Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
File:                     12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json)
Hash identifier:          n6e5j2puTG04xDKgrWKYh5vmz6W0NbIYqvb/Qvl2joU=
Subject key identifier:   EF:85:A4:14:8A:2E:15:10:18:F0:33:07:89:40:6D:65:92:AC:CF:CC
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F432858486695AA94E72855518041CA80
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     30006
IP address blocks:        23.191.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:aa:94:e7:28:55:51:80:41:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=573d7bc9-25a7-4fca-803b-ed7752c1ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:42:4e:94:84:12:a5:d3:d4:4c:b8:d8:fb:9e:
                    5b:70:6c:60:0e:fd:79:a7:e7:b4:fe:b7:50:6b:9d:
                    45:f2:af:55:1d:62:a1:cc:0f:43:b4:1e:8d:8b:51:
                    38:3c:2a:0e:5d:cf:aa:6a:80:15:b3:89:0d:27:34:
                    4b:46:9e:ae:aa:26:00:2c:87:a4:00:9f:61:50:b2:
                    9d:9f:2c:1a:b6:ff:35:2b:39:8f:cb:df:48:87:a0:
                    97:af:40:ac:05:68:60:be:ed:17:e7:1a:82:4a:cc:
                    7a:b5:ba:d4:fb:2e:01:22:da:ac:cb:1f:a3:49:e0:
                    cb:7c:cc:1a:a7:60:fd:c5:f8:0d:2b:6d:26:98:6c:
                    c5:3a:36:8e:73:ff:f7:b5:74:a1:22:a5:48:e5:cd:
                    cf:d9:1e:61:76:1f:16:24:53:e2:2f:3b:c1:b7:bf:
                    a7:76:50:9a:fd:12:45:78:d7:13:e3:5c:69:6e:12:
                    cd:37:f5:59:1f:3b:bc:27:12:79:86:f8:66:76:a9:
                    92:6f:19:69:5e:49:e4:b9:98:bb:28:13:bb:52:11:
                    84:ff:af:b3:88:3f:d7:ed:1f:79:8e:f5:c8:f3:1a:
                    88:0d:c7:6b:f9:44:e9:1e:33:51:94:5a:6c:8d:88:
                    05:56:b9:a5:63:ea:32:3a:f3:9e:7a:a8:cd:1c:95:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:85:A4:14:8A:2E:15:10:18:F0:33:07:89:40:6D:65:92:AC:CF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a3:d6:c0:05:7a:df:ec:55:a3:08:a6:7f:b3:50:00:ea:36:
         cd:2c:76:de:56:4f:b4:06:71:ba:0e:5f:3f:f6:86:ee:46:ed:
         f2:95:26:ae:ae:20:96:63:fb:d2:b2:55:51:6c:ed:53:47:91:
         4d:e2:67:f7:82:87:ce:68:cb:65:eb:44:f3:2d:a4:08:1b:0e:
         12:ef:80:0f:bb:60:6e:b7:63:fe:a0:d2:ef:8c:b1:7e:20:f9:
         ec:25:aa:29:e5:cc:39:f6:0b:7d:a7:41:0f:b4:f4:f5:51:b3:
         2b:cb:ac:cd:06:36:a9:0c:be:bf:5f:b1:be:d0:43:0f:0d:95:
         6b:41:a2:48:9e:8b:5f:df:69:ce:e0:13:ae:c6:9c:3e:8e:9d:
         7a:e1:28:13:4c:11:4c:2f:62:6c:4f:83:2c:e9:c7:58:95:f7:
         65:92:b2:f9:8d:4f:09:ff:ef:57:7c:96:60:67:64:4d:41:ad:
         d0:f3:04:41:85:91:f8:70:98:2d:0b:e4:6b:2f:34:9d:61:fa:
         27:95:01:f8:05:1c:9f:c7:1e:1c:ab:25:7c:1d:d6:ca:88:52:
         87:bf:90:3d:46:e8:2b:13:3d:46:db:7c:f0:30:3e:21:ea:5b:
         da:84:77:e1:1d:12:44:48:c9:d5:58:b0:21:ca:2d:64:bd:26:
         b7:83:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:54:07 2025 by rpki-client