Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
File:                     b9390863-5768-389d-9641-597ee1febed8.roa (raw, json)
Hash identifier:          eoHh0J6Rbub1lGkLiTUVy7daeceunH3KA74lrzAnRSI=
Subject key identifier:   A3:A0:20:0E:5C:77:F2:F9:BB:3A:B7:87:17:69:2A:B1:05:73:DA:F1
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F432858494733FB9671F9385D0B92B0AE
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     31998
IP address blocks:        23.164.80.0/24 maxlen: 32
                          104.224.60.0/22 maxlen: 32
                          206.168.176.0/22 maxlen: 32
                          208.70.12.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:fb:96:71:f9:38:5d:0b:92:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=0bca0567-1d7f-437f-807c-bad701888f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:35:27:3b:07:25:8a:fa:4c:98:91:d7:7c:da:
                    c7:d6:9d:e2:6d:e0:83:d7:b6:77:7b:71:06:8f:6c:
                    5c:b9:37:40:6d:08:b2:b4:9c:8d:f3:05:74:b5:9c:
                    ff:44:d2:6e:a4:8e:45:e2:69:d9:f7:de:4d:c5:79:
                    f2:40:56:e6:b2:84:a8:5c:d1:54:eb:a6:5a:57:5e:
                    41:43:a9:3e:62:92:de:dd:77:eb:a6:07:bb:48:5a:
                    5f:40:59:f8:1b:22:df:e2:f1:d5:82:36:4d:39:1d:
                    c9:1d:51:3c:da:48:b8:72:b0:28:e9:65:13:64:be:
                    4b:8c:8e:db:bb:cc:13:2c:95:3a:11:a2:93:52:be:
                    b2:4e:dc:31:4d:f9:c3:fc:79:36:24:78:fd:07:5b:
                    fd:23:cb:64:88:ad:3a:1d:bd:04:00:5b:38:a3:55:
                    59:44:ef:44:c7:98:0a:a8:82:31:54:ee:45:13:50:
                    de:a6:8e:89:b7:d2:7f:e0:42:f9:22:48:c3:5d:63:
                    4a:0e:ed:7e:b4:7d:00:c8:8c:6c:0a:55:46:ec:4e:
                    09:24:33:9a:f5:14:ab:3b:b2:54:dc:b2:4d:d9:4d:
                    c1:1e:9b:6a:44:6e:50:33:99:5c:b2:25:85:7e:94:
                    2f:21:18:51:0a:ba:32:f4:03:f6:09:4d:ce:79:2b:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A0:20:0E:5C:77:F2:F9:BB:3A:B7:87:17:69:2A:B1:05:73:DA:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.80.0/24
                  104.224.60.0/22
                  206.168.176.0/22
                  208.70.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:00:d8:c6:9f:3b:31:94:84:d4:b4:a7:57:2f:a3:47:32:
         c2:7d:37:97:9f:65:43:09:c9:0f:00:15:a9:21:05:03:aa:dd:
         e3:71:51:0d:a4:7d:b7:a6:ee:87:c2:b2:18:a0:49:1c:22:51:
         5a:3a:f6:a2:64:29:02:fe:5c:a3:0d:fe:e4:76:20:8a:ba:48:
         6d:20:87:ef:82:40:d1:24:e2:e1:e6:93:7d:a8:8a:da:06:0f:
         dd:2d:90:48:0c:76:f3:4b:e6:fd:51:b2:0b:17:5c:30:a6:0f:
         43:ad:3f:ce:ec:6f:35:45:64:f1:71:d4:a2:d0:d5:82:4d:ee:
         1f:27:a3:b3:1e:df:10:d4:66:d5:f6:14:ff:6d:14:af:c2:5e:
         8a:32:01:30:f7:73:3f:ee:c7:19:aa:2b:00:9c:0d:ae:9b:b4:
         b9:9a:7b:49:20:af:8b:20:6f:d9:77:fb:b0:13:20:16:be:ec:
         be:b0:f7:00:65:57:80:e6:f7:14:9e:b3:57:39:b1:28:8b:17:
         c6:2e:f0:e5:1b:63:c8:9a:9c:f8:3d:9a:2c:b7:31:6e:33:a9:
         9a:f2:4b:60:f3:0a:29:99:a8:7c:87:a0:2d:1a:c8:e7:c0:1a:
         4a:71:ec:4a:46:45:1c:9d:71:5d:4c:f4:70:2d:2c:d5:bd:8d:
         70:d6:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:39 2025 by rpki-client