Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/02a9d3bf-d2a9-304b-96e4-f273863533ce.roa
File:                     02a9d3bf-d2a9-304b-96e4-f273863533ce.roa (raw, json)
Hash identifier:          p+3ChdjW59wSUTtEumqmvlZl+NtWYrRPi6yOjFtN5k8=
Subject key identifier:   16:AB:1C:68:61:F8:68:F7:D3:2B:67:A8:B8:5E:30:23:5A:4F:6B:93
Certificate issuer:       /CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
Certificate serial:       010D0C9F4328584878BB02A415EEE040093D3500
Authority key identifier: 13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/02a9d3bf-d2a9-304b-96e4-f273863533ce.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     33741
IP address blocks:        23.184.184.0/24 maxlen: 24
                          2602:819:a000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:02:a4:15:ee:e0:40:09:3d:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b21b55f-a9bb-4b07-bdd5-c38a703bf65c
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=cfc73fce-788a-4fb7-971f-3eaccc45922a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:45:a9:ff:f7:71:87:c4:7b:4a:71:a9:91:
                    ef:f4:61:cc:8e:c9:2c:1a:8b:68:1a:4a:dd:1c:7b:
                    b4:6a:39:f4:59:a1:16:a0:dc:3d:61:54:a5:75:66:
                    93:03:84:26:a3:dd:bd:4f:16:36:0e:50:52:2e:eb:
                    2c:d0:58:0b:82:9a:28:56:ae:36:a2:81:4e:97:4d:
                    b1:d9:2a:39:fd:04:60:93:5d:eb:60:a2:f2:df:9f:
                    79:6d:57:db:6e:72:fd:f5:a6:8d:b5:65:18:d6:29:
                    74:e8:00:f3:33:03:b2:da:66:6b:61:1e:ff:af:02:
                    f2:49:84:26:87:5d:b7:14:89:91:57:5d:70:91:be:
                    7e:ca:42:11:bd:de:64:de:e6:82:1f:25:f2:e7:69:
                    de:47:83:13:a3:28:77:26:a3:11:68:47:45:1d:aa:
                    c0:a1:24:35:07:86:0b:d7:2b:10:ef:6e:09:c9:17:
                    fc:71:be:90:e0:2e:34:2a:9d:0a:0d:29:49:0c:5f:
                    24:af:8b:8e:79:1e:0a:93:ef:f7:56:c7:82:ff:f6:
                    3d:50:30:db:00:dd:71:70:23:81:f4:69:be:44:f0:
                    10:f5:26:6f:a2:51:91:55:64:9e:2f:9c:91:79:07:
                    98:74:ef:e3:fe:11:4e:6c:72:d1:40:8f:04:9e:a3:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:1C:68:61:F8:68:F7:D3:2B:67:A8:B8:5E:30:23:5A:4F:6B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/02a9d3bf-d2a9-304b-96e4-f273863533ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.crl

            X509v3 Authority Key Identifier:
                keyid:13:17:23:01:F3:49:65:C7:37:41:7A:B0:87:6E:9C:91:02:A8:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6b21b55f-a9bb-4b07-bdd5-c38a703bf65c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.184.0/24
                IPv6:
                  2602:819:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3b:c4:3b:14:7f:21:3d:6e:2b:96:59:fb:2c:e1:3f:c2:da:
         c4:74:fc:f4:b6:c6:a2:90:38:f7:11:72:a8:aa:03:db:18:50:
         b6:6c:22:ce:d8:11:81:f1:4c:ee:dc:27:62:c1:e1:37:a4:5c:
         8b:9a:24:e5:14:16:95:b6:1c:d9:f7:b6:22:b5:85:20:6e:33:
         ab:49:db:5c:2b:86:d4:d9:e6:d4:41:8e:28:cc:82:b6:8d:f3:
         b1:40:19:e4:4d:2f:b0:ae:32:e4:5f:f5:78:6e:42:db:4d:17:
         95:aa:44:5a:68:5a:5f:0a:15:c8:94:3b:14:8e:0f:ff:7b:b8:
         c8:54:ee:31:81:9d:34:bf:63:d4:0b:bd:a1:0d:77:27:fb:bc:
         bd:55:d7:3b:3f:59:b1:61:16:8a:2d:00:ba:b2:4f:af:a8:a2:
         a0:82:d9:fa:66:b3:d7:69:d0:e0:35:ca:94:6a:3d:25:3f:63:
         2a:24:0d:a0:ad:eb:01:4a:df:eb:4d:bf:60:70:e1:0f:9c:a7:
         20:50:d6:46:48:1a:32:18:59:90:34:f1:62:55:0b:b0:f2:47:
         04:c9:90:d0:a8:b5:d9:5a:cb:bc:06:79:1c:c8:b7:8e:3a:89:
         c2:fd:1b:1f:84:51:d7:90:f6:bf:8f:48:6d:b4:eb:3d:df:c7:
         45:05:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:04 2025 by rpki-client