Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa
File:                     e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa (raw, json)
Hash identifier:          UDtmQIWl2toDl3xvMUtWTivq3sYdDPO3Tbth9o7zgmU=
Subject key identifier:   FB:8A:47:40:05:D4:02:F9:84:9D:80:96:C8:B2:47:58:FE:1F:A8:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6D57FE378B01FFD116FBD80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa
Signing time:             Fri 22 Nov 2024 13:18:59 +0000
ROA not before:           Fri 22 Nov 2024 13:18:59 +0000
ROA not after:            Thu 20 Feb 2025 13:18:59 +0000
asID:                     400536
IP address blocks:        23.230.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:d5:7f:e3:78:b0:1f:fd:11:6f:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 13:18:59 2024 GMT
            Not After : Feb 20 13:18:59 2025 GMT
        Subject: CN=9c63a545-7c6b-46d7-a13b-7914a85aca04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:e2:4e:c5:10:cd:24:11:f3:1c:35:e5:00:
                    63:38:4d:ac:88:5d:10:4d:52:2b:ed:af:24:ab:4f:
                    ca:96:8f:fa:50:e6:41:fb:7b:c3:e3:b4:f2:78:81:
                    c4:00:36:c6:e4:b9:7d:37:5f:0b:94:df:ef:80:ac:
                    dc:95:26:2b:c9:73:8d:2d:16:b3:04:9a:a8:d2:bb:
                    47:fe:dd:02:49:e0:dc:73:d2:83:ba:d0:82:f5:05:
                    93:5f:0d:60:22:54:7d:af:8c:05:7c:03:97:35:9c:
                    2b:2f:71:83:ad:58:60:03:69:4a:2b:34:0d:9c:d9:
                    79:48:19:c6:5e:27:1f:fc:99:b4:00:0b:0c:d9:80:
                    90:e0:61:e5:f9:be:bf:c4:54:ca:72:92:3d:c6:cb:
                    88:5f:81:a9:16:ac:4a:1b:b7:4d:43:9a:b3:c0:38:
                    89:c8:d7:15:85:b4:e6:39:4b:79:d4:20:15:0e:52:
                    90:27:7c:5f:30:0a:15:8b:7d:ba:a1:f5:53:76:d4:
                    c2:3b:69:d6:e3:6e:71:49:56:5f:29:8d:a7:d0:6e:
                    d0:5b:9d:e9:87:fd:69:34:3e:ad:af:97:af:64:83:
                    5a:90:21:bb:5e:31:60:f1:a8:21:b0:af:09:6a:84:
                    74:32:93:d5:82:3c:f7:61:62:ff:56:b7:30:49:1d:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8A:47:40:05:D4:02:F9:84:9D:80:96:C8:B2:47:58:FE:1F:A8:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e09f8bea-1595-3d6c-a6ba-bb6a18b9b6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e4:57:79:87:24:e6:da:e1:29:e8:e2:c8:53:f7:52:2f:77:
         8d:46:df:cf:29:9b:4f:f0:72:99:89:e7:fd:98:69:9d:2a:cc:
         92:f7:fd:da:4d:cd:33:9f:53:9e:0b:a3:db:4c:e1:d5:b9:81:
         ee:41:3d:ee:13:c0:6b:4a:09:35:14:3c:7d:84:b9:a7:6c:5a:
         44:bf:c8:50:96:d1:eb:91:68:f1:19:58:2e:56:e0:8a:f4:87:
         02:4f:1a:90:6b:62:87:3b:98:ed:96:ec:e9:9a:3a:58:bd:2a:
         fb:9f:38:6c:bf:bc:22:28:32:7a:99:23:bd:83:c3:31:1f:c8:
         7b:5f:4b:f5:49:c5:63:3b:63:82:0d:2e:1d:ab:06:d9:9f:13:
         16:f1:a5:1c:3e:b7:6e:0c:27:f4:25:30:f6:1b:f8:5d:01:5a:
         be:c7:78:4d:a4:5d:7c:7d:85:b8:53:9a:de:aa:69:e2:9b:43:
         bc:a0:f0:42:9d:ce:b1:5a:a1:78:7a:bd:9d:40:75:1c:96:a1:
         0b:24:f0:7c:89:67:7e:a4:e6:f0:1b:60:13:62:9f:3d:46:52:
         5e:0d:0f:9c:4e:5c:a0:41:bc:e7:41:85:4b:50:b9:17:ca:76:
         23:3c:e6:73:eb:5c:df:11:92:50:c5:6d:49:1b:be:a4:9e:5c:
         ed:90:e4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:42:05 2025 by rpki-client