Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa
File:                     936a75ba-7eb9-3709-9d13-c404379a1254.roa (raw, json)
Hash identifier:          2uhPtrFJqsrfCU2BbClFfujho59bEtVKMkXSEgXBFyQ=
Subject key identifier:   0F:D2:05:70:B5:EC:82:3E:F6:00:15:3A:90:3D:82:0B:C5:F6:23:C3
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584851A577C5E5C6D6BA35281840
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        23.179.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:77:c5:e5:c6:d6:ba:35:28:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=a9c3593a-178d-4583-840a-6259dfbcfb8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:59:94:d3:de:8f:4b:30:dd:b7:31:ab:b8:
                    a7:e3:1b:9c:80:e4:74:a3:73:92:e7:ec:9c:64:d2:
                    68:3e:58:93:fe:56:55:d5:38:5c:65:b0:fa:20:9f:
                    74:68:16:2d:06:33:79:86:3b:75:24:de:2a:db:bb:
                    b6:b5:f8:39:73:3a:55:05:31:81:4b:9b:cb:3b:5d:
                    65:40:85:34:e5:6c:7f:06:75:2a:91:e8:f9:e8:23:
                    aa:65:5f:e1:dd:3d:7c:d1:b7:41:cf:7f:f6:e2:de:
                    1f:0b:cb:70:24:2f:8e:1a:12:30:f8:1c:27:3c:6a:
                    f0:42:23:3b:5f:c1:38:2e:70:4f:10:2a:c5:50:11:
                    e1:ea:3f:33:7b:bc:6f:1d:72:dd:65:9a:08:7b:c5:
                    5b:29:43:3f:87:2d:45:31:ec:5b:28:63:cf:e3:a1:
                    73:9b:b9:3a:2d:39:f4:45:a0:cd:ac:0e:18:fa:43:
                    f7:12:81:ab:ae:55:82:49:b7:b1:cc:a9:1b:c9:be:
                    f7:09:21:6f:d6:57:e9:30:40:92:9a:3d:8a:dc:74:
                    d0:c9:af:8b:ae:a1:9c:8f:eb:ab:21:e7:a0:1f:c8:
                    97:3e:d2:eb:1f:8a:dc:21:d4:b7:9f:26:03:24:2a:
                    b6:aa:df:c1:00:18:a5:88:4d:c2:8b:84:49:34:aa:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:05:70:B5:EC:82:3E:F6:00:15:3A:90:3D:82:0B:C5:F6:23:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:89:cb:ca:10:18:89:67:3d:6a:22:0d:23:bc:0f:b1:89:a6:
         69:ec:df:6f:03:9a:85:a3:92:e2:14:f7:4a:77:f6:b3:65:e7:
         89:d4:08:08:6b:ff:6a:18:1c:72:eb:a6:9a:47:9b:18:c9:9f:
         93:41:d6:02:86:cf:50:45:17:f7:e5:f1:2a:9e:64:cb:65:78:
         a2:e8:ed:1e:21:07:c9:81:93:84:67:cb:ba:fb:d2:db:83:bd:
         be:63:55:81:dd:4c:2c:26:b0:7d:85:35:69:c0:68:b2:9a:ed:
         83:3a:33:44:96:df:44:d2:90:97:83:6d:74:61:6c:28:b9:74:
         40:23:ba:91:27:84:66:a4:29:1b:81:17:15:c2:3c:4f:f5:bb:
         44:9b:2e:b6:fe:69:1d:e3:c7:2d:9c:cb:1a:68:05:38:c6:2c:
         73:dd:dc:22:43:f4:fc:1b:8b:88:17:e5:4e:c2:c4:39:b1:bc:
         f5:12:f4:ba:6c:b7:25:4c:1e:a7:ce:a4:37:b0:88:3d:0e:fd:
         8e:39:68:85:a8:c3:69:75:51:48:37:1c:1f:15:b1:d7:e4:54:
         0d:d3:d0:a5:b6:d2:79:50:de:e0:18:7e:16:25:b2:69:d3:97:
         52:3e:03:ef:17:fe:f0:e1:46:b1:1b:42:34:de:f1:c8:5b:36:
         98:43:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:26 2025 by rpki-client