Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/56baa93b-405c-371a-8008-740e4614bac2.roa
File:                     56baa93b-405c-371a-8008-740e4614bac2.roa (raw, json)
Hash identifier:          ZCU/rRi+tTNK6Jp6OEVPhfjRnf1s2W6fIxPpPUCAXcI=
Subject key identifier:   0C:3E:89:9E:45:F8:45:F5:98:B4:50:31:DF:AE:48:2A:56:6E:9F:B1
Certificate issuer:       /CN=acaade25-9776-4234-a203-4f2776b69f08
Certificate serial:       010D0C9F43285847FDE4D9B1A41DA4A77643B3C0
Authority key identifier: DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/56baa93b-405c-371a-8008-740e4614bac2.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     401339
IP address blocks:        23.188.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d9:b1:a4:1d:a4:a7:76:43:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaade25-9776-4234-a203-4f2776b69f08
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=d04f89cc-22db-44e1-b879-80398aa5b18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:e8:b8:27:4a:23:2c:27:db:17:28:93:be:
                    3d:24:da:49:a5:c5:26:9a:38:61:aa:f2:af:00:74:
                    c2:99:48:27:4e:d3:07:f9:38:0a:21:73:e6:89:78:
                    e5:85:e4:f0:58:e7:d2:56:10:e7:be:a0:ca:14:9e:
                    89:90:a4:bc:c1:08:34:0d:f0:11:d0:96:87:49:08:
                    63:46:09:76:0f:69:6f:b3:40:1f:ac:97:98:f1:fd:
                    1c:a2:1d:a4:69:a7:af:e1:64:9a:c4:d1:9e:a0:db:
                    de:3f:93:c0:ad:9b:ca:e1:f0:8a:b9:64:08:f3:c0:
                    31:b0:da:04:ee:48:0a:87:d3:eb:29:ce:d1:0a:b7:
                    24:b8:08:d6:a2:97:38:1f:9a:84:e5:04:1f:6b:34:
                    24:4d:a0:03:f9:b9:f5:b8:48:ca:6a:5a:97:4c:ae:
                    fa:b1:65:ef:3e:8c:4f:1f:a0:5b:c8:7f:d0:ff:b5:
                    dc:5f:dc:3e:c6:b5:dc:05:5a:df:61:10:f5:12:d2:
                    d7:6f:df:bb:c3:2c:ca:d0:f4:7b:e5:eb:9b:5b:ff:
                    3f:52:7d:77:4c:06:fa:17:39:dd:38:3b:02:70:37:
                    a2:85:65:1a:e4:e7:e9:7b:ae:b6:39:67:28:99:16:
                    f3:de:f8:5c:8f:a9:b3:9a:2f:89:88:e1:33:74:b0:
                    24:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:89:9E:45:F8:45:F5:98:B4:50:31:DF:AE:48:2A:56:6E:9F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/56baa93b-405c-371a-8008-740e4614bac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08/acaade25-9776-4234-a203-4f2776b69f08.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FF:D1:2D:6B:EF:C7:60:BA:4D:B2:7E:8B:96:22:45:0E:04:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acaade25-9776-4234-a203-4f2776b69f08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6b:ca:25:6f:ad:e8:9e:e1:84:64:c3:ce:2a:21:50:e7:5d:
         a0:29:2d:4c:28:03:eb:ef:6a:42:b6:98:ef:6a:5e:c4:60:17:
         7e:a6:03:a2:72:17:51:89:6b:c7:74:55:c5:e6:9e:51:0f:50:
         67:84:4c:b1:85:81:5d:84:ff:98:78:53:73:f4:fe:84:c7:41:
         27:53:59:59:f7:96:53:8c:fd:8b:0b:62:33:4f:06:65:ad:96:
         c2:46:dd:4f:86:f6:bb:10:8b:d5:b3:21:16:0f:b8:14:e3:03:
         f7:39:51:dc:a3:95:a2:aa:b7:18:cb:fe:e4:0f:51:81:89:b0:
         ef:b1:bd:59:36:4e:c8:08:9d:39:58:0b:cc:7c:53:7e:0c:98:
         a5:45:b0:24:1d:50:08:56:2f:7b:b3:45:62:4c:3a:72:fc:fd:
         4a:cc:5b:c9:4c:64:91:bf:54:b9:1f:50:5f:cc:25:4f:b6:9d:
         c1:b9:fd:68:51:39:4f:ac:bd:84:a7:70:8d:81:2c:9d:b1:a4:
         54:5e:84:d8:c7:1f:87:e0:76:36:bf:6b:fa:91:77:9e:d9:06:
         c0:0e:44:da:86:70:4c:22:64:d2:06:c9:a7:d8:e3:aa:09:58:
         f6:59:3e:87:ab:5d:92:47:67:99:f7:61:63:16:dc:dd:1c:9a:
         ec:c1:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:10:25 2025 by rpki-client