Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa
File:                     0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa (raw, json)
Hash identifier:          dNqXwAxu+uHiBRT8Qx/v2GaBsw+aXEzMbC6DFK20U5A=
Subject key identifier:   E5:34:90:4A:CD:0A:27:EF:5D:07:BB:5F:C4:4A:24:74:AA:5E:5C:FC
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F432858487CEB343D40EB6F43F64EF900
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     142616
IP address blocks:        23.249.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:34:3d:40:eb:6f:43:f6:4e:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=79559a56-0e5c-4a02-87c0-001f9169cdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:f4:cb:c0:b4:a4:b6:13:e9:9a:cb:8d:49:
                    b1:c5:84:d9:23:98:80:e5:60:47:6b:59:4f:0d:75:
                    d8:a9:bd:75:89:73:6f:07:9a:33:00:e6:7f:b3:2b:
                    0d:d4:93:a4:19:21:a5:e1:c0:79:27:fe:a6:b1:fe:
                    44:85:12:ca:23:a3:05:df:8b:e6:d0:dc:8f:2f:04:
                    b6:a0:8f:41:4a:b5:52:47:59:12:47:a2:60:45:86:
                    15:65:1e:cf:74:be:cb:5b:13:dc:17:6d:2f:12:92:
                    95:e0:e4:ce:ba:cb:31:40:cc:fb:68:ed:1a:e6:1e:
                    23:94:aa:ba:e5:f4:1d:67:5a:89:b5:4d:fe:de:85:
                    2a:7d:c4:79:b5:50:c4:08:bb:76:22:40:03:48:03:
                    50:2e:4b:0d:a9:0d:2c:50:99:1a:1e:7c:93:73:fb:
                    fd:30:56:5e:b8:87:c4:af:0d:15:29:5b:be:71:44:
                    19:76:a5:d5:9a:c9:d1:cc:36:f8:09:fb:6e:f4:bd:
                    d5:b6:28:38:25:dd:3b:e4:64:6b:86:1c:7c:b2:1f:
                    53:c8:23:a5:93:f7:73:d0:d7:20:12:de:fb:15:ed:
                    8a:39:d1:f5:c4:92:d5:6f:28:ef:ca:86:3f:d5:d3:
                    45:79:c6:13:7b:cb:f2:59:6c:4d:ee:87:e8:86:4f:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:34:90:4A:CD:0A:27:EF:5D:07:BB:5F:C4:4A:24:74:AA:5E:5C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/0b0d8a04-e758-3ac0-99b8-27bcf08b14ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:9a:89:12:9d:de:fe:33:ea:3b:1e:5c:a4:ac:c1:09:3e:
         7e:f8:c4:33:93:e1:66:6a:dd:55:52:a8:99:da:e1:6e:d0:0a:
         d9:c8:39:da:b3:d3:97:77:d4:67:0b:3d:a4:a5:dc:71:9a:0a:
         de:30:a1:32:fe:f9:31:e8:b0:43:9b:20:0b:f4:6a:95:dd:48:
         0e:c5:57:49:bc:8f:ec:26:59:31:b6:07:6f:09:a9:39:96:cd:
         85:60:15:e7:63:c7:91:e2:e2:a8:18:e4:62:0a:4b:f4:4c:13:
         bd:40:7e:2e:a3:2e:e7:69:6a:38:03:9b:79:d7:8a:39:46:4d:
         91:f6:1f:2a:8c:52:ae:d1:16:46:a4:fd:dd:1e:26:7c:88:5d:
         07:3a:1c:20:27:65:72:e9:d4:b8:7d:a4:f3:43:ed:64:e4:45:
         f0:04:18:9f:ac:de:54:8c:f2:a7:55:61:a0:bb:93:09:70:84:
         02:b5:3b:cd:3a:12:60:d0:3c:c1:6c:79:5c:6e:01:94:79:88:
         97:20:34:62:13:dc:a3:85:62:78:f7:7f:50:8a:ec:8a:15:3c:
         95:d6:0a:da:87:3b:88:0c:e5:19:0e:22:c2:d0:fa:b7:7e:46:
         6d:59:49:f0:bd:78:94:34:12:03:c6:5a:f2:4b:49:76:b1:01:
         d0:99:19:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:39:52 2025 by rpki-client