Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb1f466d-f049-3a69-87d7-3ce93ddd9e96.roa
File:                     cb1f466d-f049-3a69-87d7-3ce93ddd9e96.roa (raw, json)
Hash identifier:          i6JghYDtvZ5jSuIGu4eqMB6O55T5sFnHVTyVxpaVtNE=
Subject key identifier:   6F:F0:B5:CD:3C:CE:DD:4D:D0:56:37:EA:1D:CD:AA:CA:79:A0:9E:03
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285848451588087D1BF776B0A6A400
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb1f466d-f049-3a69-87d7-3ce93ddd9e96.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     39618
IP address blocks:        23.160.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:88:08:7d:1b:f7:76:b0:a6:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=f0a6fe96-8c02-4e95-8ff2-48420fabac2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:53:43:e5:61:ff:01:6a:d2:73:d0:01:0f:
                    72:73:10:66:01:c9:99:2c:ee:fc:ea:b5:28:23:b6:
                    b0:b0:aa:eb:24:6f:e5:e1:c4:db:a6:66:a3:ac:9a:
                    91:8b:23:3c:b7:27:e5:97:f7:de:b1:85:0f:60:68:
                    6a:0f:2d:3e:4d:39:58:08:99:9a:fd:2a:69:b4:c5:
                    36:37:1d:b4:d7:a3:02:42:a5:cd:6d:8f:ff:37:55:
                    7b:26:00:2c:56:c2:c9:6a:90:88:7c:f2:75:1f:31:
                    57:f5:7d:ae:5e:11:ba:6c:24:db:f0:7b:c4:fd:2f:
                    6c:f2:54:77:d6:49:12:e6:14:0f:d2:48:6d:0d:e8:
                    36:c4:20:c8:67:0e:e0:3d:15:c1:9b:a1:13:c5:b5:
                    fe:76:28:bc:09:61:b6:61:5c:f7:be:29:91:60:eb:
                    b4:06:55:57:50:8d:2b:ab:ef:e6:76:6e:b4:9c:0a:
                    47:a3:c4:65:ee:c1:e7:ee:62:96:c7:28:92:93:05:
                    79:16:d4:11:28:1f:34:f0:9a:0b:6f:89:ff:37:a4:
                    20:80:29:fc:0d:1e:0d:94:f7:6c:5e:e5:94:95:ea:
                    3f:b1:e1:60:e0:85:38:d1:77:e2:70:fd:e1:a4:f2:
                    c7:b7:30:9a:76:7b:a8:05:1a:85:b0:10:9b:15:59:
                    04:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:B5:CD:3C:CE:DD:4D:D0:56:37:EA:1D:CD:AA:CA:79:A0:9E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb1f466d-f049-3a69-87d7-3ce93ddd9e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:27:d3:49:df:4d:05:94:0e:1d:e7:81:89:c6:35:03:41:
         2d:1f:0c:76:24:14:55:b6:ca:56:9a:c8:4c:06:49:40:87:7e:
         fe:02:d8:de:ba:d8:49:a8:d5:83:a8:7c:03:b4:60:15:81:4c:
         6b:ef:b9:28:45:81:e1:fc:ae:41:ed:cd:a4:41:a0:5d:d7:c8:
         f6:d0:37:ef:09:5e:ac:8a:39:e1:bb:36:9d:c5:5f:f2:a4:31:
         e1:2d:22:0c:1e:05:72:e8:00:3f:10:3b:0c:8a:2c:f1:fc:69:
         e2:2e:30:b4:f8:b5:bd:0b:0f:8f:1a:83:6a:56:90:84:14:bf:
         03:1e:a9:4b:d5:85:73:ee:42:a9:63:b9:47:91:7b:4a:1d:52:
         02:97:22:32:f1:92:eb:37:dd:a8:cb:22:fb:89:1f:53:dc:e4:
         95:45:7d:9e:84:cb:31:1d:ad:e7:0d:b8:65:28:08:72:e0:ab:
         49:b5:a8:f7:c7:c2:69:32:99:38:ca:0a:3a:f6:48:4a:52:c3:
         b2:c3:96:a0:77:f4:64:f4:d8:27:46:cf:5c:2f:34:ab:9f:e6:
         42:f1:12:33:ef:0d:99:16:24:a9:27:74:38:07:15:ab:ce:bd:
         20:09:74:bf:da:7d:51:50:ad:4b:3c:c0:31:69:37:9a:97:63:
         ac:73:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:14:12 2025 by rpki-client