Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
File:                     ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa (raw, json)
Hash identifier:          hqM0SGgPreeFxz6ttJvNJdwc+YR/olZzyTIEmvph8b4=
Subject key identifier:   1C:75:1A:C6:D9:DF:12:95:2C:C3:83:B5:17:0F:22:14:A5:0B:80:0A
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285848222FD42ABDEA7695B29278F0
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     399532
IP address blocks:        23.154.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d4:2a:bd:ea:76:95:b2:92:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=6afe5905-378f-4c3d-b2a2-4f6e89c33921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:b6:fd:d2:50:e8:48:5a:a4:ed:44:4e:92:
                    96:2d:54:22:f0:e6:5a:b1:2f:d4:ba:ef:e8:26:c5:
                    cd:47:da:bd:46:92:6b:8b:44:88:97:7a:39:76:a3:
                    00:82:64:ca:41:af:9a:5f:0e:18:08:db:d5:f5:3d:
                    e5:1a:a3:e5:9a:2f:59:29:08:64:97:a4:d0:38:af:
                    c8:14:31:4f:2d:22:fd:e2:75:9b:8e:23:8d:bd:47:
                    c3:cf:bb:93:35:7b:a0:c8:49:34:06:eb:8d:50:d2:
                    81:1a:76:47:d4:01:61:f5:ff:fb:88:67:96:0c:26:
                    21:e7:d0:39:d1:4a:a7:09:29:76:bf:1f:ea:2c:92:
                    c4:77:49:67:cc:80:30:d3:52:ca:8f:9e:ec:d0:b0:
                    ea:ac:f4:70:56:f4:51:20:6c:31:70:79:1b:83:d3:
                    73:03:5f:d1:39:34:d8:62:27:ba:89:5d:80:3d:83:
                    31:16:10:a5:3a:3e:8a:db:fc:70:e3:f3:7c:dd:20:
                    5b:f7:29:dd:b0:9d:63:45:23:ae:a4:30:72:a7:e7:
                    a4:01:40:a1:f6:cd:af:17:59:d6:04:65:34:c2:9c:
                    87:93:b3:c1:43:36:20:43:84:b6:45:1a:4a:cb:30:
                    58:da:e7:86:bc:5e:15:31:16:72:a0:46:14:bf:91:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:75:1A:C6:D9:DF:12:95:2C:C3:83:B5:17:0F:22:14:A5:0B:80:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ed8ecf53-8084-3ecd-bc44-b934a3c1a3a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:d1:5f:2f:83:ec:d8:91:41:e3:52:b6:c7:91:e1:bf:91:
         00:d3:4c:7a:65:e3:8b:b5:e6:11:60:75:ad:bf:d6:47:c3:4f:
         93:8e:c4:1d:4b:86:4f:76:5b:46:9e:ac:a3:ab:9c:f6:08:bd:
         bf:bb:91:d2:01:f8:44:6f:c4:b8:82:56:0a:05:c2:8c:da:28:
         e7:9c:a9:ab:19:38:ae:72:06:1b:9f:1f:8b:0d:60:78:76:7e:
         16:87:e8:0d:ff:bc:1b:da:5a:e2:15:1e:84:31:57:b1:bc:ab:
         bb:b8:3a:83:40:27:8a:d0:b3:69:16:6d:f5:f1:21:74:bf:ce:
         29:4c:2f:7b:ae:fe:65:39:c7:df:2b:b1:82:44:ca:4a:14:6b:
         77:22:7d:e8:87:c8:d8:72:94:88:92:67:5c:a0:1a:94:07:95:
         c6:d7:1f:df:22:6b:28:4d:ea:1b:41:dc:d5:bb:6b:18:15:a7:
         fa:85:8d:22:fd:46:aa:c1:2c:da:96:a3:d7:e9:ff:0e:db:96:
         2d:bc:77:13:d2:a8:5a:a6:0a:79:90:62:5a:a9:48:7a:b7:93:
         e1:7a:8e:45:87:ac:54:be:90:26:4a:19:76:c1:83:c6:74:24:
         69:b1:44:bc:b4:9c:12:f8:e2:7d:b4:3f:d2:0d:8c:ba:6e:0e:
         6e:f4:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:39 2025 by rpki-client