Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610/6b6c550e-9826-3b80-ba0b-0df4b1d2c60d.roa
File:                     6b6c550e-9826-3b80-ba0b-0df4b1d2c60d.roa (raw, json)
Hash identifier:          Dmy6Un4Jf9AbYExUpM4jMO8sHniU3ZQxUt7wv9fyBjM=
Subject key identifier:   B1:FB:0C:78:F3:97:07:F7:81:7A:74:48:96:EB:01:C6:8A:37:5A:70
Certificate issuer:       /CN=807915d5-97ab-403f-87db-4d22631ba610
Certificate serial:       010D0C9F4328584832F01DEA47A20075AEB4D480
Authority key identifier: F1:F9:85:88:F7:90:D0:14:5E:CA:F4:D7:09:92:5E:30:A8:E6:30:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610/6b6c550e-9826-3b80-ba0b-0df4b1d2c60d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     400517
IP address blocks:        23.133.184.0/24 maxlen: 24
                          2602:fba9::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1d:ea:47:a2:00:75:ae:b4:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807915d5-97ab-403f-87db-4d22631ba610
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=88bc5dd5-6112-419a-9d47-76dbea9a8841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:50:dc:ed:ad:7a:50:91:b6:df:d3:28:04:
                    98:9c:c6:a4:ef:a1:92:1e:00:a0:14:eb:b1:01:06:
                    2e:43:65:59:99:cf:14:d5:6e:55:54:b1:d5:88:f6:
                    6f:b6:3c:b9:91:7a:dd:d3:b3:f1:ed:47:89:3c:96:
                    fd:32:07:c3:d1:a5:2f:fe:92:fe:55:1e:11:dd:e7:
                    96:0b:98:5c:cc:10:b0:54:c1:7c:3c:50:a9:ef:d6:
                    97:0f:f0:68:e5:cd:3e:55:d5:cd:71:c5:6b:4e:a5:
                    91:2b:51:61:2b:5c:b8:4c:c6:e0:41:88:c8:aa:97:
                    ca:7d:5c:0b:29:f4:6f:eb:9a:b4:30:46:aa:c2:25:
                    1a:e2:35:ef:07:04:4f:03:28:a4:20:df:8e:c7:4c:
                    c0:c8:00:71:67:c9:02:b1:ea:8a:96:b0:4e:3d:36:
                    87:4c:38:c5:89:80:00:ee:7e:05:48:1a:66:2f:30:
                    8b:bf:ff:64:d5:cf:84:98:8c:bd:1c:ae:19:77:fe:
                    06:1b:7c:51:4c:61:a3:87:48:6d:0f:bf:81:d1:10:
                    1d:d5:1a:90:29:c2:df:89:51:c8:7c:ca:36:26:14:
                    7a:2c:8e:29:c6:56:87:bd:72:db:d2:a6:6f:8a:ae:
                    11:e1:37:d5:14:cf:12:cc:d0:31:a4:6c:ba:47:ff:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:0C:78:F3:97:07:F7:81:7A:74:48:96:EB:01:C6:8A:37:5A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610/6b6c550e-9826-3b80-ba0b-0df4b1d2c60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610/807915d5-97ab-403f-87db-4d22631ba610.crl

            X509v3 Authority Key Identifier:
                keyid:F1:F9:85:88:F7:90:D0:14:5E:CA:F4:D7:09:92:5E:30:A8:E6:30:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/807915d5-97ab-403f-87db-4d22631ba610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.184.0/24
                IPv6:
                  2602:fba9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:98:09:41:bf:d4:59:bd:00:2b:cc:c0:53:8d:01:d2:84:a3:
         78:dd:cb:6b:8f:da:76:f6:61:b0:5f:1c:3c:6c:88:0c:42:ff:
         83:a0:b6:e0:46:2c:86:fb:3b:11:e3:86:65:49:51:ec:0a:d2:
         4c:9c:fc:ba:fa:fa:1b:ab:a0:88:3f:a7:72:4b:43:76:ab:17:
         e5:40:ff:fe:c3:2c:9c:e8:b8:38:f6:eb:94:97:38:27:7f:c0:
         d3:3a:80:fd:fb:7e:6f:98:9b:e3:1c:0c:b3:7f:2a:ea:f2:f8:
         6a:5a:44:38:af:d3:e2:06:22:0e:ef:b8:b3:b1:52:59:d3:37:
         b3:a4:46:c2:e5:07:1f:77:ec:51:5c:81:7a:7c:eb:76:8b:9b:
         f2:49:50:f1:35:67:de:55:b7:48:51:70:b1:88:58:35:7c:27:
         06:33:6a:c2:2f:85:b0:02:28:c2:2d:d2:b5:e0:58:e9:72:ba:
         be:2f:e5:a8:66:a4:e3:10:41:4b:ca:0c:f6:de:ec:ac:22:28:
         ad:97:45:6d:f6:ff:9a:41:b2:36:f2:6c:1d:5c:b0:ec:92:dd:
         a2:c6:19:9c:01:90:07:13:71:6d:8d:f2:83:bb:d8:3c:0a:db:
         33:01:37:ac:05:88:e1:85:f6:38:cd:46:bc:3b:c7:5c:71:25:
         6a:62:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----