Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa
File:                     32332e3134342e3136382e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          anokySkpFKkJLmBvcbHguWiD93+P+o2LHXPsCyf9VfY=
Subject key identifier:   AA:5E:38:DE:B4:4E:F0:30:25:7C:26:AE:73:0F:ED:C6:A7:FA:64:64
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       543FE89785EF44090C114BBA691722A9B0428F4C
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa
Signing time:             Fri 28 Mar 2025 00:17:18 +0000
ROA not before:           Fri 28 Mar 2025 00:12:18 +0000
ROA not after:            Fri 27 Mar 2026 00:17:18 +0000
asID:                     50104
IP address blocks:        23.144.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3f:e8:97:85:ef:44:09:0c:11:4b:ba:69:17:22:a9:b0:42:8f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:18 2025 GMT
            Not After : Mar 27 00:17:18 2026 GMT
        Subject: CN=AA5E38DEB44EF030257C26AE730FEDC6A7FA6464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:5e:72:56:3c:ab:18:bc:a6:bf:89:4d:3b:
                    c2:2c:47:2a:4e:19:c8:a1:ca:6c:24:04:d0:72:6e:
                    26:69:a6:3c:77:7e:b5:b0:4c:ef:c1:44:1c:53:0e:
                    2e:71:d0:2e:64:a0:bb:2d:c3:3a:e7:ed:5f:ea:02:
                    4d:18:bc:ea:46:30:f5:98:2e:cd:32:e6:19:cb:ef:
                    78:2a:55:f7:a2:a6:bd:71:dc:2d:58:aa:ec:06:79:
                    7b:37:ab:f5:ac:4c:c9:81:71:cf:95:de:9e:bb:a0:
                    1d:cb:26:c2:78:51:85:84:26:6b:a5:0c:7d:3a:e0:
                    7e:9e:d3:d3:fc:70:d7:78:97:b8:25:02:6e:9c:f9:
                    1a:c7:8b:b5:6b:26:fd:cf:cd:30:be:4a:d0:41:75:
                    c1:77:79:b8:c4:aa:d9:3b:39:8d:e8:4b:49:55:25:
                    b0:26:cf:d9:67:f3:bd:c5:aa:61:08:67:f7:03:76:
                    26:72:f1:2e:3d:16:77:17:a0:a9:81:ff:53:01:c6:
                    9f:a9:5e:0f:90:79:e3:12:1f:43:03:2d:a7:eb:08:
                    18:16:96:e9:e3:e3:e5:37:40:6f:c4:d9:33:bc:57:
                    7b:41:9b:47:cc:ee:6e:19:7e:0b:64:30:4e:79:a8:
                    e2:08:e6:bb:f7:fb:b2:33:07:00:34:67:e2:43:7f:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:38:DE:B4:4E:F0:30:25:7C:26:AE:73:0F:ED:C6:A7:FA:64:64
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136382e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:9f:71:b1:fe:9f:05:22:38:78:c2:d1:58:be:c2:18:4b:
         a3:e8:98:5e:9b:21:aa:c2:f0:fe:32:07:0c:41:4d:33:f5:6d:
         5c:ce:73:f0:ad:04:82:41:bf:61:df:2c:16:a9:c0:b3:d9:88:
         42:83:a5:1f:fd:5f:b1:5b:be:96:0d:5d:08:60:e1:7a:5e:39:
         2d:d7:cd:f8:63:f5:40:f4:09:49:ca:fd:28:6b:d0:4f:0f:8c:
         c4:e0:a0:b5:1c:fc:16:6a:78:97:07:3a:93:ef:74:73:44:ad:
         70:fb:37:97:0f:c3:42:65:40:51:8f:35:12:b0:19:ba:79:5f:
         f1:ad:c3:c8:e8:91:90:3f:9a:6e:5d:03:2b:06:df:1e:98:39:
         32:c9:cc:69:08:9a:3b:b8:79:3e:c1:15:63:75:fd:cb:e5:e2:
         05:f4:72:b4:7e:a9:a2:d9:47:03:a6:a7:d7:dd:9e:3b:e5:71:
         2d:de:a9:3e:61:87:34:1f:bb:5f:36:0f:5e:d0:12:87:d5:b9:
         5d:86:ef:c5:52:3e:93:b5:e2:b0:78:d4:95:88:47:00:db:fe:
         58:9f:43:87:4e:31:05:c0:c1:f4:ae:bd:77:e4:58:b6:f3:48:
         86:7c:5a:8e:f9:3e:bc:98:1a:41:28:90:6a:7a:69:bb:87:49:
         56:a7:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:13 2025 by rpki-client