Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
File:                     f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa (raw, json)
Hash identifier:          EDA8pTDqZTOlyCqYKumDf04sdBDEeB/oSjlObzDiyRg=
Subject key identifier:   2A:74:56:BA:4D:DA:7D:3E:69:26:0E:79:1A:57:37:B6:AD:FA:2D:8F
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F4328584819CFDE97664FCA35FDA9A680
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     13781
IP address blocks:        23.151.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:de:97:66:4f:ca:35:fd:a9:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=3ae30916-b414-42f9-9c42-e31c58996f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:83:3e:63:bd:91:9b:d2:74:05:bc:7a:8e:
                    02:9d:d7:03:58:7c:c0:bb:61:a1:04:f8:4e:9b:1d:
                    11:71:c6:9e:20:fb:3e:4b:82:37:97:2e:68:2c:69:
                    2c:c2:40:37:ab:f7:d4:3f:b1:c0:38:ce:e6:94:64:
                    0b:c5:a9:60:b2:e5:6d:cf:30:9e:ef:9f:3e:24:80:
                    d4:1e:16:bb:1e:75:de:9e:ba:b6:3f:14:e3:0c:78:
                    29:fa:c5:6c:c9:4c:5e:90:8c:d1:8f:dd:41:04:bf:
                    c8:6a:27:0f:76:77:e3:b5:2d:04:3d:8b:af:70:f9:
                    07:49:ee:53:7f:83:c9:f6:b1:c2:52:91:52:00:ef:
                    41:f1:03:b7:7f:57:18:bd:70:7d:69:9c:ae:bc:9f:
                    f0:8d:2f:1d:c4:0a:b7:e4:10:16:65:70:85:85:3b:
                    1a:80:c5:a3:d8:ef:94:56:57:65:46:b3:aa:1f:3d:
                    49:1e:ad:9b:27:b6:c4:8f:b4:aa:10:b8:03:99:57:
                    0b:02:4d:38:7a:0e:1b:fd:dc:ae:06:bd:cd:f4:f0:
                    be:aa:b2:e6:09:3b:6d:c9:05:18:ba:89:d1:bd:1e:
                    0d:97:0e:94:e1:f8:95:d8:9d:06:63:c0:98:13:c9:
                    8f:6a:23:13:0e:72:0b:45:1f:27:3a:17:0d:5d:6e:
                    46:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:56:BA:4D:DA:7D:3E:69:26:0E:79:1A:57:37:B6:AD:FA:2D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/f877bd71-35ee-39f7-89dd-9b00abaa8fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:9e:40:61:53:97:2e:59:04:2b:1e:27:65:b8:fa:86:a4:
         c6:33:f7:19:89:ff:95:cf:f6:e9:c9:3b:a5:85:de:ab:2d:83:
         80:7b:5d:b2:f0:a0:2d:6e:49:01:87:25:7d:a6:8c:bb:05:14:
         d2:af:20:c9:09:9b:1a:47:8a:1c:66:bc:8e:78:d2:c4:fb:5b:
         98:de:d1:82:a4:d8:c4:58:ce:b0:7f:7c:33:eb:b5:b5:5a:62:
         5b:4a:c1:c8:6f:bc:41:60:dc:c3:0b:d8:07:1d:dc:04:66:14:
         65:6f:c3:e8:0d:68:cb:6f:06:c7:71:6f:67:ff:ce:0a:fd:c5:
         a3:7e:f8:e0:59:94:fd:00:1f:4b:66:5f:d5:96:42:4b:45:bd:
         55:9c:bd:ba:8e:65:59:d4:68:ff:1b:ab:18:ae:cc:ed:0f:de:
         ab:55:95:e6:c8:80:41:e1:a4:cd:33:e8:c8:37:86:aa:4c:db:
         cf:26:6b:95:36:53:b3:5b:c8:e9:5b:43:ba:b7:9a:ce:ef:bf:
         91:f4:d5:40:73:c0:23:44:a1:52:14:ab:b1:e3:6b:bd:5e:9a:
         6e:e0:49:89:6d:a6:c0:eb:89:5e:a9:de:43:a0:cc:a4:19:a0:
         77:3c:b8:12:20:c3:a6:20:80:36:da:ff:c9:40:62:f8:1b:ba:
         bb:85:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:05:30 2025 by rpki-client