Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa
File:                     506410f2-e4be-3935-b59a-be62788b95ae.roa (raw, json)
Hash identifier:          bFLkNebxVNDpzUBw7Nq+tMEHjgp2f2H7DCyfOVig9wk=
Subject key identifier:   33:21:4D:65:24:4C:4A:58:0A:D8:13:C2:7B:2B:71:65:EF:97:68:37
Certificate issuer:       /CN=206290f3-53e1-4d17-8678-29dace17c006
Certificate serial:       010D0C9F4328584851A5812F0011C4A0BE9CC680
Authority key identifier: B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     64289
IP address blocks:        23.161.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:81:2f:00:11:c4:a0:be:9c:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206290f3-53e1-4d17-8678-29dace17c006
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=44b55fc7-7eb1-4ff2-b4b0-6b0e4240d9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0b:f0:ed:7b:c7:9f:f9:08:8d:dd:b6:9d:f9:
                    ad:34:25:46:4c:10:ee:2f:85:95:9a:f7:b4:1b:a5:
                    86:95:fa:e9:bc:67:c9:35:04:59:41:7b:08:be:89:
                    12:2d:0e:02:00:5a:d2:6a:80:41:6c:f2:c1:17:02:
                    53:bf:1a:53:4a:a1:79:02:a4:93:f4:62:8a:d6:2e:
                    49:35:e2:16:d4:34:13:e1:61:27:63:ee:e0:60:06:
                    49:f6:d4:ba:bf:ea:7e:09:ff:19:f1:5a:6c:f1:b9:
                    5a:7a:14:96:4c:7c:16:f5:95:ce:25:6a:14:ee:a7:
                    c1:b0:54:b4:cf:a3:1d:37:be:01:87:37:5b:64:ed:
                    62:2e:37:4e:ad:cf:98:a0:cd:ff:be:55:fd:25:a3:
                    4a:69:aa:14:54:d9:47:44:f4:59:f4:11:1c:16:c5:
                    8b:ff:9b:0c:3c:4f:3d:d7:13:b2:9b:9a:5a:8d:2d:
                    d8:d2:71:67:50:8c:b7:6a:1a:24:56:b8:56:bb:9b:
                    67:0b:5d:76:0f:d6:73:c0:11:88:bb:90:5e:27:b8:
                    dc:8c:9b:70:3e:10:11:81:39:28:56:4b:81:e6:d8:
                    fc:7c:ad:b7:22:7b:da:d6:9d:d1:90:51:3c:fd:b5:
                    06:11:fe:b0:5c:65:26:d1:42:ac:cb:97:a7:9a:63:
                    a9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:21:4D:65:24:4C:4A:58:0A:D8:13:C2:7B:2B:71:65:EF:97:68:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/506410f2-e4be-3935-b59a-be62788b95ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006/206290f3-53e1-4d17-8678-29dace17c006.crl

            X509v3 Authority Key Identifier:
                keyid:B0:75:75:D3:B9:68:A2:49:EF:B9:77:E1:92:46:A5:46:97:EC:1B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/206290f3-53e1-4d17-8678-29dace17c006.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:f1:c5:06:2d:44:45:42:ad:a0:b6:21:a9:64:21:0a:9e:
         b9:fc:bf:4b:43:77:4c:62:a6:ae:c3:60:0e:66:d8:ca:8c:6b:
         68:2c:1c:c1:ce:ca:62:ae:5a:27:f2:72:aa:18:6b:03:96:39:
         8b:ec:0f:cc:57:75:a3:3b:99:78:e2:dc:f1:24:b5:ec:39:27:
         1a:ea:3f:25:bb:e1:0c:a0:83:8e:a2:85:f5:ec:17:e7:1d:46:
         2c:7f:61:66:1a:4c:0a:cb:99:68:ae:3a:99:88:1f:40:4d:1f:
         53:4c:1b:94:f1:f9:cf:4f:65:d5:12:32:25:60:ca:67:4d:fe:
         18:a3:43:6a:0a:2b:d2:5a:00:99:88:e2:85:1f:08:87:53:6b:
         1d:f7:a5:86:e4:f7:a9:0b:59:86:8d:db:ab:c9:55:e0:38:07:
         10:c5:2b:18:aa:fc:2c:0a:81:4b:78:b3:35:82:68:95:59:53:
         95:6d:e0:b3:0a:87:87:a3:c8:9f:9c:41:fb:1b:95:2f:3a:77:
         01:81:aa:ae:b7:23:f6:cf:e9:7d:7f:9f:10:af:dc:38:9d:27:
         b7:e7:be:7b:94:fc:3d:5a:e3:c9:e0:3a:12:a2:32:b3:61:59:
         a9:0e:6c:a0:82:82:d9:3c:7c:2c:c9:59:27:2c:1b:5d:04:a3:
         cd:3d:a4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:08 2025 by rpki-client