Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f8d9eddf-26f3-32cc-bbdd-539fc22fa679.roa
File:                     f8d9eddf-26f3-32cc-bbdd-539fc22fa679.roa (raw, json)
Hash identifier:          EgxmmgrZK/ZWkoDz7j9wGcDBwkZ404pAwLMhhfVE6Rw=
Subject key identifier:   14:53:0F:C1:B5:27:9F:79:BD:39:E2:F8:4C:E6:EF:CD:4D:DC:1E:59
Certificate issuer:       /CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
Certificate serial:       010D0C9F432858487A20855623CD174463875C80
Authority key identifier: A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f8d9eddf-26f3-32cc-bbdd-539fc22fa679.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     39937
IP address blocks:        23.160.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:85:56:23:cd:17:44:63:87:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d8715f-6d4a-4b9f-93ff-8eb251588f61
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=e9a4497c-6e5a-41ca-9f60-0519eb11c43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:70:20:53:55:f8:08:47:88:e0:38:3d:a1:54:
                    98:10:7a:10:34:58:b2:50:49:3b:37:d0:43:84:a9:
                    7e:72:8a:25:d2:93:4c:38:b1:18:6f:c6:1f:38:de:
                    92:ab:cc:2e:68:6d:7b:4d:1c:75:33:65:e1:b2:a0:
                    26:1a:be:b4:42:9d:db:a4:5a:0b:cc:57:be:b4:4c:
                    5d:86:3b:fc:d9:72:bc:c2:28:db:35:87:7b:56:98:
                    d4:4a:30:ce:af:28:49:b3:f9:9d:17:90:6d:61:72:
                    82:c2:2b:1b:bf:95:5c:15:7e:a8:3c:4f:2f:5e:c9:
                    a6:11:9f:9a:93:bd:3d:44:35:54:dc:a6:48:c5:b6:
                    ff:ef:3a:8f:01:9d:2b:5d:0b:38:ed:d7:c3:c9:fc:
                    45:cc:aa:a2:3f:90:a4:1e:d7:85:cc:1e:5b:2c:17:
                    ae:14:af:d6:70:37:72:74:37:97:f2:c7:e8:eb:49:
                    39:de:ef:a1:e8:8a:93:c2:58:a7:79:9a:13:e9:bb:
                    af:98:02:e6:5e:a5:5d:10:a2:c6:7e:20:ed:6e:dd:
                    90:20:d4:05:84:b0:24:a2:1c:45:02:a2:06:d8:b0:
                    79:f2:aa:3e:27:d9:77:b8:41:a0:85:52:00:b9:fd:
                    f2:58:70:4e:68:d0:91:3b:83:a5:c8:95:36:4f:06:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:53:0F:C1:B5:27:9F:79:BD:39:E2:F8:4C:E6:EF:CD:4D:DC:1E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/f8d9eddf-26f3-32cc-bbdd-539fc22fa679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.crl

            X509v3 Authority Key Identifier:
                keyid:A6:25:D6:7E:3C:AB:C9:7A:58:9A:30:A3:BB:F5:E1:BC:A6:5B:0F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a9d8715f-6d4a-4b9f-93ff-8eb251588f61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:59:dc:78:e3:bf:bc:a0:25:e0:c9:15:08:f5:a7:69:01:
         9d:38:30:e7:33:9f:21:d0:f7:24:6c:41:a1:53:46:5a:27:bd:
         d6:6e:12:61:d8:d5:cc:ad:63:f7:38:93:4c:ba:d0:47:04:09:
         b2:87:9f:87:e3:46:ab:44:8e:2e:17:ae:6c:72:a6:7a:02:ca:
         5a:76:d6:cd:82:ad:95:f5:a3:c2:26:8f:9e:02:35:92:8e:68:
         1a:bd:c7:84:73:22:f6:ca:b9:8d:0a:77:c7:ca:7f:02:31:26:
         6f:31:0a:7f:b0:81:ef:c1:0c:d9:96:1b:9c:53:28:3a:ad:7a:
         3d:75:04:03:d3:10:14:f4:50:92:c8:f2:1b:c6:c1:52:2a:2d:
         e2:c1:7c:10:2f:7e:61:88:da:77:44:30:97:f0:a1:21:fe:66:
         5e:a5:69:aa:f5:95:8a:14:52:07:90:9c:35:62:27:10:75:3d:
         de:18:2f:72:a6:3b:93:a3:f6:af:72:a1:1f:e6:66:db:29:a6:
         c7:e1:c9:18:0a:96:40:0c:39:cf:d5:08:e6:2f:f5:3d:c6:7f:
         6c:24:cc:92:cc:0c:b3:7c:48:5d:19:b6:c0:f8:ef:7a:c1:f1:
         da:dc:90:a5:ee:24:c1:c8:ab:a0:fd:4b:ce:88:ee:ed:75:13:
         d7:ad:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:47:49 2025 by rpki-client