Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa
File:                     d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa (raw, json)
Hash identifier:          nFr/OoH4zMqy2UO/YJoUtNi4K399hQYLbfK/FE67T58=
Subject key identifier:   65:23:F1:A0:2E:67:4B:88:C2:2E:7B:29:CF:09:EA:6A:94:AC:E4:D3
Certificate issuer:       /CN=6056a542-dd4d-44c1-82dd-402b8d57ec5a
Certificate serial:       010D0C9F4328584807AA67CEE77D47CA580F7A00
Authority key identifier: AC:61:81:2C:1B:9C:DE:5E:05:E8:F2:23:B5:15:A5:C2:0D:C0:4E:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        23.188.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:67:ce:e7:7d:47:ca:58:0f:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6056a542-dd4d-44c1-82dd-402b8d57ec5a
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=f1d78e96-0266-4018-ad4e-bf607eb77249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:4b:37:94:65:54:68:27:f3:c7:a1:c8:8d:
                    21:9e:0b:37:a2:67:6c:38:81:65:c4:00:bd:3e:68:
                    21:e2:2b:eb:11:2c:2e:6c:64:1b:19:f9:f9:57:6f:
                    2d:16:bc:83:8e:50:31:19:36:73:d0:b2:58:76:5c:
                    ae:6a:88:f7:24:8f:f2:f7:d2:0f:41:20:57:a8:47:
                    53:1f:28:37:95:7b:e8:6f:32:30:84:44:6b:e0:f2:
                    a4:dd:31:c1:e4:1d:f8:43:29:e5:f1:f7:f0:a1:70:
                    41:d0:f9:22:b3:0f:32:2e:5b:5a:ab:5f:46:55:07:
                    5a:c2:07:8e:2f:06:b1:80:9d:c6:6f:6c:f3:9e:bc:
                    df:d9:16:90:f1:6b:2b:db:6f:30:91:a3:b5:f0:ba:
                    36:08:92:7c:01:6b:c2:d5:bb:ac:25:ea:b2:58:75:
                    e0:8d:97:db:1e:bf:d8:85:30:61:19:2a:71:66:7d:
                    90:88:f0:08:7f:d3:8f:68:a3:88:41:c7:90:4f:cd:
                    59:34:b1:34:6c:ab:9e:f2:8a:6f:82:2d:0d:1e:11:
                    a0:21:5a:d5:d4:cb:51:d2:7e:fc:83:7f:26:eb:ea:
                    c0:e1:40:88:c8:eb:ca:e9:02:8f:84:be:1d:dc:65:
                    64:48:5f:e2:89:e0:b0:4d:40:71:b5:a5:79:3d:cb:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:23:F1:A0:2E:67:4B:88:C2:2E:7B:29:CF:09:EA:6A:94:AC:E4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/d581413d-7c5e-3ce0-b58b-8c1f4cc766ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a/6056a542-dd4d-44c1-82dd-402b8d57ec5a.crl

            X509v3 Authority Key Identifier:
                keyid:AC:61:81:2C:1B:9C:DE:5E:05:E8:F2:23:B5:15:A5:C2:0D:C0:4E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6056a542-dd4d-44c1-82dd-402b8d57ec5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:01:fb:cb:46:71:9d:74:3e:a7:d7:6a:3c:da:ab:7b:4c:31:
         d6:7a:7c:a4:7d:0b:3e:45:e3:a0:c1:6f:f1:6f:57:c7:2c:9f:
         49:74:54:5b:75:fd:9c:5f:54:4c:0e:1e:8d:87:ee:9b:39:85:
         d2:e4:fd:31:3a:22:73:ee:1d:7c:46:29:98:ed:b6:24:94:42:
         86:86:b2:a5:6d:51:4c:f2:59:36:a2:65:20:5e:5d:21:aa:f4:
         d4:1e:ad:a5:b9:df:33:23:50:cd:85:a9:8c:ba:f7:41:fc:50:
         a0:46:fd:d7:6e:14:74:2b:4f:cb:2d:ca:e4:c7:a0:82:eb:85:
         74:3b:36:9d:67:4b:a4:3d:a7:15:8d:85:57:92:33:62:86:05:
         93:31:cd:88:b3:10:eb:79:55:63:fa:0e:fd:e3:91:2a:66:8a:
         16:b9:f3:c7:cf:c5:8e:64:1f:9f:73:6a:e7:65:45:df:c1:9b:
         43:13:78:5b:77:96:ef:41:7b:e6:04:12:28:88:b3:38:28:3d:
         47:8f:bc:82:8f:33:bb:8d:5b:74:06:71:83:de:4d:17:4a:3d:
         3a:8b:38:2d:12:6c:bc:9e:58:05:3b:e8:fa:f7:ef:b2:49:70:
         e9:dc:b5:b9:bb:7d:ec:a8:49:e1:88:3f:88:da:12:83:24:c1:
         3c:da:2a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:19:12 2025 by rpki-client