Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa
File:                     3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa (raw, json)
Hash identifier:          3l/VWS06DsksXthtbXbSlUhI0lbuOinTGhu4l/eeUjQ=
Subject key identifier:   CB:39:CC:4A:C1:E8:E3:FF:E9:6C:68:1C:FD:73:8E:8C:AA:7A:DD:B1
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285848D7A64F3B40C6288EBE19BC40
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     23470
IP address blocks:        23.133.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:4f:3b:40:c6:28:8e:be:19:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=e39e5824-24de-4b92-a061-4086ebcd3965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:12:cf:26:1a:2e:f7:f8:67:60:bb:85:c0:
                    64:6d:2c:db:57:4d:0f:31:0f:00:a6:e1:8a:2b:a9:
                    d4:22:f2:6e:14:6e:27:59:da:45:e9:34:5e:02:d5:
                    f5:d4:92:16:09:09:77:34:5f:15:48:f4:fc:e9:c7:
                    82:0f:d0:e5:83:3c:33:9c:a2:f8:4d:6e:83:2f:9f:
                    fb:e3:3c:28:11:31:bc:fa:38:94:b0:20:4a:ef:f1:
                    72:a4:d0:1f:90:ab:11:e1:39:87:c3:ed:97:ef:78:
                    07:b5:51:71:be:ca:7f:cc:d7:92:bd:4a:24:de:24:
                    c5:aa:eb:ca:40:18:b1:52:ed:35:93:09:45:eb:80:
                    2f:06:c6:5a:96:03:2b:ee:14:58:32:27:3a:a3:41:
                    f3:0f:15:f0:7f:8f:6e:cb:22:7c:7d:e3:b0:7b:0a:
                    72:dc:bb:5e:f7:77:01:53:40:04:9c:f0:12:69:a9:
                    53:41:5d:4d:fb:87:28:05:75:4c:24:4c:7a:bf:ea:
                    03:a0:74:7d:54:05:fb:a0:a4:58:c7:12:c2:3d:d2:
                    ab:68:b8:95:72:33:a8:3c:d6:00:0d:78:86:40:2c:
                    5c:84:a9:11:98:51:04:d9:d1:fe:be:06:3a:31:81:
                    bd:88:76:41:a6:d8:0b:41:95:6a:66:b5:e2:e5:a1:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:39:CC:4A:C1:E8:E3:FF:E9:6C:68:1C:FD:73:8E:8C:AA:7A:DD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/3ebc8de2-393a-3fc9-b573-24293f9e3cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f3:5e:43:4a:33:8f:e9:4b:e4:a6:c5:59:16:c8:9c:6d:e6:
         2e:69:8a:99:39:8b:91:53:8f:73:f3:a0:85:18:35:6c:c8:ab:
         15:7a:60:92:0a:86:5b:f0:f9:e9:13:a0:ef:a0:c1:55:5d:89:
         b6:4f:40:5f:80:79:64:12:34:f6:69:9f:d6:54:18:b6:07:81:
         fb:b1:2b:bb:d9:c5:a6:fd:82:02:9b:ff:aa:0c:35:a9:02:bb:
         90:01:05:02:eb:aa:ef:0a:da:59:33:52:e3:32:7a:07:0b:64:
         fd:ba:5c:a8:f8:9f:46:46:87:07:83:83:b5:92:b1:5b:a7:b6:
         3f:3b:fd:93:42:e3:42:5c:ea:68:7f:dc:73:d2:00:63:a1:cf:
         ce:4e:22:55:ee:e1:4d:0a:9e:0b:df:a2:d4:5e:f9:73:35:b9:
         61:c6:7e:8e:8c:b6:09:1a:2b:86:39:ab:5f:82:c1:c4:c5:ad:
         25:6b:5b:fd:1f:ee:36:a6:bf:3b:19:1d:6c:ff:28:8e:59:58:
         40:f2:c7:e9:b0:0b:c2:2b:a8:f6:57:4f:4d:bf:cd:46:a9:cd:
         c4:4a:e8:07:4c:3f:41:81:08:9f:b1:61:de:e9:17:f4:fd:15:
         41:b2:9f:7b:6c:d5:7d:7d:0d:26:aa:a4:dd:9c:28:37:88:bb:
         98:61:72:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:37 2025 by rpki-client