Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa
File:                     87fba722-5dc2-3c90-8573-bed0796d43f1.roa (raw, json)
Hash identifier:          nj9Pv2eXrPyhmctrMKEJRcmI2gETuGcqXd4JBvGiNl8=
Subject key identifier:   BA:5D:94:74:5D:A5:2D:DA:47:26:35:A6:5C:ED:CB:5B:E8:93:05:77
Certificate issuer:       /CN=30040710-7ccf-4c85-98c7-8d6246d146f5
Certificate serial:       010D0C9F4328584832F042729A1D18FDFCCF8380
Authority key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     399478
IP address blocks:        23.176.240.0/24 maxlen: 24
                          2620:95:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:42:72:9a:1d:18:fd:fc:cf:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30040710-7ccf-4c85-98c7-8d6246d146f5
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=9de807fe-87e4-494e-9d09-27fa298ad6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:99:76:74:f2:14:1e:49:12:f3:ed:32:e1:
                    da:7c:83:5e:71:00:6f:d2:86:ff:d8:dc:e9:9e:f2:
                    42:c6:22:f6:40:c7:2a:a9:4b:0a:0b:6b:a3:7c:e1:
                    ab:a0:6a:eb:4c:70:5c:ed:81:ae:28:1f:39:23:b1:
                    3d:a1:2f:e7:ef:67:04:cc:ea:aa:99:79:90:6e:23:
                    af:0d:b7:3c:eb:24:03:0d:f6:9c:1a:7b:6e:26:de:
                    dc:14:4d:4e:aa:71:b3:38:4d:e5:68:2b:6e:48:60:
                    e3:57:a5:ce:69:64:c0:e1:31:47:52:da:87:84:b8:
                    7c:18:dd:de:d3:a5:0d:61:a0:95:a9:d7:00:dc:5f:
                    78:8a:b6:9e:c4:9d:55:e8:35:fa:a4:ec:65:45:a8:
                    fa:ba:ac:6c:2d:4f:c0:95:7b:b3:ab:88:04:4b:0e:
                    d6:ef:e1:b5:29:b1:3d:83:55:8f:98:64:68:47:05:
                    8a:5e:e6:cd:1f:7c:90:72:86:30:14:86:98:08:3b:
                    2c:7f:6c:c1:57:ec:21:de:cd:89:13:05:35:16:83:
                    46:50:1b:fc:71:f0:ed:30:07:4e:42:d4:7c:82:6c:
                    97:19:54:24:fb:52:45:47:bd:3c:b2:4d:2d:e3:78:
                    ee:dc:e1:e9:80:ef:bf:93:48:63:3a:5d:d9:2e:48:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:94:74:5D:A5:2D:DA:47:26:35:A6:5C:ED:CB:5B:E8:93:05:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl

            X509v3 Authority Key Identifier:
                keyid:88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.240.0/24
                IPv6:
                  2620:95:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:71:80:0a:14:81:4c:31:e0:32:29:42:af:c0:35:71:61:
         26:43:14:43:3a:0d:8d:ba:06:81:16:f7:ba:36:b1:82:5d:4e:
         89:be:de:f6:a2:1b:4e:12:24:a4:9f:bb:71:41:7a:41:fe:d1:
         d2:69:f0:b6:5d:a3:9d:02:0b:63:50:2b:1d:a8:15:8a:59:60:
         a9:5f:9b:d4:77:ee:8f:33:51:00:93:3f:4e:1b:33:2f:ae:bb:
         80:0a:03:4f:95:93:5b:f0:f1:85:ec:4f:f2:1b:1d:5c:76:6e:
         a4:26:f0:3a:c0:5d:94:7d:9f:3a:5a:84:f7:d6:7c:0d:b9:31:
         6f:1f:88:39:b9:51:0c:39:ce:15:cc:fd:e6:2f:83:21:c6:e3:
         00:62:82:38:a7:50:63:e0:0f:f8:5a:f8:2b:69:b3:b5:da:1e:
         ad:87:6d:b6:0d:1e:3f:00:18:50:d2:59:59:66:48:17:48:91:
         0b:67:0c:be:02:61:f2:a7:9f:6b:51:ff:12:17:dd:83:ad:fc:
         89:19:dc:65:d5:db:e8:67:30:21:84:7d:f2:6e:7b:da:f5:99:
         9a:4e:e8:d4:0b:0c:dc:a9:f9:9b:a2:9a:33:a7:e9:46:70:2a:
         ea:1a:b0:94:24:51:1c:7f:ac:44:49:ea:39:7d:b6:a9:1a:4e:
         aa:fe:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:13 2025 by rpki-client