Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa
File:                     9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa (raw, json)
Hash identifier:          tWY1lEgSiYhR02loNZkZc1+sMrw+G5XMM4rNzOk01g8=
Subject key identifier:   F9:8F:6B:C2:A8:05:41:0F:48:47:4B:CA:32:CB:D4:74:A2:AC:AA:D8
Certificate issuer:       /CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
Certificate serial:       010D0C9F43285848E2D10918753653B1F3278C80
Authority key identifier: 47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     30382
IP address blocks:        23.142.32.0/24 maxlen: 24
                          192.67.68.0/24 maxlen: 24
                          198.51.8.0/24 maxlen: 24
                          198.98.14.0/24 maxlen: 24
                          207.229.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:09:18:75:36:53:b1:f3:27:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4d5dc0-6ca6-42f2-9772-3d414d369a85
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=7c8512a0-c0cb-484b-af24-01edd49e55a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:57:10:06:2f:a0:e8:14:28:0f:b6:65:3c:
                    fa:e2:9e:fd:aa:21:7b:79:3e:20:06:1b:c5:97:70:
                    35:48:10:06:a2:49:03:16:d4:5f:8c:74:25:a4:ff:
                    35:53:fd:d0:f5:a8:75:34:d9:54:0a:0e:55:62:81:
                    57:e7:b3:85:8a:b9:ce:bd:cd:0f:73:8c:3c:ad:ba:
                    90:25:7c:5c:17:18:ee:03:17:eb:cb:0e:d4:99:ff:
                    85:fb:8a:2b:c4:fa:da:30:89:94:e0:da:aa:aa:bb:
                    03:dc:b7:18:28:43:2b:86:de:63:05:22:eb:03:6a:
                    bf:7c:c7:bd:04:95:7e:e9:6b:8e:5b:e2:99:3e:51:
                    c8:06:c3:a0:ed:55:75:40:d8:00:77:45:00:47:16:
                    06:74:3b:19:5d:27:1c:0b:8a:b0:ab:81:6a:8c:4c:
                    21:81:3c:0e:0e:0a:9f:f8:b3:5d:b6:1c:26:bb:0c:
                    3e:8f:a5:57:f8:21:9d:e0:09:a9:1e:af:a6:12:d3:
                    21:c2:a0:1f:f0:fa:83:12:0e:9c:29:4f:ba:1b:19:
                    8a:12:ad:6b:f5:91:03:52:17:51:9f:a8:72:24:88:
                    18:44:2e:19:42:a9:6c:43:cd:61:d9:73:84:00:29:
                    74:f6:74:62:eb:ee:e9:40:8e:19:67:ef:ef:c3:4b:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:6B:C2:A8:05:41:0F:48:47:4B:CA:32:CB:D4:74:A2:AC:AA:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/9a5b3b3a-b5e9-35ee-bcc0-f334a83ffc01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.crl

            X509v3 Authority Key Identifier:
                keyid:47:08:75:1F:56:29:B8:0B:48:DE:E0:EB:AA:58:58:CF:81:68:FF:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e4d5dc0-6ca6-42f2-9772-3d414d369a85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.32.0/24
                  192.67.68.0/24
                  198.51.8.0/24
                  198.98.14.0/24
                  207.229.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:6a:db:6d:ff:31:9c:d9:3b:9f:af:13:55:7c:04:f2:97:
         2a:4c:65:6f:81:52:05:5c:34:92:85:95:e0:c5:c4:01:65:dd:
         81:39:91:f0:c0:c1:c9:b6:2f:5d:8f:65:cc:f2:36:c6:d5:0a:
         d4:a3:50:10:90:d6:76:09:42:6e:f1:da:f2:aa:cb:4e:aa:81:
         68:76:2c:4a:ab:3b:93:74:df:4e:08:a4:e0:34:0d:e4:22:98:
         7c:67:ca:2e:e5:d6:75:d8:50:ec:1c:34:b8:1c:bb:25:04:f5:
         e9:76:ab:eb:58:57:56:36:8c:e8:f5:21:03:07:78:f5:b6:28:
         b1:4e:5d:da:d7:f0:de:f5:f7:0c:5b:e4:35:f9:c7:21:fc:bd:
         8a:0f:3f:74:25:16:56:23:39:97:50:c7:40:57:48:89:4e:f1:
         f7:02:ee:ca:bb:27:75:fd:57:b8:88:46:33:0b:c5:1a:37:a7:
         e7:84:42:08:54:d5:9b:e4:49:70:59:d8:c6:41:5e:ab:9a:3e:
         0b:4a:27:ac:be:22:79:4a:14:57:18:c7:57:4a:47:a2:3d:f6:
         8a:3a:79:8b:0d:69:9b:f4:3d:69:63:4f:6b:51:f5:03:64:8b:
         7d:40:8d:ce:72:bd:23:74:75:36:d9:57:17:08:5e:c3:15:eb:
         e2:32:39:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:05 2025 by rpki-client