Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa
File:                     03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa (raw, json)
Hash identifier:          WV0+709CcPHX/qMcfJbZAhE8Gq25SvTkTPomjcUlODA=
Subject key identifier:   2E:4C:52:F4:A1:D0:F5:BB:BF:B1:7A:E2:3A:BF:AA:4D:11:53:7B:A8
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FFB7D625E7C5DE4CA6400
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     60781
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fb:7d:62:5e:7c:5d:e4:ca:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=9c3e4f7e-e5cd-4947-a8fc-fc946345d9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:0f:4a:10:ea:42:6a:d0:a2:e2:18:98:db:
                    6d:a7:a6:60:bf:39:69:81:2d:96:01:4a:5d:f0:1f:
                    af:97:7d:3c:4c:fc:d5:e1:68:63:72:77:19:d5:dc:
                    7e:a7:90:e6:a5:14:38:9e:3b:7e:6f:a7:81:aa:3b:
                    d9:2e:5c:53:bc:70:64:61:06:48:08:47:27:67:3b:
                    f7:a0:ff:34:d5:df:d1:b2:d7:2f:13:60:44:7b:22:
                    84:b1:55:69:fd:1f:34:ae:63:db:c3:fe:41:30:8a:
                    b6:16:ad:a9:9f:50:e2:0a:7a:ba:b1:84:f1:17:5e:
                    72:2c:33:7d:d0:61:94:f9:77:34:be:d1:85:23:03:
                    f7:96:83:de:7b:40:94:89:13:98:db:76:47:58:3b:
                    0e:e6:79:7c:bc:f1:7d:83:63:87:2d:3a:b9:fe:aa:
                    ba:26:dc:90:c1:20:2d:4a:98:39:52:27:2c:06:11:
                    89:94:0a:0d:f4:78:57:fb:59:0a:60:cc:a9:86:93:
                    6a:6c:35:83:ef:b5:d8:a5:ad:66:fe:52:92:e5:c5:
                    4b:8c:97:0e:a1:11:8d:5f:91:be:c8:99:85:7c:2b:
                    5f:ee:db:80:9d:07:d8:df:c5:cf:78:83:89:27:c0:
                    f5:05:0c:57:2b:2e:b4:1f:5f:c3:65:18:1a:5b:be:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:52:F4:A1:D0:F5:BB:BF:B1:7A:E2:3A:BF:AA:4D:11:53:7B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/03fc74fa-41d7-3d38-a95b-ffdcc4137a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:fc:52:af:b6:20:73:ad:75:a1:9d:52:ab:d1:48:92:7b:
         89:4e:fb:0d:ff:c0:09:b4:c8:c8:47:04:9b:d3:82:ca:a5:07:
         e0:00:c4:8b:6d:31:48:f3:17:4a:0c:cb:e8:08:91:fa:9b:9b:
         ce:e7:bd:a1:e9:0f:d9:33:41:c8:38:b6:b8:b2:f6:16:4a:1e:
         60:84:30:2c:02:a5:93:69:67:c1:ef:4a:45:98:40:77:16:e3:
         2b:08:bc:02:0d:c3:f8:d1:8c:dc:50:4f:b4:5c:75:5f:db:f9:
         02:a2:65:45:3b:9e:52:0b:fe:21:f9:ea:71:5a:6a:14:7e:ff:
         11:8c:4a:a6:28:d3:14:66:22:de:92:ac:a7:a8:4d:90:e5:09:
         58:c5:3f:91:d0:82:c2:88:87:60:0b:74:d9:90:dc:cb:60:75:
         ce:b1:a6:38:2f:cf:ae:66:5f:e0:26:63:f4:d8:a9:c2:b1:79:
         10:04:90:5e:0e:dc:38:b3:e8:91:e4:d8:45:76:0e:73:21:fe:
         09:60:62:59:bc:52:87:f6:68:13:73:18:39:8f:aa:dd:57:67:
         0d:d1:0a:9a:45:e1:5a:79:ca:2c:c9:3e:53:02:ca:ca:ee:0e:
         87:83:a1:00:41:37:34:0b:92:f6:1d:68:ae:67:21:3f:8f:4e:
         02:d0:c2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:24:40 2025 by rpki-client