Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa
File:                     1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa (raw, json)
Hash identifier:          qrVlCps6ewdFFEC2oKgCr9ZQEDlrM1RtPDGEj7ARkXA=
Subject key identifier:   D6:6C:E2:FE:88:30:5A:06:E6:D2:C7:1A:64:62:63:4E:E5:7C:74:E3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FFBFDDC15BCFF7449E780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     30633
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fb:fd:dc:15:bc:ff:74:49:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=6fe1e185-9a2e-4b02-8d76-e7498876c1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:72:a2:cc:3c:11:31:d4:b2:d7:55:f0:54:
                    6d:cd:a1:78:f5:e6:50:c0:d7:57:2d:6e:18:14:8a:
                    3c:95:a9:0f:36:26:67:25:d7:6b:2b:cb:7e:48:3b:
                    ab:03:80:9e:a8:f2:12:b6:5a:63:cb:f4:ca:27:c9:
                    2b:e6:fa:f4:a7:0b:bb:50:cf:c0:c8:07:29:a8:bf:
                    9c:45:22:c7:3d:3f:15:37:ca:d9:44:6f:1f:10:0c:
                    a2:ca:42:fe:ba:72:f4:d1:14:ce:c1:2f:9f:71:9a:
                    18:9f:22:fe:ea:4e:f4:be:76:a3:e6:81:d2:5c:fc:
                    d2:70:83:f8:51:ff:67:c7:1f:07:c4:be:b4:41:f1:
                    7a:0e:ca:f3:42:b0:58:cd:64:c2:42:80:14:c2:7d:
                    8f:f8:7f:c3:9e:55:7d:97:68:0f:74:c4:3a:12:0a:
                    20:ea:da:e1:fe:9e:cf:e7:cd:bd:c9:88:89:14:fd:
                    7f:3f:7f:ec:a7:19:c6:af:7f:af:cb:66:32:6c:67:
                    a8:36:3c:f0:46:40:48:70:74:b2:62:a1:a0:b0:f0:
                    27:9c:46:75:a8:a5:23:ad:57:51:1a:76:5e:33:59:
                    23:6e:2c:dd:2c:0e:f2:ac:82:bc:41:b8:a4:a3:34:
                    f1:98:ae:3d:8b:02:f0:fb:d1:05:47:e5:9b:1c:f4:
                    ff:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:E2:FE:88:30:5A:06:E6:D2:C7:1A:64:62:63:4E:E5:7C:74:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ca5f0e2-7748-372e-b7ee-a2cd46898ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:92:f9:f9:56:18:dd:c2:89:dc:ff:01:1f:78:f2:5b:2f:cc:
         21:49:b4:e1:a5:5f:86:f3:39:e3:9c:31:28:46:ef:a2:56:f5:
         4c:1c:a4:32:50:31:05:fe:f7:43:fb:11:9f:be:64:6d:0c:f5:
         e0:61:11:fe:33:25:63:6c:55:75:26:17:86:b5:b8:52:de:4c:
         ba:71:41:05:05:b2:4f:2a:79:c0:c6:09:3f:14:7b:13:5f:8a:
         07:54:35:c2:3c:5b:26:be:7c:7d:1f:45:6a:c2:ce:7c:d5:6d:
         49:45:17:7c:65:4e:5b:20:33:e2:b2:ee:39:2a:55:fb:84:17:
         31:84:b5:7b:ff:fc:8d:ac:12:68:ef:e2:ee:2b:ad:8e:1e:35:
         81:ff:0a:46:0b:87:43:31:bb:04:55:07:0a:a0:94:7f:43:16:
         c1:2e:be:52:8d:5e:e9:26:d2:11:98:66:92:56:45:69:d4:d0:
         04:15:f2:30:3a:3c:a0:0b:06:67:27:dc:6d:57:07:c6:40:93:
         ec:11:6f:74:29:83:02:3d:7b:16:22:58:fd:a8:c1:ab:4a:f4:
         91:f2:10:4c:6e:ae:e3:62:62:16:b2:38:26:f8:c7:24:84:5b:
         a7:e2:56:b1:89:78:92:3d:e9:13:35:15:2b:cb:0f:5c:97:f7:
         c0:1c:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:20 2025 by rpki-client