Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
File:                     7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa (raw, json)
Hash identifier:          +VTTGDEGkTZvTysygK94doKdkRCmcuoQq5ve7gR2qSY=
Subject key identifier:   DE:E2:16:15:B4:23:E4:21:FD:86:D1:D3:CB:AB:7F:AF:14:84:A2:09
Certificate issuer:       /CN=937e4376-b17d-4219-977d-431a97bf5b34
Certificate serial:       010D0C9F432858484C1017FBC2447FBD1782CFC0
Authority key identifier: 05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     401361
IP address blocks:        23.190.248.0/24 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:17:fb:c2:44:7f:bd:17:82:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937e4376-b17d-4219-977d-431a97bf5b34
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=dcff9518-85d6-413b-a793-21e0c424a929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:23:10:ad:da:f8:b3:24:91:34:d2:bf:23:
                    4f:7a:cd:dc:0c:c2:6a:1a:3d:46:4a:2a:9f:1f:34:
                    1c:b1:2f:cc:5b:0b:49:f3:fb:14:34:e8:25:21:1a:
                    ce:19:fb:69:ff:44:58:61:0e:28:bd:0d:13:06:58:
                    6e:9f:40:05:d4:f6:28:b4:5b:01:c6:8f:31:79:66:
                    32:27:30:31:97:e9:c2:8c:77:49:cd:d7:88:8c:47:
                    fc:91:22:7a:a5:92:e7:59:75:b2:56:8e:d6:c8:16:
                    5a:22:20:fd:c7:9d:f4:c0:6d:71:85:d9:50:ed:8f:
                    5a:e8:51:d3:ed:fd:c6:2f:ef:d3:4b:6a:b1:6f:c3:
                    82:bf:54:f9:31:11:75:3b:c1:5e:89:94:e7:de:ec:
                    b4:1c:57:43:de:4e:d0:3b:bb:6b:7c:47:2c:de:0a:
                    5f:34:c5:75:c9:21:96:00:f0:4a:ad:4c:45:76:1a:
                    e8:bf:2d:e6:a8:8a:68:4d:4e:06:44:c4:48:97:2f:
                    a0:7c:d8:7f:3f:1c:11:90:e5:cb:d9:41:54:a6:b6:
                    2e:34:ec:77:e4:ee:a4:1c:04:f2:94:17:29:39:e3:
                    eb:e2:16:85:00:ee:ad:4f:23:c3:cc:18:db:de:29:
                    76:84:f1:5b:1c:01:aa:ec:d3:12:10:71:d8:22:91:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:16:15:B4:23:E4:21:FD:86:D1:D3:CB:AB:7F:AF:14:84:A2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/7b5e8336-9be2-3b18-b449-0e07b5f8ab1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34/937e4376-b17d-4219-977d-431a97bf5b34.crl

            X509v3 Authority Key Identifier:
                keyid:05:25:1C:56:9C:6B:1D:B4:CD:12:A0:6E:26:CD:6E:B1:98:16:B5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/937e4376-b17d-4219-977d-431a97bf5b34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:57:77:ea:00:ac:67:61:6c:a9:5e:62:a7:30:18:82:82:b2:
         43:da:ef:aa:19:97:13:1a:a5:d4:e8:53:c7:2e:2f:c8:02:7e:
         43:64:66:38:b5:fd:6b:ed:51:4e:f6:cc:43:c1:b1:dd:8a:03:
         18:36:78:1a:e7:d5:f9:32:4f:18:65:e9:bb:af:ca:63:7d:7d:
         52:13:45:f4:7e:5f:39:a8:0c:17:6d:b7:c2:fb:d3:b6:a2:54:
         a6:ee:e0:7e:cf:b0:3e:b1:f8:85:7a:6c:ff:17:d0:5d:da:03:
         2a:2d:80:89:c0:eb:22:b8:07:e1:35:2b:9d:be:e3:9d:2b:16:
         be:08:18:67:b0:17:5c:f8:fe:a3:2d:fd:cb:98:3b:1a:ea:cf:
         d0:48:01:24:d5:f6:76:c5:3f:89:12:c6:b1:a8:23:1b:50:a3:
         96:3a:cf:d6:2f:05:f5:13:25:e9:82:f5:1f:d7:06:6f:1a:51:
         3d:b1:f3:5d:9c:e7:da:38:50:6a:98:e4:02:53:21:34:c4:e8:
         8c:77:1b:3c:37:00:9e:a3:34:4f:93:84:ee:62:f9:67:64:73:
         34:5f:b3:bf:64:1d:28:ad:21:4c:a8:3f:65:c9:e8:3c:20:dd:
         1c:55:7b:e2:f3:34:27:b1:17:5d:fe:88:56:66:aa:5b:22:10:
         b7:7f:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:51 2025 by rpki-client