Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
File:                     24ba4a3b-6997-383d-8894-c07b096200c9.roa (raw, json)
Hash identifier:          /WZrfbfv+c/2b3hT/3yqx2mb1Fk1jyptUgfu83hgVfY=
Subject key identifier:   92:46:9D:69:61:15:E9:6A:31:E3:D5:1E:5F:05:E4:09:7E:34:FB:0E
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F432858484AAAE1E662AF4416D3C83080
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     400932
IP address blocks:        23.171.184.0/24 maxlen: 24
                          2602:f97b::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:e1:e6:62:af:44:16:d3:c8:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=59d64e9f-3335-4a9e-abf8-60d08d0a14fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:00:94:5f:41:bf:04:a8:a0:a2:de:db:50:
                    78:f9:c5:2e:a7:9a:ba:59:89:e3:91:45:05:11:a2:
                    13:b9:9b:25:a2:2f:93:ed:97:b8:f2:28:7f:db:db:
                    ba:04:57:37:69:2d:ac:98:74:20:49:2b:38:d6:13:
                    a8:dd:09:e9:02:38:58:fe:30:18:5c:91:1a:3d:78:
                    8d:2a:9d:d2:6f:dd:3e:df:b5:d1:a3:da:f4:3f:17:
                    96:3a:b6:40:fd:51:41:24:7b:0e:60:a3:66:bf:11:
                    b0:65:ed:b2:eb:bc:23:51:74:4e:52:0c:ee:c4:0b:
                    94:d5:7c:84:15:97:91:29:b1:da:93:fe:5c:63:e9:
                    42:5a:10:7e:4c:ad:22:44:b1:ef:0a:6d:2c:d5:8c:
                    57:a2:8f:38:1e:6a:c2:3d:25:d1:51:dd:ce:95:9d:
                    86:bd:8f:be:3f:22:90:49:5c:bb:3d:06:62:91:c8:
                    f2:b9:8e:f2:64:97:a6:31:2f:f3:28:44:ee:24:1d:
                    63:c8:f2:97:a9:15:6e:a4:ec:11:d9:ff:b7:a4:0b:
                    bc:cb:9d:45:84:ca:0f:c2:33:15:1e:9d:70:bf:db:
                    7b:25:ce:bd:66:68:20:39:23:2b:d4:c9:1b:f6:40:
                    e6:eb:68:b4:e0:60:ac:0c:3f:32:d2:b6:cc:bb:6c:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:46:9D:69:61:15:E9:6A:31:E3:D5:1E:5F:05:E4:09:7E:34:FB:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/24ba4a3b-6997-383d-8894-c07b096200c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.184.0/24
                IPv6:
                  2602:f97b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:82:dd:86:33:78:16:51:7f:eb:7e:74:24:b2:63:e0:af:0b:
         cd:40:e0:11:85:58:d7:5d:5e:89:fc:e9:87:6c:53:9f:3d:00:
         6b:7b:70:44:d0:54:eb:4c:ed:8a:b1:8e:c6:ca:7e:dd:a6:ae:
         51:ae:e7:b5:f5:60:26:97:1e:ee:a3:0b:2c:1b:a4:56:ad:a8:
         ac:87:8f:4f:91:3c:63:6f:10:19:96:a4:74:25:12:0c:17:2b:
         73:0d:61:e4:70:c5:4c:88:40:67:31:52:f2:57:2a:87:7b:bf:
         19:44:ea:ff:31:3a:fc:e6:4c:84:1a:5a:e4:b3:eb:a5:0a:fd:
         c3:17:8d:ce:40:a3:2b:d9:fd:22:cb:d4:3e:26:5e:27:57:59:
         14:32:44:cd:00:bc:13:35:02:e8:08:e6:1e:16:96:5b:fa:f2:
         02:0c:8e:4a:a3:a8:41:5f:66:08:92:ff:92:28:b3:c2:c0:3f:
         08:eb:07:8d:bc:1f:aa:f5:c5:67:a5:de:d0:96:8d:28:f8:ec:
         cd:87:64:90:2e:77:ab:62:75:3d:54:3a:fb:a6:43:d6:1d:04:
         8b:76:1d:2d:77:4c:98:11:12:62:af:73:f7:5b:e6:29:e3:fa:
         8a:51:cd:ea:4a:e5:1e:73:e2:42:20:dd:75:b7:ab:68:f9:5d:
         3f:ec:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----