Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa
File:                     037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (raw, json)
Hash identifier:          tW4SeVhAvBb27SM/hdFjYK8yExc8UwmbVHCEIxUcJBM=
Subject key identifier:   1B:01:2A:66:4F:93:80:55:C9:58:18:66:04:05:BA:BC:53:28:37:AA
Certificate issuer:       /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
Certificate serial:       010D0C9F4328584835BA944F6B44C27818C61780
Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa
Signing time:             Sun 15 Dec 2024 02:00:39 +0000
ROA not before:           Sun 15 Dec 2024 02:00:39 +0000
ROA not after:            Sat 15 Mar 2025 01:00:39 +0000
asID:                     395388
IP address blocks:        23.190.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:35:ba:94:4f:6b:44:c2:78:18:c6:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71
        Validity
            Not Before: Dec 15 02:00:39 2024 GMT
            Not After : Mar 15 01:00:39 2025 GMT
        Subject: CN=d5f3e0c1-d56f-4fc1-9702-df6c2d099b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:34:de:d0:58:04:9e:4d:92:60:3b:5a:60:
                    58:bc:43:dd:e8:c2:24:ae:04:f5:1b:a7:24:b3:ae:
                    12:9b:a5:1e:c9:d6:70:44:fe:f3:4b:0c:7b:08:79:
                    2e:ca:a3:d7:24:cb:3a:66:5a:9e:a1:7a:cc:1b:27:
                    a5:23:5e:dd:1e:2b:f9:09:32:e8:af:76:37:01:68:
                    b7:bc:7f:2c:0b:85:1b:df:ee:a8:b7:80:2f:d8:4e:
                    8d:ee:5f:5e:bf:2c:46:30:ad:60:27:94:dd:15:6b:
                    cd:f7:70:85:40:f6:d4:49:f6:08:ae:69:c7:de:40:
                    36:2e:e8:d5:42:75:d2:20:4a:9f:f9:7f:b0:d7:ec:
                    34:b0:94:ac:ad:de:62:4a:10:d1:f8:fc:e4:d6:46:
                    64:6e:06:43:18:41:d3:9c:26:4a:9b:77:68:67:97:
                    66:27:22:85:7c:c2:39:ae:5d:db:5c:2c:8f:f8:d4:
                    0a:27:7b:46:f8:e3:ad:ab:c1:7c:3b:44:98:0c:05:
                    51:1e:8c:80:6a:08:11:50:81:31:c4:59:68:04:e9:
                    b6:c3:d0:d0:e0:b0:fc:48:06:74:64:7f:1f:ab:7f:
                    0a:44:de:aa:31:8e:59:a9:09:90:aa:24:b4:5c:53:
                    ce:3d:b4:07:a5:ab:d1:35:f5:a3:12:bd:4f:e8:3b:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:2A:66:4F:93:80:55:C9:58:18:66:04:05:BA:BC:53:28:37:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl

            X509v3 Authority Key Identifier:
                keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:ec:1f:4b:17:50:97:99:26:d5:cf:9d:d8:26:82:ae:2a:
         8a:0f:84:fd:9a:39:53:fa:21:7d:8d:b1:5b:56:fc:7d:aa:47:
         1a:1d:f7:05:51:ca:f2:aa:02:ff:00:c1:8e:7f:36:9f:bd:f4:
         c9:1f:0e:6d:78:31:af:a7:f9:b8:40:ae:51:36:0f:a6:11:08:
         f8:3c:0c:65:3f:99:12:83:07:50:04:e1:63:4f:23:0d:62:e7:
         bb:f9:55:dd:97:d3:60:f7:a3:65:ff:42:95:47:2d:22:b9:44:
         aa:1d:e7:dc:2f:3a:27:9a:03:7d:ed:3c:d1:82:ed:73:62:2d:
         d0:d3:02:5d:f2:cf:62:28:e3:1d:70:58:31:a8:4e:78:a0:ff:
         0c:ba:8d:10:c9:fc:4d:63:b6:c3:7c:14:a1:cc:41:01:3c:76:
         43:5c:f2:95:5e:41:4b:0e:a1:5d:a7:dc:56:b5:1f:54:e2:a7:
         0f:52:12:d2:d3:99:f7:d5:be:36:90:6a:5d:8d:10:4f:48:fc:
         22:cb:26:ab:d7:1f:65:50:be:44:df:cf:88:53:1d:f9:b6:69:
         75:96:2b:23:9e:85:a9:48:68:89:2f:7c:09:b7:f2:f7:fb:40:
         86:38:79:6a:5f:80:5a:02:d2:7d:07:c2:ac:44:b4:8f:f9:6a:
         c4:5f:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:09 2025 by rpki-client