Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
File:                     a815c6c4-4483-3cc7-ac67-b19b39011030.roa (raw, json)
Hash identifier:          7AwJB5NT7402PwrXInGQ2NF5uWAEA8PmIAFzR2KQVDg=
Subject key identifier:   DC:F8:84:02:EE:D3:EB:A7:FF:E8:94:6C:46:43:8A:DA:43:72:FA:C5
Certificate issuer:       /CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
Certificate serial:       010D0C9F432858483455849B980445CD87471540
Authority key identifier: E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     401202
IP address blocks:        23.182.88.0/24 maxlen: 24
                          2620:ca:2000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:84:9b:98:04:45:cd:87:47:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=d0e0137d-3b22-4bcf-a393-be1b878d01e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:0a:79:91:8c:c8:6e:42:f2:c1:be:a8:b3:
                    be:89:31:d4:ac:5e:1b:6e:9d:e0:17:65:fb:d1:6b:
                    e9:9c:2c:b1:8c:35:90:b3:8c:d5:31:29:dd:5e:99:
                    35:5c:a6:87:0a:73:37:b3:84:52:f3:e5:d4:ad:01:
                    0a:ea:b6:37:1c:4c:52:d8:0c:28:4b:88:02:19:e7:
                    66:f5:a7:dd:d2:48:84:f3:c1:e9:0f:c5:c5:ec:6d:
                    6b:9f:48:c8:14:c1:c4:08:18:9c:ca:f9:98:4f:ef:
                    b9:b2:62:81:f2:d1:dc:f8:8b:c1:fa:68:ab:89:11:
                    d8:45:90:aa:fb:4e:17:c4:0b:46:b9:6a:e2:20:06:
                    0e:ef:b6:94:12:33:56:5d:a9:0f:a3:cd:75:15:c1:
                    e4:b2:ef:f2:a6:72:31:fc:6d:73:9e:7b:57:45:1d:
                    cc:3c:35:b2:b6:fb:dc:ed:8d:51:1e:66:22:26:1a:
                    7d:cd:06:54:12:48:ee:2e:89:35:8c:cd:a9:c9:df:
                    6a:14:d8:f3:6d:bc:5a:42:b0:21:83:6c:a9:6e:af:
                    15:bb:d0:35:3c:c0:af:09:b8:ed:d7:ad:f6:82:76:
                    8c:7c:98:26:15:36:85:27:18:21:16:76:ae:f7:33:
                    2b:2d:48:ee:54:48:72:bf:4b:d0:d3:bf:8c:70:a5:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F8:84:02:EE:D3:EB:A7:FF:E8:94:6C:46:43:8A:DA:43:72:FA:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.88.0/24
                IPv6:
                  2620:ca:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:db:6d:0c:3c:89:5a:9c:3d:81:51:6f:9b:c1:c1:12:48:
         79:8b:fd:96:3f:23:bc:19:01:4f:0f:70:26:74:3b:81:55:b6:
         01:08:3e:76:02:2f:00:28:f3:2c:b9:06:15:42:ed:d7:fd:a1:
         d5:1d:28:27:98:e8:fc:b9:be:88:c2:fa:c1:ba:ea:15:61:f6:
         e3:e1:2f:49:01:bd:2f:3f:9d:00:6b:6c:1b:8e:7c:be:db:57:
         28:f3:da:80:9f:c4:ce:31:d9:72:7f:da:71:73:a7:95:ed:9b:
         1a:01:b6:a1:e9:61:09:82:ee:69:f0:c1:ff:42:c5:f7:26:24:
         0a:8e:6c:8a:c5:61:f9:7a:18:cb:07:08:b6:ca:50:d5:a6:24:
         50:92:bc:5f:14:74:1b:62:b9:e1:1f:f1:0a:ef:e9:ae:f0:d7:
         57:67:34:1e:eb:ff:9b:2e:a2:a3:d1:20:f9:e0:6a:0f:f2:98:
         9e:a6:5c:da:89:1c:c1:60:45:d5:d2:4c:43:ec:15:ba:66:39:
         ff:75:69:65:fe:17:bb:6c:a3:c6:bf:5b:79:82:02:de:0a:52:
         7f:e0:10:83:b7:1f:e6:86:41:dc:ed:ec:af:2a:fa:54:bf:26:
         0a:af:f0:96:f4:3f:49:9a:8c:76:c7:dd:bd:a6:26:b5:62:de:
         5b:bc:f2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:17 2025 by rpki-client