Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa
File:                     a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa (raw, json)
Hash identifier:          3NlCE2BMP/aq1v9fACwA5aRX9L6Pfx4NMXBRFjm4E8o=
Subject key identifier:   4E:A2:B2:41:E9:82:32:BE:50:38:69:22:46:2D:C0:A9:7D:A5:09:A0
Certificate issuer:       /CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
Certificate serial:       010D0C9F4328584806FB1BF3A56EBD7153D9AB80
Authority key identifier: 02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa
Signing time:             Thu 28 Nov 2024 08:07:41 +0000
ROA not before:           Thu 28 Nov 2024 08:07:41 +0000
ROA not after:            Wed 26 Feb 2025 08:07:41 +0000
asID:                     134176
IP address blocks:        23.185.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:fb:1b:f3:a5:6e:bd:71:53:d9:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1252c796-6ab2-4eb9-baa0-1445fc80ca84
        Validity
            Not Before: Nov 28 08:07:41 2024 GMT
            Not After : Feb 26 08:07:41 2025 GMT
        Subject: CN=8db566cd-e863-4a62-95ee-6b1b0b79addc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:9c:e1:ad:db:6f:39:d6:c9:14:fb:4c:3b:
                    af:79:10:9e:50:75:16:cc:5a:95:5f:d8:fa:09:08:
                    b4:45:f2:3c:32:ab:df:37:a7:b5:0b:ac:17:24:4a:
                    c7:a5:00:b0:9d:85:96:65:73:91:55:bf:4f:dd:e7:
                    b5:22:27:a8:21:2c:b5:ca:a8:21:ef:ae:b6:6b:85:
                    bb:64:62:45:47:8f:b2:4e:6c:0a:3d:53:47:7c:48:
                    9b:08:84:78:a9:ab:cd:5c:56:3d:27:bf:c4:0a:b2:
                    33:74:c5:0d:3e:d9:57:3f:04:be:c9:17:a1:94:d3:
                    0f:75:43:83:38:2d:27:84:48:72:10:46:42:c0:36:
                    0b:25:0f:64:38:5d:4f:f5:36:95:e0:20:48:f5:98:
                    d8:51:cb:c0:4d:50:02:3f:20:d9:e2:dd:d5:5e:43:
                    d2:ab:dc:66:a5:f3:ed:d4:c3:4c:61:87:66:7a:3c:
                    7e:d6:fc:28:e5:44:41:1a:de:b0:43:7f:64:3b:ff:
                    05:6d:ff:8c:58:02:9f:b9:fb:75:60:34:ee:ee:7e:
                    ba:64:34:f8:85:2b:22:4d:67:ac:68:30:1e:e3:75:
                    f6:0f:f6:be:f9:58:b5:15:40:3d:07:c2:29:ca:c2:
                    2b:84:f9:7f:a7:c6:5a:cc:aa:31:33:91:48:aa:43:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:B2:41:E9:82:32:BE:50:38:69:22:46:2D:C0:A9:7D:A5:09:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/a46787cc-0fb1-3bba-b30f-f7c86fd5fa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84/1252c796-6ab2-4eb9-baa0-1445fc80ca84.crl

            X509v3 Authority Key Identifier:
                keyid:02:FE:8D:82:11:3C:DD:D4:41:B5:09:3A:BA:20:31:D4:10:29:B3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1252c796-6ab2-4eb9-baa0-1445fc80ca84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:d9:3f:08:8e:bb:1b:95:d5:24:f0:36:84:bd:2e:52:56:
         52:e8:56:3c:53:49:7f:5b:76:33:66:d5:b8:51:ec:fb:a8:25:
         2e:4a:51:12:f3:d7:da:1d:2b:2a:0a:d5:79:9f:11:90:92:f3:
         b5:3f:b6:18:83:2c:92:e0:ff:6a:b6:87:c9:02:ae:e5:01:0f:
         26:8f:b0:bf:d6:32:0c:91:91:e8:f9:93:d5:65:27:de:52:40:
         34:b8:fc:9a:29:1d:05:db:6b:ba:e0:20:d4:cf:3b:2a:f2:3c:
         b1:12:86:93:7e:b7:15:28:0e:d5:22:f3:3c:c8:48:7f:a7:60:
         1d:04:9e:89:51:16:04:0c:57:c5:53:84:05:d2:10:e3:c7:51:
         ea:98:16:b7:78:68:a7:7b:7e:7f:eb:ae:87:61:57:04:0a:f8:
         b4:a1:54:57:9c:87:2a:c1:af:07:90:3b:91:06:11:d8:2a:5e:
         38:73:97:c2:74:9b:5a:74:6d:43:61:05:e9:13:e3:98:97:d9:
         81:04:84:0a:ff:78:f9:22:85:38:fc:a0:9a:88:d7:06:56:50:
         44:7f:08:9c:77:5f:71:b6:00:5f:b6:44:c1:4e:c8:e4:a4:d4:
         a0:61:92:52:22:33:33:e2:33:05:e5:f0:dd:85:ba:66:4c:0e:
         b7:7b:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:13 2025 by rpki-client