Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
File:                     a736b29b-8772-3206-a73f-e395ff229dfe.roa (raw, json)
Hash identifier:          IUGZY+wUb3UF4hDpgWMfrSC5i6druYwTWHG5I7DenP8=
Subject key identifier:   0E:F0:23:80:6A:88:33:0B:27:D6:96:19:D4:6F:80:AF:74:9A:1E:BC
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848186A81E2A1E26BEB73651C00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     32613
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:81:e2:a1:e2:6b:eb:73:65:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=9e8796ef-6cac-4f64-8a4c-61c99e92214a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4b:b4:5a:07:48:42:05:48:23:41:a0:f8:21:
                    f6:5b:1b:72:fa:39:88:d3:51:98:22:e9:c7:ec:e9:
                    41:36:a4:fc:f6:ba:99:f6:a3:22:77:25:de:08:bd:
                    8d:6b:9d:47:a6:b6:d4:c4:60:9c:90:2c:50:ca:6d:
                    a8:ff:4b:48:24:cc:12:ac:4a:0c:f8:21:94:d4:bc:
                    37:01:3b:30:9d:92:13:58:6d:61:59:e9:0a:4b:0a:
                    2b:88:82:26:92:d0:14:54:12:84:5d:90:ec:b3:44:
                    e4:0a:5a:61:c2:52:cc:2a:5f:ca:dd:31:bb:b7:15:
                    32:31:71:db:dd:d8:d5:d4:62:b8:be:9f:08:86:9a:
                    2f:a5:1b:6c:27:ea:2c:e9:51:70:cf:42:66:f7:f9:
                    6b:c1:16:b3:56:d0:e5:6a:1d:59:13:1a:81:89:16:
                    00:8c:04:29:17:d4:79:08:66:8a:1b:45:0c:1b:81:
                    30:02:53:7b:ee:2a:98:9e:f4:c1:02:bc:9d:12:9f:
                    cb:c4:a7:a6:2c:2a:48:5b:e9:b9:de:f3:34:48:db:
                    c6:79:de:e9:05:e7:1f:ed:62:54:eb:76:e5:8a:b5:
                    45:95:ca:53:dc:22:65:f4:60:52:45:b0:41:06:b1:
                    f7:89:4b:47:ac:79:a3:18:83:c4:ca:e6:1b:c6:84:
                    7a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F0:23:80:6A:88:33:0B:27:D6:96:19:D4:6F:80:AF:74:9A:1E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a736b29b-8772-3206-a73f-e395ff229dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:63:0a:31:48:5b:b0:a3:ba:fd:9d:38:38:20:90:2a:97:
         99:b0:58:33:21:ce:34:86:d8:05:b8:30:5b:1b:9a:3c:1a:e0:
         23:25:5a:3a:d5:d4:7d:2e:59:9f:23:6d:f1:d2:37:1d:33:03:
         bb:ba:ba:31:dc:d3:1c:9c:29:ac:24:7e:59:71:1b:b9:0e:6b:
         4f:72:01:4d:db:16:4c:78:6f:c0:ff:37:86:f3:25:4d:7a:51:
         29:9b:ae:8b:02:85:fa:b3:1b:21:8a:93:d6:e9:2b:6e:a9:d2:
         7d:b1:f2:91:f3:1e:a0:2d:56:ec:49:b6:89:9d:a3:88:40:e2:
         7c:10:98:ea:3d:ac:98:de:9d:0a:89:95:20:40:01:a6:a7:2e:
         a1:04:1d:7d:0c:53:f0:77:25:d0:58:c7:d0:1f:ad:9f:cb:d7:
         3e:2e:e0:77:c3:11:b4:98:91:0d:21:49:2e:e9:59:6f:2b:80:
         01:69:3c:40:73:2b:90:76:d4:c4:3f:37:ad:76:9e:b1:19:07:
         20:10:d1:5c:cd:8d:10:c5:3b:27:bb:46:77:e8:bd:e9:43:34:
         e5:20:6a:21:f7:69:49:ea:be:48:c9:9a:07:cd:b1:cc:c1:aa:
         5c:c3:7d:7a:f0:c0:8c:b5:40:a2:eb:46:75:24:7b:85:d2:24:
         b0:ab:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:28 2025 by rpki-client