Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
File:                     c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa (raw, json)
Hash identifier:          9WlMz2h6k7p6bebDxocFWrefwNCDUir4Ou/SSW6JuqE=
Subject key identifier:   82:3D:94:47:8B:90:0B:83:18:D3:1C:36:F3:8A:F3:A3:0E:90:D4:1E
Certificate issuer:       /CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
Certificate serial:       010D0C9F4328584851A581E26A74C16D7D1230B0
Authority key identifier: 29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     396982
IP address blocks:        23.174.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:81:e2:6a:74:c1:6d:7d:12:30:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbee9b1-1b33-4951-a617-ecb80d9bad99
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=a16bdfd2-994f-4285-b952-436c6c90f438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:a3:eb:49:31:db:fd:22:d3:4b:80:f4:14:
                    c9:57:5c:8e:13:bf:25:55:b8:ba:67:95:a3:82:3a:
                    f6:c8:0f:43:b2:f5:b9:77:cb:a0:fc:f7:0b:7d:0b:
                    03:ea:8d:d4:b0:9c:5d:47:3a:99:f5:f9:63:6b:88:
                    83:3e:cb:ee:4a:97:5e:83:a9:06:98:21:24:07:31:
                    da:f5:1c:b5:79:d3:09:9c:dd:d7:7b:8a:62:6d:72:
                    d3:b3:ec:90:63:92:41:42:2f:c1:3d:68:03:c7:ad:
                    1d:af:ee:af:bc:cb:7e:7e:47:25:3b:b7:31:29:d0:
                    62:7d:7b:15:94:18:db:94:7e:1f:92:3a:9f:26:39:
                    dd:55:67:90:22:47:90:60:6e:ba:13:a3:30:ca:47:
                    27:e3:48:bc:ae:b3:96:54:d5:eb:08:4a:0c:6f:58:
                    ac:9b:8b:7f:49:6e:68:01:91:25:eb:2a:bd:54:87:
                    3d:8e:b8:49:c7:9e:94:4e:5b:db:f8:80:b7:37:ef:
                    8e:be:58:ef:5b:59:bd:fa:12:d3:fb:59:76:05:7c:
                    21:20:dc:28:fa:f8:a7:d1:2e:2d:dc:15:d5:e6:b4:
                    eb:fb:6a:ca:35:12:7f:fc:f4:b3:b0:1a:bd:41:6e:
                    0e:6c:af:a3:7d:2d:56:b8:be:38:b1:f7:6e:62:0f:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:94:47:8B:90:0B:83:18:D3:1C:36:F3:8A:F3:A3:0E:90:D4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/c1c835cc-2456-303f-bdb1-b33a1c8480ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99/7bbee9b1-1b33-4951-a617-ecb80d9bad99.crl

            X509v3 Authority Key Identifier:
                keyid:29:22:F7:E2:F2:74:93:2B:5F:CC:A4:03:B3:FC:52:65:E7:86:C2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7bbee9b1-1b33-4951-a617-ecb80d9bad99.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:aa:c3:79:8a:1b:3f:a8:ba:68:a9:13:ef:12:c4:fe:28:e8:
         45:ca:56:10:03:8c:44:bd:4d:70:38:c1:9e:dd:a5:f2:b2:ad:
         64:97:fe:9c:a9:48:cb:cf:9b:be:5e:4c:c9:11:39:d0:32:0d:
         0d:87:51:0a:1a:4a:06:d2:7c:9e:72:04:1f:c6:80:dd:df:67:
         79:20:c6:40:3b:2e:63:57:1f:b3:ce:ca:9b:00:34:5c:1f:6a:
         3f:ed:2c:d5:3f:13:7c:86:2a:9f:b6:10:8e:18:ec:c4:db:2d:
         93:cc:18:0b:04:ca:31:35:1e:db:4b:36:c7:07:1c:60:84:48:
         ea:e5:a0:d9:f7:a5:76:8e:b8:01:c7:a9:64:ac:05:08:04:4f:
         d1:33:00:cb:0a:df:d9:27:f6:09:42:df:9e:72:a0:d6:47:06:
         5e:cd:e4:2b:4a:89:0f:6a:cc:1c:e7:00:31:85:4b:cd:cf:0f:
         bc:03:75:3d:62:08:1d:e0:cb:9b:db:ad:0d:dc:f0:86:1a:48:
         6f:a8:e5:9c:d5:6e:46:1c:b8:10:3e:f0:05:7b:f1:cb:b1:9f:
         5a:07:27:ed:1b:79:68:db:26:c1:f5:f3:a5:c2:c9:d9:1c:77:
         50:31:e6:44:5a:07:34:c8:49:e0:5e:05:f9:79:ea:61:48:bf:
         ee:6a:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:01 2025 by rpki-client