Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/365750e3-c1d9-3d46-86c7-962e4322c6e8.roa
File:                     365750e3-c1d9-3d46-86c7-962e4322c6e8.roa (raw, json)
Hash identifier:          46lxtukSXHYVCJAa9CRJyzVHrIMSR5AijJ5KcvlrxIk=
Subject key identifier:   95:37:F4:38:7A:55:C8:D7:B4:18:69:E5:D5:27:B8:C1:84:16:93:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D0ABC69383E1A8410F57EA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/365750e3-c1d9-3d46-86c7-962e4322c6e8.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     44477
IP address blocks:        23.230.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c6:93:83:e1:a8:41:0f:57:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=4684917a-5a74-454d-a949-6252cecb56cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:cb:eb:d0:ff:e9:fe:90:03:01:4a:5a:44:
                    f7:b1:e0:46:24:ad:c2:7d:92:87:2c:c8:02:35:55:
                    1c:64:52:eb:e9:74:f0:a0:4f:ea:22:fa:41:56:24:
                    ae:24:21:db:28:b5:9e:18:fc:7a:a2:11:61:3a:6d:
                    20:6e:16:b2:b3:46:68:dd:78:b6:a9:17:aa:b7:d1:
                    9c:ef:d3:82:1f:69:77:61:1d:10:20:67:ad:b2:e2:
                    54:8e:5e:30:8d:b6:c7:81:22:49:d3:23:fa:08:5e:
                    59:30:89:1f:02:ef:ee:a0:43:8d:9b:21:31:9d:da:
                    c2:32:02:cd:1f:5c:7e:f7:76:d3:74:73:1e:13:46:
                    92:5c:79:2e:99:e6:2c:ea:13:e9:82:0c:c0:47:7e:
                    be:14:f3:d2:84:51:95:89:f8:ff:d8:e1:32:9c:f5:
                    08:93:07:5e:c8:9b:7e:52:81:fe:0e:e1:79:44:4e:
                    df:42:89:00:45:f9:a9:fe:66:8a:c9:58:86:a6:fc:
                    af:c3:ff:b1:69:f8:7b:d5:df:fb:a3:bd:7d:1a:e7:
                    c1:b2:a2:1a:ae:1a:ba:75:d4:6c:72:57:de:42:71:
                    dc:9f:ea:d3:c1:b6:bd:0a:10:5d:f6:33:26:e8:56:
                    fd:b6:d3:63:20:a0:2f:df:9f:06:9e:01:5f:15:14:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:37:F4:38:7A:55:C8:D7:B4:18:69:E5:D5:27:B8:C1:84:16:93:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/365750e3-c1d9-3d46-86c7-962e4322c6e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:80:24:c7:82:b1:a8:dc:f9:f8:68:a2:0e:7c:15:e2:95:62:
         03:ba:aa:e6:3e:8d:1a:98:98:d3:c4:ac:0f:db:91:78:4d:c9:
         3e:50:c9:ee:d7:90:95:7d:0e:72:90:d2:f9:75:5d:51:74:8e:
         df:c1:96:ba:36:cc:56:99:58:38:de:a0:cb:02:aa:4b:7f:04:
         87:93:c5:94:6d:17:43:5c:08:74:88:23:89:24:dc:97:38:37:
         0f:fd:57:e8:3a:1b:b6:19:4c:52:e1:a0:64:3c:63:d5:b0:75:
         93:f5:d0:05:63:45:1b:ca:74:94:14:25:52:6f:e3:e7:74:ef:
         f4:b9:68:1f:5d:62:ce:dd:28:66:e4:9d:3f:aa:27:92:c6:09:
         3f:06:a7:5a:79:e4:44:fb:b9:8e:da:22:9f:a9:77:45:95:0f:
         6e:ed:ed:fa:a2:b0:21:8e:cc:dc:5e:fb:8b:1b:ee:0a:35:81:
         d4:8d:bc:40:ef:b1:74:89:fd:f9:75:b4:bb:44:d5:1f:b2:43:
         3f:3c:e1:cb:1a:f5:2e:82:8b:cd:01:70:ac:63:c4:ed:f5:fc:
         5f:70:46:d1:1d:61:c8:b3:ca:d9:0a:73:e3:da:f6:99:ac:c5:
         27:ab:94:5a:9e:e6:84:f9:61:f5:ee:ac:84:1c:5d:c8:08:c0:
         ea:13:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:04:19 2025 by rpki-client