Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/4a6fe9bb-2642-365a-b1ab-c763326d628d.roa
File:                     4a6fe9bb-2642-365a-b1ab-c763326d628d.roa (raw, json)
Hash identifier:          zxx4TZ5nJG2kf3wjpPU/vZ9m3gDAHiWoA2N9njpF/fs=
Subject key identifier:   BA:23:EE:A9:1B:51:92:75:E0:2C:AA:F4:8E:34:9D:78:D5:4E:B6:4F
Certificate issuer:       /CN=a2b44413-47b6-4396-9c34-fb085c0a498f
Certificate serial:       010D0C9F432858488815ED11D4AF41F75F52D090
Authority key identifier: 7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/4a6fe9bb-2642-365a-b1ab-c763326d628d.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     53850
IP address blocks:        23.178.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:ed:11:d4:af:41:f7:5f:52:d0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b44413-47b6-4396-9c34-fb085c0a498f
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=16990e94-e997-4c4b-94b6-e9fe3b1c44ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:81:a7:73:a1:8e:19:f9:af:31:81:de:b7:
                    dd:27:61:71:3c:cc:d2:36:df:87:da:ba:de:82:e2:
                    66:92:9e:05:8e:41:66:93:f4:c3:74:dd:67:79:50:
                    fa:ec:24:48:d6:21:6b:bf:f0:6d:ca:42:d6:09:e4:
                    23:21:20:c4:fc:b8:09:fb:f1:62:c2:e1:f8:60:4c:
                    8d:2c:a2:f3:cf:98:6a:ca:66:79:db:0b:e8:1d:37:
                    40:b9:f7:22:71:98:02:90:c1:d2:94:26:0d:4d:13:
                    75:18:11:78:6e:1d:d0:6b:a9:c3:1f:11:df:ae:d3:
                    e6:97:a2:8f:91:a5:20:2e:c1:96:e1:d2:91:86:5a:
                    cc:72:a0:38:49:ba:97:03:7e:8e:30:48:8d:3d:0a:
                    fe:3d:15:67:8b:27:6c:f1:d8:5b:03:5e:8f:3a:7a:
                    14:c2:44:f1:6c:48:73:1e:9c:ed:96:f7:a9:51:d3:
                    c1:4e:d8:03:53:8a:4f:37:57:2f:0f:4a:7b:dd:9a:
                    99:9c:2f:88:73:ee:5c:7f:90:c7:74:60:03:bf:42:
                    53:c3:67:3e:18:d0:de:d2:77:79:19:61:02:85:78:
                    cc:f1:0e:ee:8a:13:be:99:1d:44:94:40:ca:92:d2:
                    1f:3c:ee:3e:bf:73:62:be:34:74:91:25:68:eb:7d:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:23:EE:A9:1B:51:92:75:E0:2C:AA:F4:8E:34:9D:78:D5:4E:B6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/4a6fe9bb-2642-365a-b1ab-c763326d628d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f/a2b44413-47b6-4396-9c34-fb085c0a498f.crl

            X509v3 Authority Key Identifier:
                keyid:7D:25:36:04:6B:85:8C:4C:CB:D4:27:44:5D:3F:A6:5A:48:F0:6D:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2b44413-47b6-4396-9c34-fb085c0a498f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:71:f8:8d:ac:a8:eb:de:2f:82:49:7b:9d:53:eb:e2:f6:
         99:b2:5c:b9:a1:7a:b9:51:ff:6b:99:cf:87:7f:47:4d:db:47:
         e1:0f:e8:07:5b:5f:8a:64:26:56:8a:2d:aa:1b:60:ee:d0:7f:
         87:1e:d8:fd:09:36:4e:36:94:50:a1:a3:63:ab:4e:81:70:3d:
         e2:56:0b:d9:10:2b:e7:dc:c8:86:99:ff:d2:3a:b6:8e:6a:a5:
         93:eb:7d:7c:8b:eb:ed:41:f0:34:21:04:32:3e:6f:5e:2c:21:
         24:a7:02:7c:19:16:f2:1e:06:51:ba:0d:c1:8e:b3:99:52:f0:
         64:2b:54:5b:ec:f6:d3:39:0d:fa:dc:c3:3b:a3:a7:c0:69:82:
         69:9b:4b:d1:72:63:37:c7:91:9d:af:2a:a7:89:54:bc:ef:22:
         51:cf:f2:40:81:33:ea:dc:49:80:9c:e5:ac:3a:82:c5:a6:66:
         5c:18:b2:87:94:52:7e:89:6c:db:d3:60:95:76:da:65:45:7b:
         ef:7a:01:b5:17:3b:d3:31:48:93:7a:90:6f:38:a4:1b:06:84:
         bf:8c:80:b9:fb:84:02:3f:38:26:d6:8e:40:10:77:08:72:57:
         61:aa:2c:0e:30:c1:d5:76:c0:23:56:d1:ea:ff:e3:33:a0:8d:
         a9:38:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:23:24 2025 by rpki-client