Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
File:                     8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa (raw, json)
Hash identifier:          aeBv9fHTFxkt9JmIaTJ71d2nBleNyF7Qa/7jktAOFyE=
Subject key identifier:   16:54:8E:61:3F:A8:CB:E4:97:A5:7E:E9:DC:1B:AA:12:7B:CB:67:52
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F432858485F9ADD3E1A8F9F227073B500
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     3257
IP address blocks:        23.234.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:dd:3e:1a:8f:9f:22:70:73:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=25118135-1537-4352-98ea-20467c1098ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:91:2a:27:d4:f2:44:d6:a7:7f:c4:d9:65:
                    05:ac:85:72:9a:46:a1:6b:a9:7d:73:f6:d7:7d:31:
                    60:d7:c9:ed:d7:d6:ec:70:24:08:be:27:df:50:ad:
                    c8:21:23:85:b9:2f:bb:33:a4:6b:8d:af:55:17:df:
                    3c:0c:3a:9f:6c:12:62:ee:38:ac:ca:a3:cc:df:37:
                    db:a8:19:94:66:ca:d9:2c:b5:a4:63:a2:95:05:dc:
                    20:c5:0d:4d:51:23:79:ba:2f:d9:f5:9e:6c:43:62:
                    38:fe:7e:65:c2:e9:a3:52:55:05:0a:a7:d2:fc:1a:
                    a4:03:15:6e:20:18:4f:be:09:13:b4:aa:f3:66:0a:
                    33:ff:14:8e:22:12:43:7b:72:83:2e:36:b5:b1:f2:
                    cd:d9:d7:c9:e3:49:52:a9:e8:a3:70:15:45:4b:48:
                    a7:4c:57:7d:f5:a7:ba:c6:af:e8:c0:71:02:1e:de:
                    ac:ee:bd:13:fc:42:4d:6f:a0:ed:3b:23:5c:ba:40:
                    b3:63:29:4a:3d:85:7e:1c:59:05:9c:10:23:f5:08:
                    41:32:85:0e:67:17:23:53:63:0c:f3:cf:6f:96:18:
                    c3:17:80:37:fe:bc:bd:07:6a:24:f0:84:18:20:84:
                    fe:dc:71:3a:cb:b3:01:5f:cb:72:d3:5d:16:67:81:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:54:8E:61:3F:A8:CB:E4:97:A5:7E:E9:DC:1B:AA:12:7B:CB:67:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:3e:ea:d4:6a:09:46:a1:4c:46:70:e8:71:8a:44:ad:19:4a:
         36:3e:85:f9:35:43:1e:ec:b2:7e:e9:54:63:d9:30:d5:74:1b:
         54:e1:48:15:53:c9:77:79:95:86:31:39:1b:04:85:a1:06:e7:
         cf:4f:18:2f:e3:e7:85:fc:ec:1e:9b:1e:d0:08:b7:7c:7b:ef:
         93:e6:e6:7d:e1:62:1e:80:7c:0b:0d:bc:dc:8a:e3:0b:1e:8c:
         79:5f:34:c3:2b:b0:91:db:db:06:dd:fd:af:94:d6:a3:a0:fc:
         54:d8:a2:50:e6:8b:fb:6d:a3:12:d0:90:48:71:1e:48:c7:9b:
         b8:fb:2e:1f:18:c9:5f:27:de:91:b8:2a:91:d9:ee:e3:d1:04:
         60:d7:e1:e1:07:ea:96:b5:8b:88:0e:20:d7:83:02:41:a1:38:
         0d:ea:70:f8:81:23:5e:2b:21:cd:f5:36:ac:ef:57:2a:8e:8b:
         d5:43:ab:f3:c5:34:1a:a0:83:3a:35:22:c3:8e:6f:05:a6:ca:
         b5:fd:2d:76:5c:4a:6e:26:6c:6e:b1:e7:9d:f3:1d:c0:77:9a:
         0d:e5:5e:e9:fe:b5:8e:76:14:d8:bb:ac:52:02:cd:fe:c0:a1:
         87:65:b9:4c:08:e3:7a:42:bb:62:1f:36:2e:3b:b0:85:76:57:
         52:d0:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:45:32 2025 by rpki-client