Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
File:                     2997a217-d468-3059-978d-6d7d89969d6d.roa (raw, json)
Hash identifier:          GBmDrEk0QFX/nO8pTBaUV9uoStP68VNGycNTsSu8twQ=
Subject key identifier:   27:EA:43:18:35:1D:2F:5E:62:E7:C5:8B:EF:9A:81:A4:66:BA:73:51
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F43285847FDE4D5F9B878687D1218A880
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     54905
IP address blocks:        23.234.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d5:f9:b8:78:68:7d:12:18:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=51343006-9c55-4c32-acf7-e4bfedd4363b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:4f:97:b2:43:79:fb:cf:58:1b:e8:43:ea:
                    1d:cb:b5:d7:a5:f1:7e:c2:f9:1c:85:eb:93:32:62:
                    78:f4:44:24:c9:d3:ee:de:55:58:fa:8f:02:e3:12:
                    06:90:2f:a9:96:e8:52:90:18:3b:f2:15:4f:12:44:
                    4e:a7:cc:cd:c1:90:ec:d1:22:74:05:77:0e:d7:bc:
                    68:78:06:e0:cc:89:4d:68:6e:eb:bb:88:e4:df:87:
                    f8:57:92:24:be:e4:72:a8:8a:9a:43:40:fd:33:69:
                    3e:f3:63:ba:9e:4c:ff:77:a4:e0:7c:6b:f6:49:11:
                    e8:12:a1:04:f5:1c:4d:7f:53:ab:d1:f7:0e:63:51:
                    c2:d5:77:44:98:2a:04:ed:51:af:b0:94:27:ca:ac:
                    24:db:99:01:15:98:d1:4d:64:19:96:9b:17:1a:29:
                    d0:dd:89:8e:cd:5e:ef:06:fc:36:18:88:88:9c:b4:
                    6a:e5:e8:98:22:6c:d4:70:f5:33:d6:9c:af:4e:73:
                    52:d6:38:16:c3:5d:74:44:eb:95:9f:e8:54:1d:80:
                    db:53:8d:f5:fe:57:4e:78:24:0f:bc:0e:74:ca:52:
                    fa:58:3d:0d:50:8d:b2:cb:8c:d2:2c:79:67:f3:36:
                    19:18:17:bd:06:db:62:46:0a:bc:b6:2e:52:9b:98:
                    da:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:43:18:35:1D:2F:5E:62:E7:C5:8B:EF:9A:81:A4:66:BA:73:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:d6:40:9a:ff:cb:40:7e:7f:67:55:4d:37:6a:05:96:d9:
         1f:14:86:38:1f:93:54:58:13:41:c2:e9:9f:4b:98:5d:43:c8:
         1c:c1:bc:0a:db:9f:95:36:17:34:c1:4f:50:d9:be:a3:ef:80:
         74:61:11:52:c6:0b:07:e3:f3:22:ac:b7:ce:31:26:32:cc:13:
         c5:da:1d:7a:f0:f8:7b:58:3d:32:5b:c9:19:b2:c1:35:d5:52:
         c9:de:50:8e:dc:c4:d0:39:91:1e:60:d4:f0:05:82:f1:a5:2e:
         50:b7:de:07:ba:aa:24:16:9b:5c:a7:9e:17:00:d3:d2:cc:af:
         fa:9b:4b:63:66:8f:d5:b8:46:f2:38:32:33:04:9e:15:d1:6d:
         71:be:2a:d6:5c:02:0e:09:56:75:5e:57:52:3d:47:06:66:3b:
         11:1a:64:70:a7:ea:34:b7:18:04:a9:03:a4:42:ec:6a:1e:81:
         51:13:6c:6f:a5:de:7b:19:54:de:a2:4c:7a:0c:27:fb:93:dc:
         f8:7c:32:b5:9b:d6:57:7e:e9:80:ad:38:12:e7:f8:27:47:b7:
         0a:13:51:6d:8f:61:08:d5:4b:49:fd:b3:77:9e:f6:3d:ba:ae:
         da:89:f3:44:bd:80:f3:9d:9e:71:0f:c3:a3:d2:cf:2d:46:c1:
         c3:8f:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:33 2025 by rpki-client