Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/26115400-1731-3ee0-91d7-565246ab2b6e.roa
File:                     26115400-1731-3ee0-91d7-565246ab2b6e.roa (raw, json)
Hash identifier:          MreGVMPjJnficUoBR5y9msIMJkckmz4xQjHELHcKT6I=
Subject key identifier:   1E:23:90:41:19:30:73:36:94:06:5D:39:C6:4B:E2:91:82:F9:F1:75
Certificate issuer:       /CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea
Certificate serial:       010D0C9F43285848100A94D38CCD02AF896F8840
Authority key identifier: B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/26115400-1731-3ee0-91d7-565246ab2b6e.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     395475
IP address blocks:        23.135.128.0/24 maxlen: 24
                          137.83.36.0/23 maxlen: 23
                          139.60.224.0/23 maxlen: 23
                          139.64.184.0/22 maxlen: 22
                          165.140.244.0/22 maxlen: 22
                          2607:ca80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:94:d3:8c:cd:02:af:89:6f:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4b73f9-c69f-44fa-93bd-d153e29d02ea
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=c140f03f-bada-4505-9826-3cb4b3014bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:d4:63:af:36:42:65:c7:80:51:4a:37:37:
                    6b:c2:1a:7d:f4:91:3e:56:95:b6:e2:de:fe:b6:da:
                    aa:27:36:ec:94:2f:8e:23:e4:79:b6:33:21:3e:29:
                    b4:01:0e:ba:36:70:00:b3:1a:16:ed:fa:82:6b:d1:
                    97:bc:e1:fd:da:30:a1:95:4e:e4:a6:3a:5e:e4:fc:
                    e1:92:38:4a:47:5d:4e:2c:ec:e6:b4:87:3c:ee:43:
                    93:65:ea:55:93:ea:47:13:62:18:87:64:22:36:5e:
                    6e:32:18:bd:24:50:39:a2:7a:b0:05:b4:60:fb:e5:
                    76:e9:99:b7:cc:50:32:82:be:c6:f1:f8:06:8b:4d:
                    ca:91:16:d5:a4:85:83:e0:d2:0a:b8:6a:27:40:00:
                    2d:b8:b5:92:ae:26:24:ee:0b:a8:29:db:4a:28:0b:
                    44:37:12:10:eb:9d:c8:d1:9f:77:14:52:83:34:84:
                    58:88:fc:a6:58:3d:f3:e2:b0:ca:09:c4:2a:87:67:
                    9b:6b:a5:00:ab:9d:00:20:4e:f8:03:89:53:c7:80:
                    2c:aa:28:62:97:41:ec:12:dd:15:fb:0a:bf:c5:63:
                    15:43:3d:4e:50:46:7e:0b:e7:e2:d0:ac:d0:4d:b5:
                    08:8a:ba:c3:eb:cf:bb:56:fc:b4:67:58:8f:0a:3d:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:90:41:19:30:73:36:94:06:5D:39:C6:4B:E2:91:82:F9:F1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/26115400-1731-3ee0-91d7-565246ab2b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.crl

            X509v3 Authority Key Identifier:
                keyid:B4:7C:B3:9B:23:EC:37:AD:82:F4:DD:0A:41:31:9A:CA:F6:89:5B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc4b73f9-c69f-44fa-93bd-d153e29d02ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.128.0/24
                  137.83.36.0/23
                  139.60.224.0/23
                  139.64.184.0/22
                  165.140.244.0/22
                IPv6:
                  2607:ca80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:c7:da:16:0b:b6:b7:b8:16:8b:50:e6:d3:78:7d:35:38:
         56:77:da:c2:05:bd:33:e1:83:f0:33:29:a7:bc:78:bc:7e:51:
         16:9d:d2:e7:d4:95:e3:e8:d2:fd:a2:33:93:53:f0:82:76:f4:
         b3:eb:d6:a4:de:4e:b4:bd:31:27:35:22:0d:84:d7:84:95:78:
         86:88:dc:22:45:88:41:2c:b0:8e:09:42:f8:14:71:3c:81:55:
         4e:e4:8d:84:7c:89:28:83:37:70:b0:c0:57:dd:77:df:17:d8:
         c2:3f:ea:d2:cc:a5:13:df:09:00:21:b3:10:97:0f:ed:89:51:
         14:52:b0:6e:aa:8d:a8:52:11:9d:66:f6:54:f8:c6:63:20:96:
         02:af:78:4a:cd:e7:c6:8a:c1:20:ac:b5:42:68:56:fd:cf:93:
         df:e4:f7:f3:0d:af:a8:47:ea:1a:05:bf:ae:eb:0e:81:04:9a:
         0e:b8:c7:b3:84:05:29:d7:8c:35:7c:6d:40:40:5a:b6:5f:b4:
         f7:f3:2e:16:8a:fd:ed:98:c9:ff:25:06:d2:14:01:db:38:df:
         94:23:41:53:8c:16:51:ee:54:10:ab:c6:fe:fb:b1:f5:0a:20:
         08:f6:61:c3:fb:cb:8b:3a:be:4e:cb:58:34:52:8c:ae:b2:d4:
         28:23:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:50:55 2025 by rpki-client