Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14183128-6453-3c7d-b557-8192ed864458.roa
File:                     14183128-6453-3c7d-b557-8192ed864458.roa (raw, json)
Hash identifier:          HHFqht/1a5RDBj+5olI05h/vPeXvOIFsMy973zn0ANY=
Subject key identifier:   F6:49:E1:CC:19:02:A5:C3:9B:91:68:42:52:5B:B2:62:9D:76:58:13
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F1110FF26165A43847776780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14183128-6453-3c7d-b557-8192ed864458.roa
Signing time:             Wed 20 Nov 2024 11:44:08 +0000
ROA not before:           Wed 20 Nov 2024 11:44:08 +0000
ROA not after:            Tue 18 Feb 2025 11:44:08 +0000
asID:                     44477
IP address blocks:        23.230.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:11:0f:f2:61:65:a4:38:47:77:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 20 11:44:08 2024 GMT
            Not After : Feb 18 11:44:08 2025 GMT
        Subject: CN=03455060-4e24-42be-8270-996210b4eb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:e0:75:d3:71:ea:cc:d0:e9:db:26:47:f7:
                    cf:0b:c4:cb:ed:97:3f:6d:6c:05:92:ca:51:b0:84:
                    fa:f8:c5:b8:43:d5:16:92:0e:9e:8a:f1:87:13:b0:
                    65:65:bb:81:cc:f4:f8:61:39:e9:26:62:8f:88:29:
                    f7:e3:3b:a3:1a:f0:59:6e:7b:ef:e7:bf:bc:26:64:
                    9b:5e:bb:0e:04:37:b0:fc:62:f7:ff:aa:3e:a8:4c:
                    16:88:e9:f7:87:33:06:b2:f2:db:ed:e2:77:6d:3d:
                    4c:8a:71:6f:84:df:42:dc:a4:07:80:44:88:41:c2:
                    35:13:38:46:25:f4:99:87:29:c7:4c:b5:a0:3b:d2:
                    2b:45:0b:5b:4e:26:c6:f9:b7:cb:e8:7c:83:60:26:
                    b1:b3:90:53:4e:25:69:f8:f6:d1:3e:01:98:58:d7:
                    9e:5b:b0:de:a3:2b:fe:0f:38:79:33:29:ed:9d:5f:
                    92:64:cb:63:92:b4:f0:75:33:25:fc:e5:04:ff:12:
                    ee:3d:a7:41:fa:1d:a2:56:9a:07:10:e6:77:54:29:
                    b7:63:19:6e:1a:55:50:86:ef:68:73:dc:e7:d1:3a:
                    2c:19:83:87:c8:8b:50:da:01:97:b8:63:ef:51:14:
                    67:91:02:a0:62:b7:db:ee:d8:75:88:aa:38:14:15:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:E1:CC:19:02:A5:C3:9B:91:68:42:52:5B:B2:62:9D:76:58:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14183128-6453-3c7d-b557-8192ed864458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:2a:25:e8:9f:96:fd:b5:f9:1b:a4:95:95:6f:2a:ef:2e:
         d0:fd:4f:c5:35:8b:88:b9:ce:f9:85:7c:da:5c:a0:8b:b0:62:
         1b:12:c7:96:63:22:3c:92:29:60:0f:e0:25:f7:74:a2:17:9a:
         1c:68:f3:01:33:22:49:00:b9:35:fc:f6:e4:d0:f5:97:f6:d3:
         95:fe:69:84:b8:50:bc:d0:d9:1d:b0:3c:56:f4:47:7e:cf:d4:
         ae:c1:a7:2f:36:6e:04:34:72:11:3a:44:b3:13:14:7b:50:3d:
         ff:7d:ba:e6:8c:6c:4c:ec:bc:d8:23:b6:40:8c:a4:ba:b4:32:
         02:69:86:48:eb:4a:08:67:a8:97:c6:56:58:4b:1c:ab:21:95:
         75:45:b7:30:1a:08:25:3a:13:34:17:93:b1:9e:dc:e4:00:5f:
         62:a5:2f:be:92:c1:51:a4:c1:c3:cf:42:54:e2:00:d1:ce:0c:
         b4:13:0d:3c:88:2e:bc:6c:ab:cd:8a:e8:10:1d:a5:a4:12:1f:
         5a:f0:32:12:d3:8a:85:81:fc:92:6b:ef:e6:b9:ed:a3:33:16:
         86:47:44:46:50:7e:69:dd:17:fa:bb:86:6b:48:17:aa:da:be:
         27:6c:0b:b1:3c:8c:8e:3d:6c:ef:cf:ee:f0:6d:83:61:bb:48:
         fe:da:e4:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfxEQ/yYWWkOEd3Z4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MTEyMDExNDQwOFoXDTI1MDIxODExNDQwOFowLzEtMCsGA1UEAxMk
MDM0NTUwNjAtNGUyNC00MmJlLTgyNzAtOTk2MjEwYjRlYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0ngddNx6szQ6dsmR/fPC8TL7Zc/bWwFkspR
sIT6+MW4Q9UWkg6eivGHE7BlZbuBzPT4YTnpJmKPiCn34zujGvBZbnvv57+8JmSb
XrsOBDew/GL3/6o+qEwWiOn3hzMGsvLb7eJ3bT1MinFvhN9C3KQHgESIQcI1EzhG
JfSZhynHTLWgO9IrRQtbTibG+bfL6HyDYCaxs5BTTiVp+PbRPgGYWNeeW7Deoyv+
Dzh5MyntnV+SZMtjkrTwdTMl/OUE/xLuPadB+h2iVpoHEOZ3VCm3YxluGlVQhu9o
c9zn0TosGYOHyItQ2gGXuGPvURRnkQKgYrfb7th1iKo4FBXcVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZJ4cwZAqXDm5FoQlJbsmKddlgTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTQxODMxMjgtNjQ1My0z
YzdkLWI1NTctODE5MmVkODY0NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+aiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHihKiXon5b9tfkbpJWVbyrvLtD9T8U1i4i5zvmFfNpcoIuwYhsSx5Zj
IjySKWAP4CX3dKIXmhxo8wEzIkkAuTX89uTQ9Zf205X+aYS4ULzQ2R2wPFb0R37P
1K7Bpy82bgQ0chE6RLMTFHtQPf99uuaMbEzsvNgjtkCMpLq0MgJphkjrSghnqJfG
VlhLHKshlXVFtzAaCCU6EzQXk7Ge3OQAX2KlL76SwVGkwcPPQlTiANHODLQTDTyI
Lrxsq82K6BAdpaQSH1rwMhLTioWB/JJr7+a57aMzFoZHREZQfmndF/q7hmtIF6ra
vidsC7E8jI49bO/P7vBtg2G7SP7a5LY=
-----END CERTIFICATE-----