Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
File:                     9438e3b6-c8b0-3562-828e-38e2e3227244.roa (raw, json)
Hash identifier:          OAO4sH6Cc7Rce61HhxnJF86BIZ9nK49R8Nwv8i6IVxU=
Subject key identifier:   7C:E7:8E:C4:95:4D:7C:87:22:DC:AB:80:46:1E:08:B0:53:72:E8:9A
Certificate issuer:       /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
Certificate serial:       010D0C9F4328584839EACAAD689EA2EA96C96D00
Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     398698
IP address blocks:        23.165.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:ca:ad:68:9e:a2:ea:96:c9:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=2cb269ba-e86f-4b76-a340-70293f82873d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:16:7b:a9:6c:13:15:ac:89:e7:e5:ae:60:
                    ce:0d:b3:ca:ed:60:84:3f:25:68:74:c0:d1:e7:13:
                    2a:14:32:97:bc:70:c5:10:65:38:fd:b6:d5:a0:4c:
                    d3:0b:16:9e:d7:7f:5c:b3:dd:a3:0a:11:65:31:c6:
                    10:4f:6d:5a:b9:6f:2f:ee:21:0a:ca:79:a8:3d:80:
                    7f:19:14:8e:61:e6:7f:4b:ad:7f:00:13:19:ff:f8:
                    fa:23:7e:f0:0b:18:38:d7:81:c6:00:1e:09:58:59:
                    5c:f5:37:50:b4:2b:43:b5:ac:e2:93:62:76:09:64:
                    69:d2:41:8c:6d:6c:03:c3:ce:6d:aa:f8:0c:32:ce:
                    8c:8b:6e:a3:cc:0e:c2:72:29:da:ff:26:1d:35:71:
                    99:55:f9:21:6c:8d:0b:8e:c7:85:c3:91:3c:72:1d:
                    bb:6d:cd:7d:4c:bd:69:57:4a:40:fd:7e:1e:f6:1c:
                    3e:eb:b9:79:52:8e:15:77:52:32:74:80:56:61:19:
                    eb:3f:8c:e0:c0:9b:b7:c1:af:2b:30:f1:ec:2c:91:
                    5f:81:d3:74:2c:dd:3b:bb:2f:df:e9:45:02:e3:b3:
                    78:73:c2:85:b5:f4:29:de:31:93:74:aa:e6:b5:b7:
                    0c:48:34:00:c4:fd:03:27:58:31:24:e0:1a:a3:47:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:8E:C4:95:4D:7C:87:22:DC:AB:80:46:1E:08:B0:53:72:E8:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/9438e3b6-c8b0-3562-828e-38e2e3227244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:02:56:07:cb:01:85:82:4c:f6:1d:cf:e6:a7:bf:ec:e2:da:
         23:8a:28:07:b1:a1:b6:e1:cc:ac:39:f7:38:93:ff:c1:4c:96:
         a3:02:3f:f7:8f:89:ec:89:e9:60:34:1f:d7:8d:70:90:f1:38:
         58:ea:56:c3:3f:dd:a3:65:8e:f8:27:c8:66:8a:e1:f0:b9:e5:
         41:eb:2c:42:c1:ac:76:3f:70:98:f2:ef:8c:49:4b:a3:8d:0f:
         71:6f:e7:76:80:01:9b:77:cd:f6:31:85:44:23:a0:84:e2:33:
         5a:96:a2:cc:49:33:54:0e:58:a3:6b:a6:4c:73:89:b7:4b:5f:
         b4:83:50:56:e2:79:99:88:ce:41:87:4b:f2:09:6c:96:27:ba:
         45:9c:e8:a4:c1:5e:19:2f:c1:5f:15:db:01:fc:64:ef:57:bb:
         9f:7a:78:85:27:bf:0d:49:f7:11:06:23:07:6d:2e:5a:72:1f:
         30:e1:c1:fc:c0:ae:a1:ee:45:48:47:bb:0c:7e:3d:c9:95:88:
         46:3d:ad:85:50:0d:32:85:39:ee:0f:c9:c7:c7:a4:66:19:30:
         10:9d:a7:fc:1d:56:c9:f4:22:bf:0d:2e:b4:8b:86:89:29:e2:
         01:59:7c:8e:be:4f:66:e3:dd:84:73:a7:8a:c7:38:3d:1b:26:
         13:64:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:55:42 2025 by rpki-client