Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa
File:                     4fcb65a8-ed13-3f21-9803-4298a1362328.roa (raw, json)
Hash identifier:          rxSIdI3jp04rmWcyWnyDZQp+FqlROGj5Yi+dfx4d1RM=
Subject key identifier:   39:84:C8:C0:E1:78:0D:28:7D:FE:79:3E:42:A8:C3:CB:DC:1A:CB:C8
Certificate issuer:       /CN=6c969b15-97c7-4334-a334-afc07d03fab9
Certificate serial:       010D0C9F43285848854B5263468AF5EB0EC79840
Authority key identifier: A3:36:0B:03:C0:44:A2:73:55:6A:B2:B1:8D:E3:52:36:C3:C0:6C:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     152918
IP address blocks:        23.148.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:52:63:46:8a:f5:eb:0e:c7:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c969b15-97c7-4334-a334-afc07d03fab9
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=3be425c6-f84d-4e77-a843-9937157c96a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:a5:33:d1:e5:58:1b:b5:d6:c9:73:fb:50:
                    ea:19:f0:d2:24:1c:f7:74:57:69:a1:cf:6f:cd:ca:
                    0a:9c:d2:df:1d:cd:3f:5d:f5:ac:c3:cd:36:5c:57:
                    e6:c4:be:70:a5:31:a7:88:0f:33:6c:0a:93:01:73:
                    7f:5a:87:5a:d1:b7:da:1f:9b:4a:c5:85:6f:06:66:
                    11:04:d9:aa:41:65:72:50:5d:b8:4c:5f:21:12:04:
                    df:fb:d7:44:50:d1:a6:0f:20:55:0f:8c:7d:b2:73:
                    36:93:4e:ec:4b:74:4e:6c:f7:82:ef:d3:ba:d6:98:
                    ae:fc:04:63:fe:f8:b5:a1:2a:2f:ec:d4:57:29:c4:
                    99:e5:46:26:f6:93:d2:b9:e6:b9:31:d7:59:8b:59:
                    7b:e4:7d:aa:27:d9:88:a4:73:7d:6a:f2:c9:d0:8b:
                    44:89:33:80:e7:83:8a:dc:69:bf:27:60:be:44:f5:
                    9e:d0:f7:58:f8:c7:bd:ad:ff:2f:b7:a6:ea:fa:d3:
                    a4:df:6a:a8:ed:3c:de:01:00:87:80:15:d8:00:76:
                    54:2a:40:87:dc:02:81:d3:07:c5:48:0b:1f:5f:32:
                    72:20:e7:f0:52:19:25:60:91:e6:1f:27:c4:fb:28:
                    69:0e:58:42:19:28:3e:4a:71:ad:98:34:ea:6f:66:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:84:C8:C0:E1:78:0D:28:7D:FE:79:3E:42:A8:C3:CB:DC:1A:CB:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/4fcb65a8-ed13-3f21-9803-4298a1362328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9/6c969b15-97c7-4334-a334-afc07d03fab9.crl

            X509v3 Authority Key Identifier:
                keyid:A3:36:0B:03:C0:44:A2:73:55:6A:B2:B1:8D:E3:52:36:C3:C0:6C:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6c969b15-97c7-4334-a334-afc07d03fab9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:f1:76:47:fd:ef:b5:a4:27:f8:6b:15:6b:80:b5:c9:cf:57:
         93:41:91:74:f7:9b:1f:27:59:f8:53:32:57:65:6b:a7:15:e0:
         af:cb:9a:02:9b:2f:27:a9:6e:d3:f0:e9:dd:25:21:1b:96:31:
         9a:50:1c:cd:e1:63:ac:a9:6c:3f:de:a2:96:62:de:ff:50:26:
         a1:da:ce:2a:7d:ed:b5:aa:77:61:7c:2f:58:ad:26:e3:03:08:
         38:db:58:59:c8:25:c8:77:eb:5b:23:28:8c:d4:4c:bc:35:6e:
         59:63:d2:d7:76:87:c4:f5:5a:46:8c:94:87:1f:30:65:28:93:
         71:2d:b1:18:3f:57:4c:c7:5a:79:3f:b1:bc:e5:32:b7:67:dd:
         22:a3:99:ae:d6:48:19:83:85:80:28:df:e8:fa:71:f7:60:6a:
         13:f7:52:27:9f:c4:0e:95:fd:0f:77:14:cd:99:71:4b:2e:7d:
         57:90:9e:b1:6d:c4:01:d5:70:0d:82:49:da:26:95:3e:c8:12:
         36:e8:61:f2:71:b5:2b:8b:a5:ce:48:a5:15:77:b8:c2:6b:6d:
         27:e0:ff:ad:9f:33:d2:1e:fa:10:8c:f1:5e:a0:1a:98:22:06:
         25:13:85:fe:45:e1:7f:08:96:18:fb:e8:36:ed:c9:cf:33:75:
         34:e3:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:57:20 2025 by rpki-client