Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/9b7248aa-b30d-3316-a7d4-d534f8b95a8c.roa
File:                     9b7248aa-b30d-3316-a7d4-d534f8b95a8c.roa (raw, json)
Hash identifier:          Iyj/1Jb0WJS6EzqWmoO7oINGYsB5cgrpoM2oHjo0/DQ=
Subject key identifier:   F4:39:79:B6:93:5E:DA:E2:7B:4C:65:D3:CF:3D:E4:FB:D7:1F:B9:6A
Certificate issuer:       /CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
Certificate serial:       010D0C9F43285848222FD6FF0608826FF1E06C00
Authority key identifier: 4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/9b7248aa-b30d-3316-a7d4-d534f8b95a8c.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     33385
IP address blocks:        23.183.16.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d6:ff:06:08:82:6f:f1:e0:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30d9f05-c733-4bb6-bc4c-e72705e580d4
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=935e4b1b-5efb-4be4-bd79-f1a73f4b8ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:1a:ff:46:0e:19:c7:19:d7:4c:fa:d9:77:
                    63:30:41:b5:c2:83:e1:6a:6e:2f:a6:c4:5d:e3:47:
                    43:cc:b5:9b:38:15:36:41:1f:3e:32:b3:ea:32:08:
                    1d:10:8c:47:78:4d:da:15:f5:41:a6:a9:9b:59:70:
                    87:1c:3f:a7:e5:7f:ed:8a:db:65:32:a1:0c:5f:7a:
                    61:80:e3:c2:16:96:be:d4:ba:1a:f7:62:b4:ff:88:
                    73:8d:c8:d8:b3:67:a9:0c:40:ce:19:6f:85:66:f8:
                    0a:84:51:4a:2c:69:85:26:fc:1e:ed:9c:92:8a:29:
                    e9:82:e1:2a:6f:89:b5:23:16:13:d1:a4:11:26:5f:
                    1f:3b:93:87:44:36:59:c1:14:0e:00:f7:e9:62:2c:
                    c7:6b:1a:c8:cf:5e:dc:2c:5e:08:43:81:cb:34:43:
                    5a:63:0b:ea:8a:9c:02:a5:7b:99:c4:e7:b9:76:a9:
                    c6:a8:72:4a:4c:75:d9:43:a1:86:4c:34:36:71:e4:
                    f0:f0:1c:5c:db:a4:59:e8:0e:f2:c5:fc:d2:18:ce:
                    14:36:00:85:c1:13:29:60:f4:a7:64:cd:e9:7a:a6:
                    57:d1:2c:91:61:08:69:cc:e3:78:ac:61:c5:9d:73:
                    ee:23:00:a6:73:1e:b6:99:8d:f4:0b:72:7e:39:2c:
                    97:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:39:79:B6:93:5E:DA:E2:7B:4C:65:D3:CF:3D:E4:FB:D7:1F:B9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/9b7248aa-b30d-3316-a7d4-d534f8b95a8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4/e30d9f05-c733-4bb6-bc4c-e72705e580d4.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A2:1A:A9:DC:2F:C1:FF:6A:6D:BF:A5:A0:E1:0B:F3:52:C7:B1:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e30d9f05-c733-4bb6-bc4c-e72705e580d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:fc:32:3c:01:6c:71:c9:cb:76:15:24:4e:39:e5:1f:e4:ca:
         da:26:f6:9a:b6:28:aa:8a:aa:4c:81:81:e2:fe:fb:3e:c9:60:
         e9:97:ac:25:3e:49:d8:f8:b4:e1:82:86:f4:d3:cf:2f:bd:55:
         27:15:21:5a:b0:36:4b:20:78:9a:8e:0a:11:a8:57:79:cd:81:
         ba:77:3f:8f:bc:16:1f:3e:53:af:58:38:73:85:59:69:41:cd:
         e0:8b:16:f2:43:0f:a6:15:1c:13:c2:1f:b1:73:87:d1:65:e4:
         a3:31:da:a2:30:c5:ed:53:14:ed:2c:bb:24:b8:6d:d8:6f:63:
         34:88:83:de:b4:88:a6:17:3c:6c:64:6c:ee:84:f7:28:4a:f4:
         16:a8:14:d1:c1:b2:a1:43:c3:fc:a1:55:c0:ae:96:00:be:e9:
         ae:5a:d4:e4:4d:0b:5d:8d:5e:f6:05:44:36:f4:51:2b:15:81:
         26:9d:74:e6:9e:06:26:b6:0a:67:d4:06:95:7e:b6:38:92:cb:
         97:73:0d:36:5b:cd:23:41:aa:b1:c3:2e:fd:c9:9e:1b:b1:68:
         66:5b:02:99:82:34:16:a9:f0:71:5c:22:95:d4:22:a6:2d:97:
         9c:50:cb:1b:f9:2f:18:51:84:0b:21:4d:60:57:84:aa:b5:fc:
         9c:6b:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:33:52 2025 by rpki-client