Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237ebd3f-d621-3e6d-8a30-497ba4e8e28d.roa
File:                     237ebd3f-d621-3e6d-8a30-497ba4e8e28d.roa (raw, json)
Hash identifier:          4dLTnTqboHWpE/Trz/Jhgn90vVfApLF1LLHScQxJe7Y=
Subject key identifier:   FA:84:A8:5B:EC:8D:C6:55:E7:C1:0B:66:60:B6:A1:6B:51:96:74:91
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F772D0F476D41036CC7580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237ebd3f-d621-3e6d-8a30-497ba4e8e28d.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     33668
IP address blocks:        24.127.46.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f7:72:d0:f4:76:d4:10:36:cc:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d81647d1-42a4-4921-a87a-e86ed9b43f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:0a:c9:54:93:0d:b1:dd:4f:8c:b4:c0:22:
                    2a:8d:30:1b:8e:1d:ad:20:19:77:3b:20:6c:21:a9:
                    e0:0d:5f:fa:ac:8c:67:01:bb:93:db:10:a5:21:db:
                    82:40:3c:d2:d2:8f:bb:31:ee:16:38:eb:3d:93:a9:
                    a4:86:70:0b:e6:08:28:fc:fe:d6:44:ce:7e:95:f6:
                    09:bc:18:06:ea:99:d0:3d:60:cd:1b:3f:5c:15:a5:
                    58:a6:46:65:19:6d:fe:c0:bb:79:df:d5:f2:d2:39:
                    bb:20:1a:3c:38:42:f5:3c:14:60:e9:cd:c3:56:05:
                    d6:da:ea:40:c2:50:7b:70:2e:8d:8e:f7:0d:15:5f:
                    9e:ea:c4:3f:02:9e:52:81:4f:44:e2:96:2c:4e:bb:
                    3e:bf:ad:78:92:f5:e8:ea:12:85:58:0e:74:26:0b:
                    9a:5d:2c:21:aa:ee:91:eb:9a:d0:80:36:be:70:a2:
                    0a:b7:8c:2e:ea:e2:5a:51:8a:43:78:82:97:aa:cd:
                    22:ea:53:5f:71:86:19:e2:b5:ad:79:a6:0a:1f:02:
                    2e:3d:5a:d4:bb:ad:ab:a8:82:88:f3:64:63:45:00:
                    49:91:b3:10:d8:fd:5a:79:bb:06:31:2a:7f:47:a9:
                    49:1e:e1:7c:32:ec:7d:fa:26:6d:e9:01:b5:c3:be:
                    db:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:A8:5B:EC:8D:C6:55:E7:C1:0B:66:60:B6:A1:6B:51:96:74:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/237ebd3f-d621-3e6d-8a30-497ba4e8e28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.127.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:b3:22:e7:5f:1f:c8:79:bf:cf:aa:a9:ad:ca:ad:56:9b:
         bd:a1:db:03:27:9a:9a:1e:16:80:8f:af:46:a5:0e:8c:bf:45:
         c1:b3:e8:22:9e:6c:1b:58:cf:b2:de:62:c3:0c:ae:e1:a3:be:
         b8:17:58:99:ff:0e:f1:cb:36:f5:eb:38:cf:2a:7c:dc:e8:eb:
         1e:39:03:ed:7f:44:42:0b:d6:45:ae:ea:13:26:c5:d1:75:e3:
         1c:12:39:2c:e4:57:6b:5e:a9:33:b5:34:1c:4e:34:6a:49:17:
         4f:be:46:ef:ca:a3:46:a3:45:68:8c:e6:ce:de:26:aa:95:06:
         01:3d:f3:73:52:3a:a0:27:0e:98:a3:56:6c:25:77:ac:bc:55:
         47:1c:0c:05:a7:f3:66:08:64:a0:9f:f7:37:a6:7d:25:db:d5:
         66:6b:16:a5:63:1d:df:65:f1:ec:59:91:2c:e7:f9:31:96:68:
         5c:11:ff:2c:bb:59:14:9c:40:ac:02:7b:cd:f0:b5:51:78:61:
         2d:be:e7:e6:72:47:89:c6:19:21:36:de:90:0c:37:c7:65:61:
         45:09:5c:5a:d4:58:0f:f8:72:9b:cd:b7:b9:f8:03:e4:79:2f:
         6c:90:3c:59:fc:8c:03:27:a3:b0:52:28:d6:09:50:70:97:30:
         0d:ba:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:03:59 2025 by rpki-client