Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
File:                     3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa (raw, json)
Hash identifier:          JW4dQb1w63o05SjmmGmhuSfkid/Gh5cSF5ibt15suIk=
Subject key identifier:   AC:78:D2:D2:83:B3:8A:43:58:F4:61:FC:6D:CF:21:E8:1A:95:22:A1
Certificate issuer:       /CN=903dbcce-bb2a-403e-ad25-67981ea1de21
Certificate serial:       010D0C9F432858482EBFF9049F11339121A99BC0
Authority key identifier: B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     149020
IP address blocks:        23.131.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:f9:04:9f:11:33:91:21:a9:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=903dbcce-bb2a-403e-ad25-67981ea1de21
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=464af881-f1ce-474a-8df1-d5a8f403428e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:91:4e:b4:be:1d:82:31:15:8f:15:b7:7b:
                    1b:21:87:61:e6:76:be:33:78:0e:f4:54:32:b0:de:
                    1b:03:c0:d8:2d:82:4f:f5:f1:6e:f4:17:57:0e:8b:
                    35:f1:42:ae:2b:de:8d:db:ba:e2:60:57:10:d7:5c:
                    4b:af:06:dd:20:0f:0c:ab:bc:f0:bf:46:3c:42:46:
                    98:eb:bf:39:9f:d6:21:28:af:ab:11:fb:40:26:85:
                    ed:1f:1e:39:48:1c:df:28:fa:f6:e6:53:30:65:b8:
                    ce:ca:c6:8f:69:70:95:de:75:4e:88:f5:ad:1c:43:
                    54:d9:11:6d:82:e0:38:21:17:2e:5e:ed:9c:bb:43:
                    ca:48:01:8a:a8:28:71:84:d5:02:79:ae:3b:4e:f2:
                    d8:cb:68:ff:7b:8e:79:e5:2e:7d:ac:15:a4:70:ff:
                    f2:fe:4c:d5:44:49:77:7f:65:53:82:cd:19:eb:60:
                    04:63:ff:af:cf:f5:1c:25:0e:6b:af:0d:6d:95:ec:
                    80:6d:51:98:20:6c:4d:5a:92:ea:b4:21:7c:5f:a1:
                    1b:55:19:42:60:fb:99:4d:f5:73:47:dd:4c:23:eb:
                    0d:86:fb:c2:ef:8c:94:8e:d1:a9:50:99:d7:08:ed:
                    62:9a:92:6c:45:6d:d8:5f:00:25:e9:d1:33:b2:5f:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:D2:D2:83:B3:8A:43:58:F4:61:FC:6D:CF:21:E8:1A:95:22:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/3554a570-dfde-3f1b-bb37-05f6bc9ab228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21/903dbcce-bb2a-403e-ad25-67981ea1de21.crl

            X509v3 Authority Key Identifier:
                keyid:B5:D4:E3:8B:E8:61:BC:DC:B6:D7:C9:3D:5B:AB:3E:CD:66:4C:69:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/903dbcce-bb2a-403e-ad25-67981ea1de21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4c:95:2f:61:7e:0c:3a:db:ce:1d:f4:58:83:f4:56:53:38:
         9d:66:31:ea:2f:67:c2:79:6a:52:33:9f:51:17:ef:49:9c:a5:
         a1:e5:e0:fc:98:50:26:37:cd:21:6d:a7:a3:69:35:e5:eb:d3:
         a7:32:c6:03:c8:62:30:bc:e3:ef:28:c6:fc:91:a0:91:17:18:
         e6:f7:ba:16:8a:6f:c7:8c:03:c9:db:08:16:62:92:77:1c:14:
         e9:e7:87:4d:f5:e0:a0:3f:a9:5c:8e:75:5c:ae:e3:1a:40:b8:
         00:25:8d:03:57:5a:1e:e2:dc:e3:9b:56:34:c5:36:2e:ee:dd:
         05:eb:ae:77:f7:0a:32:c1:a8:62:30:5a:a9:86:f9:0f:2b:77:
         d1:7f:22:c0:87:15:dd:10:e6:57:63:6d:8d:83:3c:9c:69:d4:
         e6:23:42:f1:f2:86:d6:be:fc:ed:df:2a:f9:eb:52:35:e9:b0:
         a1:0d:8a:7b:ad:7f:64:71:40:35:70:04:0c:f8:cf:7e:93:a9:
         bb:cb:a1:f8:4b:a7:8a:67:c7:b1:78:2a:2e:37:27:ec:b3:3a:
         4a:80:6b:97:91:6d:c1:eb:ac:b2:5c:46:7d:ed:b1:0f:b4:86:
         25:fd:cd:3c:2a:43:5b:a5:a1:f3:63:a3:35:4f:1f:3f:01:21:
         a7:cd:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:49:01 2025 by rpki-client