Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb83ec33-43e7-30d7-ad37-a5ea586b50c7.roa
File:                     eb83ec33-43e7-30d7-ad37-a5ea586b50c7.roa (raw, json)
Hash identifier:          bgdlkaqYRCP6iuQsG+JsYOwSuvTFjYpXU276lgQJtZU=
Subject key identifier:   1B:C3:18:9E:48:F5:16:68:BD:42:E2:77:C0:BD:7D:5F:EB:13:E9:FB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858487755E6C4CFBC84C0C1E45680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb83ec33-43e7-30d7-ad37-a5ea586b50c7.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     152672
IP address blocks:        23.230.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e6:c4:cf:bc:84:c0:c1:e4:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=cbb1b87a-5c7a-4278-98bb-9c20bfab2d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:61:83:bc:eb:52:3d:df:d6:17:2a:a8:40:
                    70:17:0e:77:f3:01:04:4a:d3:7f:8f:fe:64:ab:44:
                    d4:21:8c:4a:01:d5:82:3e:0b:23:f2:fe:31:3a:89:
                    44:30:36:7e:d2:e0:94:b1:44:e0:a6:f4:7d:f2:2d:
                    5b:70:73:f0:09:42:f2:f4:7f:84:65:ce:ee:44:4e:
                    28:37:9f:3a:d3:94:ea:95:c7:48:c3:ac:e0:f8:3c:
                    dc:12:f3:c1:9e:b0:c3:b3:45:85:e6:24:e1:64:35:
                    f8:cc:ac:59:55:fd:de:57:7e:1d:bc:a2:ea:22:50:
                    86:b5:bc:1a:4c:56:67:19:33:55:02:0c:9e:2c:bf:
                    23:08:23:67:a2:a9:c1:86:45:32:cb:d8:78:cb:ef:
                    0a:4f:0f:bb:9f:23:eb:dd:74:4c:3c:e6:b4:74:9c:
                    e1:06:4f:bc:d8:4c:9b:be:bb:56:b6:28:2c:9f:d8:
                    1a:34:be:cf:6b:7a:00:dd:ab:f4:92:17:16:96:d9:
                    f1:af:aa:c4:cd:81:33:d7:c7:45:2d:c0:37:01:3b:
                    24:bc:8b:0c:55:b0:7b:e8:2b:99:51:7c:1e:71:e3:
                    9c:a0:66:d3:dd:0d:f5:3f:b6:59:0a:a6:20:e0:d1:
                    f8:81:dc:08:91:63:a7:ac:e4:da:04:62:e6:da:b9:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C3:18:9E:48:F5:16:68:BD:42:E2:77:C0:BD:7D:5F:EB:13:E9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/eb83ec33-43e7-30d7-ad37-a5ea586b50c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:e3:f0:ad:62:3b:b2:69:98:a6:dd:52:8b:d2:f4:30:1d:
         b5:37:e5:b9:13:ed:37:24:45:32:6f:62:91:8a:62:17:69:95:
         5c:15:0c:48:20:4a:68:b4:b8:93:68:3e:a8:32:01:eb:31:1f:
         da:3a:34:ba:79:db:db:44:bc:a7:8a:c1:21:ad:41:30:fd:13:
         95:bf:7a:c8:56:3c:8b:8a:1a:88:0b:ed:e3:4b:87:14:d7:1c:
         43:d2:c8:ba:0f:1d:b7:06:23:29:c6:df:0a:7b:76:78:ff:a5:
         4f:cf:cc:c0:94:34:cd:a3:d9:d4:86:8e:9e:ae:88:5e:cb:c7:
         17:df:c0:1a:69:ef:e0:20:6b:56:fe:37:26:d4:fc:05:99:8a:
         d2:b3:33:55:0b:1f:70:d4:b4:02:38:ef:2f:f1:b9:89:cf:77:
         96:b9:83:39:37:d1:15:1c:fb:64:f4:40:09:66:b5:6c:f5:50:
         de:b5:7e:45:d7:fe:83:41:b3:0b:1b:7b:87:2f:d5:59:63:60:
         7f:a9:df:da:1c:c0:71:ed:b2:3a:de:03:8e:94:bd:8a:84:22:
         7f:fa:85:75:a0:f3:52:d9:59:4c:67:07:fd:02:48:23:33:93:
         3e:b9:17:b2:d2:7a:de:fa:68:5e:01:72:34:61:1f:d0:da:5d:
         f0:4a:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:50:10 2025 by rpki-client