Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa
File:                     99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (raw, json)
Hash identifier:          8oP2bS/nQ2Pad7cmWbsJ448jz9BvrTP+Htd1cmnigTg=
Subject key identifier:   71:0D:89:5D:3F:14:1E:3A:64:06:4A:99:C2:95:8D:3D:69:D8:B7:76
Certificate issuer:       /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial:       010D0C9F4328584835BA99D537273E25323A8B80
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     400967
IP address blocks:        23.175.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:99:d5:37:27:3e:25:32:3a:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=586e5030-d53e-49e8-bd35-04399838cacb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:ee:2b:c2:cd:2b:fe:40:58:50:1d:75:fe:
                    e8:2f:b0:93:db:6c:a7:00:8d:4b:3f:25:c6:de:f2:
                    97:cd:55:be:ca:13:e4:fa:e4:ed:ce:8a:7f:da:5b:
                    ca:01:28:b2:0a:99:93:9c:fe:ad:71:93:f4:68:f0:
                    34:ca:3f:3e:f6:58:1b:4a:7c:5a:5e:94:86:4e:8b:
                    e1:4e:10:1d:64:74:38:39:6b:e6:0c:9f:eb:34:72:
                    91:bd:1b:95:55:df:15:95:9b:28:c7:5b:0e:41:9a:
                    e0:42:b2:41:36:db:af:2b:63:71:c5:de:94:d2:15:
                    10:d4:08:f8:03:cc:61:84:c0:41:c7:5b:32:f3:0e:
                    38:bb:d2:ea:97:21:80:06:3f:0c:b7:41:9f:8a:a2:
                    e1:8b:da:db:3a:7c:63:2e:de:34:80:0e:61:40:60:
                    ae:39:ce:aa:2a:88:09:e8:f7:02:bd:86:62:df:ed:
                    c0:ba:9c:fc:63:f1:d8:7a:4a:22:f6:54:bb:f6:f7:
                    44:86:ad:5c:f6:69:2d:30:f0:75:f3:fe:ba:ab:b8:
                    db:1e:91:33:8e:de:e5:08:5b:82:34:e8:ce:69:ca:
                    b4:0d:48:cc:a0:67:28:4e:25:24:be:bc:34:9b:df:
                    e2:2e:3f:d1:24:f0:4b:85:44:33:33:27:6e:23:fa:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0D:89:5D:3F:14:1E:3A:64:06:4A:99:C2:95:8D:3D:69:D8:B7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl

            X509v3 Authority Key Identifier:
                keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:ee:ea:55:f9:c6:e7:85:77:0d:07:06:1d:84:bf:b2:a4:
         b4:c9:e2:bb:f8:cb:fc:eb:6e:d5:18:cd:ce:8a:cc:74:21:6b:
         35:9b:6d:a5:8b:92:51:8b:3e:95:8c:96:76:ac:af:eb:27:4d:
         5e:a3:0c:87:e6:0f:c2:27:f7:18:51:8b:ba:61:7c:dd:ce:24:
         37:0c:0e:0a:75:66:75:5e:42:ce:0b:f8:64:53:a3:9e:6f:f6:
         4e:e7:91:be:7b:87:c5:a9:9c:f7:d5:c0:f8:77:b7:14:1b:26:
         22:b4:90:51:84:f5:8e:37:a0:41:31:b5:fb:5c:de:c6:55:53:
         9c:06:ef:14:26:31:96:05:ee:40:22:0b:df:f5:d6:31:23:0a:
         02:11:16:93:78:d1:82:fc:6d:46:b8:5e:e1:a0:1b:c1:d9:a1:
         ec:e6:16:6c:dc:68:ce:69:b0:c2:f7:ce:ee:60:58:69:63:1d:
         a5:aa:6b:dd:35:e2:0e:fa:a2:8b:0d:b3:05:9e:53:51:5a:18:
         09:ec:4a:49:48:73:5a:ef:09:de:c7:27:62:2d:d4:56:3f:5a:
         77:98:48:0f:3b:3a:64:32:23:89:db:6d:30:7a:a5:1a:10:dc:
         24:b5:7c:07:82:b8:b6:b5:43:d3:a3:b1:6b:5c:cf:8a:f3:5b:
         4a:57:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:35 2025 by rpki-client