Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
File:                     8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa (raw, json)
Hash identifier:          D50+CiyEVFwq9uW+6rjzJL/3B91UcrzOW+YfRotVXJw=
Subject key identifier:   A9:86:CC:AC:B5:62:41:7B:90:53:E2:FB:98:86:57:D2:29:34:40:15
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F432858480EA50556A87D077794EC45C0
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     18780
IP address blocks:        23.182.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:05:56:a8:7d:07:77:94:ec:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=47f48970-ce72-4db7-a478-97c564229dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:95:7c:c4:f6:b1:b7:7a:21:ba:de:74:67:
                    8a:26:0c:93:5c:76:03:72:89:8c:c7:27:38:de:a8:
                    79:6c:da:16:03:f5:6a:49:3c:46:46:a4:52:12:03:
                    6f:8b:46:ef:e6:a0:e4:2d:a6:96:cf:49:5f:d3:26:
                    1f:13:c6:b2:89:b5:13:f7:c0:99:8c:eb:38:a0:00:
                    2d:ba:c6:70:06:2d:bc:01:6e:dc:9f:6e:4f:0a:74:
                    d5:5d:43:3a:e4:d8:06:d5:ce:b5:b4:f6:ea:8f:a1:
                    bc:87:49:73:8f:98:84:44:d7:d2:c6:a7:cc:81:1b:
                    d0:ad:07:93:b1:56:b8:6b:9e:8f:8a:fd:73:40:1c:
                    12:ee:d2:b5:c6:ea:8d:8d:e6:3f:23:9c:3e:c1:c1:
                    15:fd:e8:f9:3c:f7:92:a1:58:a8:7d:a2:6d:38:27:
                    c1:9c:9f:1c:cf:91:74:28:47:b4:24:e7:df:ef:89:
                    6d:64:66:dc:d9:07:6e:b0:37:fc:5f:4a:13:26:c8:
                    52:a8:c6:51:71:ba:66:2d:e9:1f:42:ad:77:4f:00:
                    6f:db:c4:28:09:37:b7:44:e0:d0:c4:4a:27:1d:14:
                    5e:ea:80:9c:bf:f8:bf:9a:69:51:3c:4f:71:b6:e3:
                    f8:23:b2:01:32:64:1b:0a:cf:9e:be:e1:c6:be:67:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:CC:AC:B5:62:41:7B:90:53:E2:FB:98:86:57:D2:29:34:40:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/8ef177d4-f411-3f9f-876b-78d1f6e5014e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ca:ab:57:e1:c8:6e:2a:87:a4:47:94:ef:d4:bf:da:0a:b3:
         d1:56:79:db:27:89:70:72:9a:9d:c1:21:dd:4f:71:d8:12:c1:
         35:d7:c5:95:67:31:65:60:25:69:c5:c8:22:6b:7c:18:3b:8f:
         f4:66:29:2a:98:c7:17:75:c8:0b:cc:70:40:19:57:a4:48:5c:
         49:d6:94:8c:73:75:8d:81:e5:4f:cd:b4:8c:64:28:9c:47:56:
         ab:d8:62:b2:05:9d:59:40:c5:36:de:32:76:19:16:a6:8a:c3:
         4f:22:1c:4c:23:e9:f5:af:40:09:4d:fe:81:27:df:0f:27:4d:
         fe:bb:00:d0:24:f0:af:d6:ee:6c:2a:67:f9:fd:f9:26:61:c3:
         61:8c:fa:64:c0:d2:bc:26:bd:e8:dd:ff:07:00:2f:84:04:4f:
         bf:64:ca:17:c9:8e:4b:e1:40:21:26:8c:37:7a:c2:7b:d5:ad:
         6e:21:a8:2b:18:a9:b6:e0:44:ff:40:4c:d4:c4:dc:44:49:8c:
         27:78:e7:89:45:50:4a:b2:25:d4:9a:ac:73:27:e0:82:4e:89:
         88:b2:1d:cb:fa:14:ce:7b:22:a3:7a:b9:69:a1:f4:5c:e9:5c:
         b3:25:1f:3c:c7:bd:43:96:aa:50:d9:ef:3a:31:1d:13:de:5d:
         a1:04:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:06:37 2025 by rpki-client