Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa
File:                     5c279b9f-62e5-3859-80b1-76b8ca66a008.roa (raw, json)
Hash identifier:          Gm112UXIMgZ+m7mWeqm8DewAvh1F04P8HglgVR0eub0=
Subject key identifier:   EA:E7:B2:9D:99:22:F9:1C:69:72:01:0A:D5:C5:E0:4E:97:4F:71:EE
Certificate issuer:       /CN=4182f5c3-1977-4f18-997f-c945eaea051e
Certificate serial:       010D0C9F43285848222FE7A5080576DD2B913700
Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     18470
IP address blocks:        23.154.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:e7:a5:08:05:76:dd:2b:91:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=d49effbf-24e9-48d2-abf7-c4af83377cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:b4:18:4a:64:ad:5e:8a:7a:b6:cc:1b:fb:
                    f4:84:f1:40:ac:7c:78:35:f4:d4:42:c7:48:38:18:
                    40:7c:1a:42:4e:11:91:83:97:97:ab:08:ea:41:d4:
                    94:d5:93:4a:35:b5:97:cb:fb:bc:15:ed:50:13:b0:
                    c5:64:61:a0:5c:73:ec:33:ac:28:54:b2:9f:38:4a:
                    26:08:bf:1b:7e:18:d2:6d:a5:eb:01:68:3b:90:e5:
                    2d:98:d1:8a:6f:ac:f5:7b:59:f2:fa:c3:a1:58:22:
                    c6:38:a6:ee:79:29:c8:2c:13:d4:16:db:1c:94:ea:
                    b3:56:96:55:4f:4d:79:05:22:a4:ae:2d:75:83:b7:
                    e4:ab:69:ce:8d:eb:d9:6b:bd:82:a0:1e:6d:29:75:
                    cd:bb:8a:5e:b4:99:08:f0:18:96:ab:30:5f:e6:23:
                    d8:18:b9:51:11:99:10:9c:28:5a:b0:19:b7:0b:c1:
                    b0:e4:26:2f:1e:06:6f:73:86:b2:41:7f:0a:cf:58:
                    2e:84:e1:9c:e4:46:d6:4a:e1:ab:9f:ec:e6:18:d0:
                    1a:cb:bd:42:ed:6d:d7:c4:49:be:f2:0d:d2:20:59:
                    48:ec:14:3f:dd:d7:46:0f:48:d6:5e:14:cf:67:18:
                    22:a2:ae:59:29:b1:95:01:17:0c:3a:f2:4c:85:57:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:B2:9D:99:22:F9:1C:69:72:01:0A:D5:C5:E0:4E:97:4F:71:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:10:57:42:7e:0b:f0:36:ff:36:8b:91:ec:d5:aa:8a:7a:aa:
         70:15:1f:42:ab:6c:ba:76:8d:4b:1f:19:c1:b5:78:55:8f:a9:
         d3:e6:df:27:2c:ee:5c:8d:2e:44:d5:bc:f4:0b:73:d6:2a:69:
         11:c9:5e:37:83:c7:d7:76:52:8c:ec:1a:eb:42:8e:d6:56:51:
         76:f6:f7:32:d5:6d:af:df:95:e2:de:94:dc:29:c5:a6:06:c0:
         38:5e:29:69:17:bb:4d:85:12:2b:0f:8d:78:1d:cb:f1:ab:d3:
         e3:8e:76:b5:6e:26:21:c3:57:65:e6:89:de:45:26:08:1c:bb:
         c6:ef:e5:47:6d:11:a7:0d:1d:34:4f:ef:23:56:e1:b1:e8:cd:
         ed:99:5d:2f:91:da:b3:96:a0:6b:0c:14:4b:14:3e:ee:01:47:
         6d:3b:e6:7e:59:a7:c9:3d:94:cf:d6:10:1d:0c:19:66:66:42:
         b2:03:75:83:29:df:16:0a:56:4d:42:d3:5b:35:2f:6a:92:80:
         68:ad:c5:17:1d:d6:64:7b:ce:0a:5c:5a:6b:ad:c7:5d:c1:9e:
         00:01:92:e9:8c:8a:1d:f6:83:c6:b1:21:da:55:70:c7:89:6e:
         50:90:40:1b:53:3a:6b:f5:48:31:57:78:c1:7f:14:d9:ec:49:
         0d:03:b1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:17:45 2025 by rpki-client