Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa
File:                     82bb7845-6126-3714-8f98-3ed53f082b9f.roa (raw, json)
Hash identifier:          qe7Pmi4HvT9LnHRAPhQlT0iU0n6y8OStVGfiSe+6nTc=
Subject key identifier:   C6:9C:63:F4:EB:DF:B4:65:AD:32:7E:86:A2:C7:CA:8D:A8:BF:88:2A
Certificate issuer:       /CN=fa477642-e4af-4ff3-96bf-ada919ef1284
Certificate serial:       010D0C9F432858482EC00482992FAD558A2830E0
Authority key identifier: E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     394743
IP address blocks:        23.167.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:04:82:99:2f:ad:55:8a:28:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa477642-e4af-4ff3-96bf-ada919ef1284
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=62db9bda-8427-42bf-8ff2-3dcdde92dc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:37:61:9f:06:b4:eb:97:69:79:53:47:7f:
                    e1:93:5d:a4:65:54:1c:5c:e8:2b:d5:19:af:5a:f4:
                    91:4d:62:52:df:ad:e8:22:cd:23:89:cd:78:78:20:
                    8c:7e:c9:8d:83:20:33:28:e8:56:e3:a8:00:0d:41:
                    a5:30:5a:9b:09:f9:3f:f9:df:1f:b1:d6:31:c2:f0:
                    68:d8:8c:af:45:eb:5a:75:0d:7d:26:0a:d7:7c:03:
                    f4:2e:42:d8:5f:80:db:69:ce:64:01:32:6e:10:cc:
                    3c:4b:6b:8c:99:49:9b:e4:86:ab:64:e7:88:31:9e:
                    ae:e1:60:4f:56:82:66:e7:32:b7:7c:0d:4e:86:32:
                    a3:c2:8b:84:09:f5:f1:96:74:05:82:6b:0f:9f:82:
                    b3:2c:14:3e:a9:5b:92:af:d2:3a:ad:99:ad:e2:ca:
                    7c:50:87:4e:fd:f0:52:10:7c:7f:d3:e1:47:23:cb:
                    1d:0a:c5:04:be:f1:dc:48:0f:c7:99:6f:6d:99:74:
                    68:4b:92:ee:fc:b5:cc:84:d6:d1:5c:75:64:47:c4:
                    5b:2c:ff:dd:ae:cf:0e:68:38:c3:55:e9:59:d1:40:
                    e5:36:03:fa:03:6f:7f:06:d3:bd:bd:3d:57:a9:1b:
                    9e:1a:08:c4:41:b2:d4:9c:b5:1c:62:3f:91:54:76:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:63:F4:EB:DF:B4:65:AD:32:7E:86:A2:C7:CA:8D:A8:BF:88:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/82bb7845-6126-3714-8f98-3ed53f082b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284/fa477642-e4af-4ff3-96bf-ada919ef1284.crl

            X509v3 Authority Key Identifier:
                keyid:E0:FF:A5:07:F5:AD:7E:37:8C:5F:0A:76:43:9A:47:AD:22:51:D6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fa477642-e4af-4ff3-96bf-ada919ef1284.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:48:48:0d:bb:62:6d:e0:1b:4f:19:5f:23:2e:d8:43:0d:
         52:43:09:e3:fa:77:e2:67:29:4a:1d:bc:40:c7:e8:6e:62:c4:
         11:eb:6e:cb:82:c7:ee:14:ca:ab:a1:27:a3:55:72:f4:2b:e7:
         71:a8:b4:dd:48:0d:63:83:3a:06:dd:e7:b5:3f:d2:a0:73:65:
         0e:7e:90:d8:3a:e5:dc:19:87:71:34:e2:aa:a1:d1:41:49:45:
         ce:bb:78:0d:b3:85:8c:d5:44:91:0f:10:4c:97:f9:e0:13:cf:
         95:4f:9e:7e:b7:5f:8e:79:1e:f4:61:0f:40:f1:19:46:a4:e5:
         2d:d6:ae:64:cd:d8:87:60:16:8a:f2:a7:41:03:27:2d:4c:1e:
         0a:87:11:77:59:63:77:41:a0:62:cc:ad:cc:85:84:c7:ed:f6:
         59:ac:60:54:0e:08:d9:28:05:9a:e4:3d:a8:67:bc:87:6e:09:
         a3:b3:9e:58:f3:df:f2:6a:6c:8d:39:ac:e4:8a:f1:2b:7c:62:
         da:65:95:43:c5:14:48:a7:71:11:fe:81:bf:3c:dc:6f:81:47:
         17:84:50:6f:30:a9:96:f5:df:53:77:a5:c6:47:e0:62:5f:ef:
         5c:d7:35:a1:35:5e:46:b1:b1:d6:7b:44:7f:91:4d:3c:97:56:
         96:8e:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:32 2025 by rpki-client