Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
File:                     002ef700-936e-3cb8-aa93-bc3050bdb98d.roa (raw, json)
Hash identifier:          hQrCre//q9j/tJL0ilXTvSl3Lr1ZHeOJyjObxiK13Bs=
Subject key identifier:   B2:8B:14:6A:F8:F2:61:CA:33:65:75:7F:6C:C1:EF:E5:A8:09:E7:20
Certificate issuer:       /CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Certificate serial:       010D0C9F432858485E35B7F7E80E39B85F3E2A40
Authority key identifier: 5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     201579
IP address blocks:        23.166.72.0/24 maxlen: 24
                          2602:f9e4::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b7:f7:e8:0e:39:b8:5f:3e:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=c174b5e8-f541-4c93-93b6-af909265b33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:ca:b2:32:12:b0:43:a2:62:f8:a1:82:cc:
                    80:ae:af:7d:69:7e:fc:f7:f6:9f:e0:af:12:88:21:
                    07:86:26:f6:0d:0c:4f:44:51:4d:81:4a:bd:87:cc:
                    bb:52:5a:53:a3:5d:ea:37:a6:f5:15:f2:f6:46:85:
                    0f:c4:0c:25:d1:3f:3f:70:62:71:fa:e3:5f:f2:31:
                    3b:5e:76:61:73:23:bf:94:95:62:3d:2e:45:63:2a:
                    1c:4a:c3:5f:44:0e:38:7f:40:24:66:f0:37:bb:49:
                    3d:1c:63:9f:8c:fc:08:c8:87:c8:3a:c0:f0:6e:9a:
                    b8:a3:08:8c:34:cc:ed:a8:a7:d4:c8:b6:1c:44:20:
                    07:24:b5:a9:ac:16:61:d6:01:61:61:52:2e:74:72:
                    f7:93:d6:23:ba:bd:80:98:27:af:f2:3d:3c:0d:1d:
                    6c:4a:fa:f4:40:14:8a:a3:40:a1:32:66:07:56:3b:
                    eb:7f:b0:6e:34:cb:f9:ba:12:b3:a2:60:65:de:b4:
                    b2:1e:01:e2:3f:0a:a5:7a:89:64:45:8f:66:c1:3b:
                    c5:9d:af:17:66:c5:cb:ba:ad:33:40:1d:6e:18:a7:
                    b0:4d:92:89:a9:c2:87:7d:e0:0b:16:a8:e5:44:27:
                    44:7e:c5:a6:e7:77:24:75:37:37:31:6d:09:3d:1b:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8B:14:6A:F8:F2:61:CA:33:65:75:7F:6C:C1:EF:E5:A8:09:E7:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.72.0/24
                IPv6:
                  2602:f9e4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:ca:e2:d8:dd:38:aa:72:f4:43:01:cb:9e:34:a1:12:dd:
         e9:a5:22:b2:d4:01:8e:a3:06:7d:f0:a0:96:ec:ab:31:7d:03:
         92:bd:fe:30:ef:a5:73:28:5b:41:73:82:b0:cf:b9:b1:8f:1e:
         9b:1a:05:11:9d:15:a6:84:3e:58:d1:60:ce:85:be:07:cc:49:
         48:5d:e9:36:99:b8:bd:36:fa:78:cf:32:4c:18:d4:56:81:5f:
         da:c4:91:3d:47:a5:12:65:02:1e:3e:3b:b7:7d:55:63:ca:14:
         46:06:c9:f7:fd:74:ce:7f:8b:8e:a2:b3:4e:d7:85:7d:9a:35:
         08:68:81:3e:31:ed:1d:ea:41:cf:8d:e0:17:1d:c3:c0:45:f4:
         be:49:cf:ae:43:3f:4c:87:5d:2b:37:d4:e9:f0:2b:b5:21:20:
         d2:61:e7:c0:77:b4:d9:9d:82:88:bb:e9:3a:82:e8:40:6b:f2:
         82:8f:0a:b9:05:0f:30:53:8b:ca:0e:17:2f:b5:21:ea:bc:db:
         05:ce:4b:aa:9b:fc:1c:68:9a:dc:26:2b:1b:84:cd:4c:c3:5b:
         4d:ab:70:f2:eb:43:15:df:a4:a6:6c:1b:0a:6a:f1:5b:08:3f:
         77:39:64:a0:a9:c9:ea:cc:ad:22:55:64:8b:d4:9d:8e:3b:0a:
         c2:47:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:02 2025 by rpki-client