Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/830560b8-5e5d-3b7c-b654-d79c1d9359a8.roa
File:                     830560b8-5e5d-3b7c-b654-d79c1d9359a8.roa (raw, json)
Hash identifier:          OEz6bQaE8SO/ixw7wr4008TdXCUYdUunuRzd5lsuPKc=
Subject key identifier:   B4:60:84:A2:8E:63:E4:8B:ED:E5:A9:20:BB:5B:E4:D3:2D:58:95:BE
Certificate issuer:       /CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
Certificate serial:       010D0C9F4328584807AA71A1B11F508A4F884600
Authority key identifier: 16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/830560b8-5e5d-3b7c-b654-d79c1d9359a8.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     133073
IP address blocks:        23.154.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:71:a1:b1:1f:50:8a:4f:88:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=8fbb384c-0185-4510-a7f7-2b57ca888cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:97:34:96:73:95:3d:6e:cd:4d:cc:42:0e:
                    29:cd:dd:f9:d9:e9:6b:fd:01:0e:99:4a:1f:1c:f8:
                    ce:fb:b7:e4:52:9d:93:1a:9e:1c:74:13:4f:49:76:
                    2c:82:ac:79:23:84:5e:00:53:37:a3:28:76:ba:d0:
                    50:f3:ef:09:ff:8a:a7:77:5c:ed:c9:3c:a5:57:d8:
                    12:2b:c7:ea:f5:83:2b:25:5d:3e:32:34:84:f5:11:
                    c7:a9:4b:26:94:e7:a5:54:dc:cb:e7:0c:1b:82:38:
                    68:86:0c:8f:4b:58:45:63:5d:8b:35:9e:fa:7c:4f:
                    fe:64:8c:73:d3:72:6a:89:cb:32:43:0e:f1:1d:66:
                    cb:b2:d0:98:0c:a4:67:03:73:24:16:14:34:d7:18:
                    df:7c:0c:af:1a:0e:0e:a0:cc:74:5e:5c:5b:79:61:
                    f8:3a:57:0e:14:50:07:80:6b:f9:84:b1:06:15:ba:
                    e2:58:b5:9a:3e:4e:f7:25:60:a1:2d:d2:56:96:dd:
                    d6:31:41:ed:d8:67:b8:88:fa:7e:1f:3c:a4:48:9b:
                    5a:9f:49:3c:71:da:a5:fe:74:b2:60:11:78:bf:2e:
                    47:5b:29:53:fb:8a:68:a1:fd:c5:9b:19:73:92:3d:
                    75:d2:d9:7d:80:cc:ed:98:b2:be:69:eb:2f:d6:a6:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:60:84:A2:8E:63:E4:8B:ED:E5:A9:20:BB:5B:E4:D3:2D:58:95:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/830560b8-5e5d-3b7c-b654-d79c1d9359a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl

            X509v3 Authority Key Identifier:
                keyid:16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:05:d5:9c:a8:8a:ea:8f:27:ed:70:8e:36:2f:93:91:e4:db:
         47:1d:f9:11:bb:6e:9d:c0:aa:34:7c:db:c2:dc:af:fe:ee:b4:
         36:96:ac:c5:93:0a:f6:fa:6d:5c:30:c9:dd:72:52:62:57:a4:
         cb:8d:51:d8:a2:b9:d2:e4:5d:ed:e5:76:f1:e7:65:e0:c2:c1:
         9f:01:2c:ca:fd:db:fc:d0:86:5f:33:9a:9b:2a:71:cc:98:f2:
         86:51:b3:43:46:f1:3d:20:97:04:21:c0:aa:77:57:80:1b:ba:
         7e:1d:5e:6d:12:aa:60:ac:89:84:cd:9c:27:db:a7:22:66:34:
         ab:ee:1e:9a:c1:9e:38:0d:f5:56:fe:21:60:bf:10:4f:00:81:
         82:9d:24:86:7a:d9:33:16:da:2d:d8:03:9a:37:2a:7b:17:1d:
         eb:a9:97:5a:3b:51:16:2e:3e:fd:c0:2a:a7:ed:86:c4:6d:d3:
         15:de:de:37:2e:59:bc:d7:13:5b:f4:5b:7c:05:48:b5:f6:26:
         eb:61:44:1f:32:c1:c3:d6:44:3e:1c:7c:a1:11:d6:48:34:c5:
         27:d0:31:cf:87:ec:1e:6c:83:ed:03:78:ad:80:da:6a:8e:98:
         68:03:52:3e:ed:3d:66:06:40:0d:a9:e7:7f:71:33:db:fd:10:
         3a:0a:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:12:55 2025 by rpki-client