Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa
File:                     410e5526-7b08-3fee-9798-c1cc44afb72b.roa (raw, json)
Hash identifier:          DSSlnWYz50IQdtP4IhdGBh7hVcMIEzftfCunsIv4sEo=
Subject key identifier:   A9:F5:8C:1A:1A:40:83:D6:7E:C9:14:19:04:54:4B:B1:CF:2A:9D:DA
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F432858482A8FE1CA42BD3057FE482180
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     8796
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:e1:ca:42:bd:30:57:fe:48:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=e39eb471-6361-48fc-ae6e-7e27da2b83d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0d:59:34:e4:e6:7a:3d:db:bd:9f:27:92:af:
                    51:1f:fe:32:f1:8e:af:5d:cc:d9:53:33:38:d8:2c:
                    b3:e8:c0:54:7b:73:4b:1c:53:10:74:2e:f7:54:f8:
                    ec:20:5e:cd:a5:a4:04:de:e1:b2:c8:55:f2:42:dd:
                    f3:e5:e4:fb:6a:d2:ad:ae:8b:fd:0a:6f:7f:d8:b0:
                    bd:4a:00:b8:3c:b3:d3:84:77:b4:2f:7f:89:9f:cb:
                    1c:ba:20:40:39:61:b8:8e:48:3b:24:1b:a6:c1:ca:
                    99:c5:ea:4c:1c:97:fb:ac:e2:25:44:2b:b0:47:02:
                    52:c8:b7:89:ef:a9:89:db:ba:d8:56:02:7e:aa:76:
                    4b:53:5f:ce:dc:43:37:bc:9b:78:2d:bf:b9:19:34:
                    27:00:ae:0b:6c:49:72:19:c8:61:68:8c:e9:b4:de:
                    ba:2d:ac:dd:eb:e7:09:f4:cf:6c:5c:e7:3c:34:0f:
                    9a:f5:2e:9d:01:64:bf:fd:8a:14:78:d9:73:cb:c6:
                    78:2f:30:5c:8e:6e:a4:49:2a:53:3b:bb:a7:3e:ce:
                    7c:3d:7d:9f:37:9d:62:62:f9:56:c3:c6:04:cc:87:
                    c7:00:9c:6e:d8:50:43:79:be:a5:b0:6a:56:a1:b5:
                    bd:51:b7:d9:e9:33:f3:31:5e:06:ec:61:d8:ed:19:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:8C:1A:1A:40:83:D6:7E:C9:14:19:04:54:4B:B1:CF:2A:9D:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/410e5526-7b08-3fee-9798-c1cc44afb72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:e6:77:86:3b:30:ba:c5:10:62:e4:63:6d:29:06:1d:76:
         9b:8b:ed:e8:10:77:d6:b3:1a:ee:88:51:3e:69:e6:f4:46:4b:
         be:a9:f9:2d:ef:ae:ea:5e:78:7e:50:68:54:4e:54:37:78:23:
         62:18:11:cf:4f:49:b4:8c:bb:a5:1b:70:90:79:1a:67:aa:6d:
         77:64:c5:fd:38:4f:6e:f5:4b:fc:17:40:c3:fb:c5:a8:31:f7:
         9c:68:f1:6b:32:e3:83:d8:b4:cc:fe:02:1d:4b:1d:89:57:6d:
         36:ac:8d:9c:67:f5:40:8e:a9:7d:2b:a4:cb:06:bd:8b:ca:96:
         ff:45:f3:19:e4:14:87:32:c3:70:06:1a:13:6f:00:ac:62:eb:
         34:01:9d:43:ff:cd:a6:20:e8:7e:e4:38:57:ac:f6:00:bb:5b:
         d2:57:57:c8:e9:e7:9b:de:97:b8:72:e7:9c:d5:96:0b:f7:cd:
         3d:d5:75:08:55:1f:03:bb:5e:01:fa:cf:05:26:32:4b:94:ef:
         a0:a8:b4:3a:2c:a1:e1:b8:33:e5:4e:96:0e:a7:ff:6f:fa:10:
         cc:10:0f:38:19:52:08:e5:1e:e5:40:b7:c2:58:3b:a3:39:3f:
         f6:1d:c5:8d:ad:b4:d4:4c:ec:c0:66:7e:dc:7a:e3:a0:e0:83:
         89:b8:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:38:27 2025 by rpki-client