Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10c9f007-37cf-3a00-a823-fe6f73cae5cf.roa
File:                     10c9f007-37cf-3a00-a823-fe6f73cae5cf.roa (raw, json)
Hash identifier:          suFlZnEGQCtrFg155XWrOZIHWkz0evM8ZZuApo5J4Eg=
Subject key identifier:   6F:F4:69:11:AB:D9:57:7D:68:BD:9B:C9:D6:0B:EE:9F:1C:77:F0:D2
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F432858495198C3EBEC3050338CF25CC0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10c9f007-37cf-3a00-a823-fe6f73cae5cf.roa
Signing time:             Wed 26 Mar 2025 18:22:06 +0000
ROA not before:           Wed 26 Mar 2025 18:22:06 +0000
ROA not after:            Tue 24 Jun 2025 18:22:06 +0000
asID:                     20326
IP address blocks:        23.133.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:98:c3:eb:ec:30:50:33:8c:f2:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Mar 26 18:22:06 2025 GMT
            Not After : Jun 24 18:22:06 2025 GMT
        Subject: CN=09526e40-843b-4f01-bc5d-72b68f8af386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:13:52:f6:4c:00:d4:99:4a:19:e5:17:dc:27:
                    38:18:aa:fb:4e:38:0c:74:f7:de:08:31:65:cf:55:
                    0a:98:04:a6:d6:42:7f:1d:5e:39:34:ef:6a:54:88:
                    35:2b:17:df:ad:35:8f:e5:79:02:8a:32:98:4d:4f:
                    c6:bb:cc:b5:d2:45:14:9f:4a:5d:fd:ff:42:a1:1d:
                    a7:cb:6e:44:d9:d7:b0:fc:fe:c6:3a:c6:da:d0:79:
                    ee:1c:04:bc:e0:f4:fc:dd:a0:30:ff:84:c1:12:62:
                    42:2c:e8:6a:21:47:ca:70:d1:7a:6c:1d:cf:96:28:
                    80:16:cd:75:45:e2:a9:da:93:3c:1a:b1:d0:25:c6:
                    9b:c5:14:51:c6:23:67:1f:5a:f6:4d:ad:d1:d0:61:
                    67:0d:f6:82:8b:9e:a3:bb:0a:0c:f0:d9:c5:a7:e3:
                    f6:c4:28:43:fd:0c:4b:21:7b:7d:aa:12:7e:59:d5:
                    4c:41:74:f5:b0:7c:e9:86:92:47:f2:b6:ea:88:9f:
                    0d:61:cf:01:a2:94:20:d3:38:f1:98:0f:3e:65:f2:
                    ea:c7:5e:44:16:a3:ae:29:0c:4b:2e:7d:47:d1:c1:
                    89:82:51:b0:e9:71:a6:88:0f:0b:c8:f8:40:20:81:
                    26:0b:7e:76:5e:61:2a:2f:f6:61:94:97:86:a4:9e:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F4:69:11:AB:D9:57:7D:68:BD:9B:C9:D6:0B:EE:9F:1C:77:F0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/10c9f007-37cf-3a00-a823-fe6f73cae5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:31:6e:ea:a5:af:7e:c4:16:98:fe:43:55:17:9e:e0:a1:98:
         41:3a:4d:80:0b:90:08:3a:97:f4:fc:d3:b2:19:72:90:0c:93:
         ef:a9:d4:99:24:0c:35:ea:85:59:d2:96:e3:ad:a9:4e:62:09:
         41:4b:7f:96:f4:f2:e1:fa:ce:91:b6:90:5b:36:66:66:e6:22:
         1b:f6:77:1f:12:04:94:06:01:d6:5d:66:c2:73:7a:2a:58:6a:
         31:e9:f9:0b:e3:f4:6e:f3:6e:b7:2f:4f:5e:98:68:95:4e:8c:
         3a:6a:a7:e7:81:fa:0e:f0:b4:5b:3f:92:1c:54:48:cc:26:84:
         66:24:05:55:6a:af:6b:e4:b0:f6:93:4e:c1:a6:c0:37:db:91:
         ba:5f:1d:d7:0e:d9:b3:21:47:cc:30:5b:2b:d2:02:fe:07:a8:
         bb:66:ad:0b:03:8d:05:2f:4a:e6:0e:bb:65:d3:e9:75:59:5b:
         d7:fe:94:5e:67:10:8c:1e:5e:69:55:09:2f:5a:dc:28:74:85:
         c9:7b:81:5f:a8:71:9c:56:2f:7f:1d:de:6b:37:77:f9:31:6d:
         71:04:c5:00:81:d1:7c:49:e0:0b:a2:32:4d:fb:32:6a:ec:0b:
         fd:43:79:02:e9:a3:a3:f4:1a:db:62:6b:19:32:a9:35:f2:01:
         60:77:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:09 2025 by rpki-client