Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa
File:                     bc429191-75db-38f2-b3f6-58944bfff934.roa (raw, json)
Hash identifier:          Z+aE749S22XHAzftBbpTKl4ng8x1Zy2ESIe9NHBSjFY=
Subject key identifier:   1F:99:6F:71:0B:CF:98:00:C3:BB:68:91:19:B4:07:05:98:C4:DB:79
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584917DC02E79CE108A8D2C7F0C0
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     27523
IP address blocks:        23.175.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:02:e7:9c:e1:08:a8:d2:c7:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=7ac1feb8-69b5-40ac-a5ff-e02a7dc259c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:85:a6:3a:b3:cb:11:0c:c5:bf:64:71:6e:d7:
                    fd:9c:3c:9a:03:0c:30:66:20:d7:9a:c1:16:e0:cc:
                    95:07:80:2b:ff:62:39:e2:c0:e2:14:18:0b:e6:93:
                    92:01:dc:c1:67:09:2b:e1:aa:f6:57:4c:7f:cf:24:
                    48:10:7a:fc:a1:51:da:87:0d:5d:5e:bf:b2:95:71:
                    0b:75:aa:d1:68:c5:8c:aa:ad:62:73:a8:da:92:60:
                    c0:9d:c4:b8:d0:c5:9c:f7:bb:18:5a:0f:a8:75:a3:
                    f0:b4:de:ec:15:e0:63:47:a0:8b:99:9c:fe:95:ad:
                    87:23:07:61:bf:68:33:b3:99:41:17:9a:b0:33:f9:
                    18:dd:75:18:1b:ec:39:72:98:cf:b1:67:cf:4b:d3:
                    f7:c5:f1:1f:eb:31:d1:5b:4e:c7:3f:9b:c3:01:ac:
                    d0:e3:cd:b4:e2:ab:dc:61:df:9a:28:49:dd:32:da:
                    a0:ad:12:1e:d7:ff:44:97:8c:2e:3b:87:c1:f7:74:
                    b3:7a:b9:67:e8:7e:e2:c1:2c:95:71:f4:76:b5:7d:
                    f3:c9:90:d3:1f:95:ba:76:b3:67:10:bf:69:ed:1b:
                    72:f3:91:ee:f4:67:2e:8d:d3:b8:54:86:af:b8:d7:
                    d7:1e:55:49:dc:c5:94:60:19:ad:09:c0:ea:17:73:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:99:6F:71:0B:CF:98:00:C3:BB:68:91:19:B4:07:05:98:C4:DB:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/bc429191-75db-38f2-b3f6-58944bfff934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e3:35:c2:10:9e:cb:b7:b9:d5:4c:e4:de:a8:77:4c:d3:a0:
         1c:52:d4:be:39:64:e5:53:26:65:be:61:25:50:79:9e:1f:9f:
         de:07:a8:4d:ed:10:38:d4:08:c9:f5:5f:9b:fb:f0:63:02:af:
         e3:6f:51:e4:56:28:07:71:ae:98:75:59:2f:88:4b:4f:7a:f1:
         6f:da:40:cd:98:7f:23:a5:8f:90:1e:c3:f9:00:c2:5c:8f:41:
         46:4f:40:37:e2:9f:37:90:d4:a2:96:86:fb:ec:d6:77:16:9d:
         23:4e:41:fb:55:90:74:7a:4c:f0:5a:68:53:b3:ff:40:34:a9:
         46:58:8c:21:a8:ff:64:a0:15:ec:e4:59:be:72:ef:7f:d8:88:
         62:e7:ab:6e:fb:f1:0e:44:70:59:b2:d5:aa:7a:6d:8f:27:63:
         27:c1:af:a1:c9:9b:0e:fa:e3:31:6b:29:32:eb:a7:0c:09:e8:
         b9:82:5d:d4:9d:00:d4:ba:5f:a1:70:2e:22:73:6b:ee:8d:d5:
         85:05:ee:ad:3d:b4:f2:c7:d3:36:a2:e9:f1:08:f1:4f:fc:a9:
         22:90:5e:79:19:5f:70:76:df:0a:df:80:fb:d9:1e:ee:92:23:
         9f:25:ef:10:88:02:34:4b:26:51:74:d6:cd:cf:65:c8:5d:9e:
         25:40:bf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:43 2025 by rpki-client