Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa
File:                     bb834c26-6af8-345b-987c-726bee37be68.roa (raw, json)
Hash identifier:          flvtRzM0uXtsCwQ0wsPU/bHhYqn0PR58O5iUObZiPus=
Subject key identifier:   4D:BF:83:82:20:FF:5C:7E:A5:DC:36:38:5C:94:0E:C7:24:AA:E4:11
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848159FF986D8C035230A9CFB80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     59253
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f9:86:d8:c0:35:23:0a:9c:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=7d649c77-4ec9-42c2-8d54-086944121052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:64:2d:06:d2:ef:4c:e5:ca:06:ae:77:34:
                    2a:37:23:d4:16:13:28:5f:b2:f8:d0:05:1b:8e:76:
                    9e:ee:f2:7e:e3:39:48:a1:55:ad:38:36:99:b8:c1:
                    76:ed:82:f3:1c:2a:1b:97:6b:86:27:51:26:63:c8:
                    1c:83:1d:5d:0b:89:f4:10:f9:7b:db:7b:4c:c6:78:
                    e1:d3:c0:3f:bc:f1:5f:06:b1:3b:33:2d:fc:5d:8d:
                    22:d1:6d:47:71:0f:ef:93:da:71:bd:3a:35:7b:07:
                    de:c1:7a:e0:87:6b:1e:1c:97:b4:fb:20:01:18:65:
                    8a:d0:79:e3:e6:4a:a0:fc:9e:ca:95:07:fb:85:37:
                    74:01:0b:e7:ce:5d:fc:de:8d:b9:32:69:7f:af:72:
                    90:fb:ec:99:42:94:ea:e2:13:d2:1a:27:16:82:dd:
                    0c:5d:70:68:c2:b3:5d:72:9d:c8:9f:d4:ff:d6:68:
                    26:77:8e:01:59:6a:ae:0f:fa:27:22:ae:87:f6:10:
                    c5:5c:e3:21:cb:44:15:34:55:af:36:8c:d0:21:ec:
                    0d:99:b0:18:40:14:5e:36:0a:56:80:fa:5e:56:7d:
                    5b:13:17:1a:4a:62:a9:ee:98:6c:04:ab:a6:9e:63:
                    ac:f5:18:52:10:94:d9:f6:7f:28:70:a8:74:9b:c3:
                    e2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:83:82:20:FF:5C:7E:A5:DC:36:38:5C:94:0E:C7:24:AA:E4:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:39:6a:36:f7:b3:8d:be:7f:cd:84:7c:3a:3b:e6:e5:ff:1c:
         aa:11:06:db:3a:e1:3c:ac:46:24:4f:fc:de:8c:6f:64:c9:e6:
         65:b2:37:ab:c6:40:3c:5b:e8:17:2b:8b:31:5b:2c:8f:f1:07:
         4c:1a:7c:39:52:be:06:29:e2:19:dc:ad:19:01:e2:ac:df:5d:
         9b:7f:11:f6:62:23:95:89:61:b5:f9:c5:5d:c1:f3:d3:ed:8d:
         c6:b8:e8:60:bc:23:f9:1f:b7:d9:bd:a8:08:c0:fa:14:ba:57:
         60:85:3e:9c:4f:a9:93:9b:3a:a4:e4:99:39:7c:f5:0c:04:f9:
         85:f4:66:64:e8:c7:2b:90:8f:1d:4d:cb:20:13:b1:60:a9:e2:
         16:8e:73:54:43:82:5d:92:a6:ca:dc:7f:0d:70:61:a1:88:96:
         da:ad:af:fe:74:c0:88:f3:f4:22:3e:46:76:04:fa:6e:ef:d0:
         8b:7a:63:e9:ee:84:22:db:62:1f:0c:68:02:89:11:79:5b:5d:
         36:bb:49:66:ea:f5:6c:5c:21:5e:79:ae:e3:4a:e9:d9:1c:b3:
         39:79:c1:90:ad:58:32:7c:53:7b:41:a9:92:65:59:c3:bb:26:
         96:dc:85:1a:5e:f0:46:6a:f0:d1:ba:e1:f7:bf:22:d4:88:96:
         ab:d6:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:32:51 2025 by rpki-client