191-6802884c7a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:81:83:7e:fd:e8:5b:b6:48:c0:fc:65:b5:
                    1a:c3:0d:3d:d8:26:bb:2e:83:82:dc:83:16:90:cf:
                    26:ea:e3:c6:80:a4:f1:17:e2:72:33:e5:91:1c:3d:
                    e2:38:6b:ba:da:b9:3e:ee:a7:43:88:b3:ca:f8:e9:
                    26:f9:1b:a8:ca:1d:36:4e:49:0d:a2:a8:70:f0:17:
                    07:9d:2f:c2:60:d0:42:7a:73:a4:d0:c0:7e:41:92:
                    c2:7d:e3:04:4e:cc:74:6f:75:99:28:ed:7c:51:ad:
                    a0:ae:80:7c:3b:f6:17:32:2c:bb:98:44:6a:3c:b4:
                    15:35:22:53:20:58:c0:0e:08:73:c0:7e:d3:44:5e:
                    3e:60:fe:90:07:7c:74:4d:f6:bd:92:48:15:5c:2b:
                    26:39:b4:2f:48:3a:c0:bf:44:03:83:f5:85:9d:29:
                    27:4d:48:e4:58:d0:13:f2:dc:1d:5f:65:58:b5:2f:
                    d5:f5:ba:95:ae:11:60:f7:62:19:16:22:2c:44:bb:
                    2a:69:6a:3a:df:e2:12:ab:f4:83:3b:9b:45:12:5b:
                    0b:0c:09:46:f8:83:40:58:8f:c8:03:3e:0a:6f:d9:
                    2c:19:dc:50:8e:4a:d3:bd:02:c5:40:12:1e:77:e8:
                    a7:1f:c8:ee:92:93:10:b1:d0:1a:d4:2c:04:bd:4d:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:03:72:22:98:E4:11:F2:35:35:60:FA:21:B1:D5:26:22:DE:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f15a236b-7a18-30d9-ac88-e5b180231492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:76:3f:75:ab:ea:3a:51:40:27:7a:8d:da:ba:b3:44:ed:c2:
         f7:26:80:0a:07:92:5d:77:14:e8:8a:bd:ba:55:35:05:88:7f:
         67:d9:36:66:ec:03:e7:3d:f7:92:e8:de:ac:2d:ed:ee:19:79:
         4a:e9:01:f2:f1:9d:a6:a4:67:b0:4b:f8:3f:8b:ff:5c:92:60:
         cd:4c:d6:7e:88:33:e2:ef:d9:0c:95:6c:cb:35:8d:6f:03:99:
         84:36:0f:d1:ed:4c:2d:3b:7f:70:22:8e:5d:e7:76:a1:ee:12:
         b7:02:da:37:18:0a:87:e1:4f:60:d6:27:15:7d:88:de:aa:9a:
         a6:ee:57:b6:a7:6c:ef:72:7c:80:78:7c:6b:0c:c5:67:b4:8b:
         bc:b8:44:3f:43:ae:07:60:30:bb:9f:e3:a0:1a:5b:75:82:73:
         92:e5:44:2f:11:2f:fd:c1:ea:99:60:0f:b4:53:19:43:36:73:
         9b:fb:e5:b5:7a:65:cb:a0:40:3a:a4:3c:a8:b8:61:a9:2c:4b:
         0c:5d:79:e7:81:48:ec:3d:a1:e1:62:ac:ad:ca:73:f8:38:c9:
         b2:29:6a:c6:a1:5e:df:c8:29:cb:ea:a4:e4:da:ea:fe:a3:96:
         99:c0:b3:15:0c:d1:cc:ea:35:9e:66:eb:11:f5:d8:ad:75:32:
         1c:68:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:32:56 2025 by rpki-client