Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
File:                     840bdcf2-a766-3d79-86c0-da70ee77a15e.roa (raw, json)
Hash identifier:          Iru5FBr076H7Y22RtIIQuSKhdsAi8QllMjK278QnNq4=
Subject key identifier:   71:7A:29:6C:7F:2C:30:E1:79:65:D9:78:BE:16:C1:B0:4A:AE:C8:89
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F43285848A29B4EE10481D3AD68B87500
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        23.173.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:4e:e1:04:81:d3:ad:68:b8:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=707581f1-5823-4f85-a663-a6512295a1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:49:92:62:b6:42:78:80:ea:88:3a:96:8b:
                    a6:eb:21:20:0b:70:45:ad:f0:57:12:94:f0:9c:e8:
                    5b:a9:f6:4a:56:36:8e:dd:09:1b:14:f7:87:a3:79:
                    ae:d0:ea:8a:36:fc:61:fb:df:22:48:0c:9b:ef:23:
                    9f:52:91:4b:0d:26:7d:b0:f0:88:fa:90:bf:8c:8e:
                    0d:c8:e4:5f:e4:6c:72:6e:a7:5b:4e:e3:84:36:eb:
                    8c:81:a6:fc:08:db:b1:57:e3:62:32:ef:37:bf:b0:
                    50:af:9a:be:94:36:13:b1:84:15:cd:47:63:9a:26:
                    d2:6c:22:68:41:f3:50:e5:eb:a2:5c:cb:31:b2:74:
                    f1:c7:e9:1d:87:8d:d5:04:2f:f0:d4:8c:65:da:27:
                    21:e8:89:af:a8:a1:04:86:d4:65:03:fc:91:d4:68:
                    a1:e1:13:46:b4:2b:6e:cd:e9:06:96:ae:3f:f2:30:
                    83:be:5b:b6:0e:02:d7:78:d3:a7:97:1b:2a:32:4a:
                    c0:7d:b5:f7:08:47:d1:c4:9e:37:c4:40:04:64:03:
                    b8:62:5d:d2:e3:af:f9:10:f7:53:3f:fe:f8:5a:dc:
                    c4:f5:00:15:6d:bc:74:b0:7e:f9:ce:20:7a:05:bd:
                    05:d6:d6:bb:8d:14:c6:4f:c1:80:16:84:0e:62:b3:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7A:29:6C:7F:2C:30:E1:79:65:D9:78:BE:16:C1:B0:4A:AE:C8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/840bdcf2-a766-3d79-86c0-da70ee77a15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:da:af:70:56:03:f3:30:01:a7:ba:81:f9:7a:f9:d0:b3:
         88:5d:95:c5:51:e4:29:aa:44:9e:4b:7a:e8:90:f3:16:71:9d:
         c5:f1:f3:1d:82:da:82:fd:33:b5:15:41:9b:ab:1f:84:f2:da:
         81:26:a1:35:12:da:58:b1:c1:c4:e6:9c:d3:7a:00:7c:e6:90:
         bf:05:9c:19:f5:ba:7a:22:d7:e9:c8:d0:a2:2b:33:6a:23:62:
         5d:c5:90:30:96:64:f8:21:de:f1:77:e0:d7:b6:1f:ff:69:d9:
         1b:2b:30:00:e7:dd:c3:72:15:26:03:5a:97:63:4b:8c:0a:02:
         03:dd:13:da:f7:89:47:b3:2d:d0:42:70:76:1e:a8:bf:c0:c9:
         dc:e6:5a:22:08:e2:63:12:e4:1f:8f:01:5c:b6:71:33:de:0c:
         88:02:dd:34:96:20:80:dd:2a:d9:a5:fa:f8:ff:69:64:36:13:
         fa:7e:8a:ea:9c:be:eb:b2:04:eb:e5:48:31:36:cb:41:67:b0:
         bd:1f:10:1c:3d:1e:a4:4e:2d:4c:0c:df:b0:2e:7e:ec:3c:1d:
         24:29:05:d0:63:0c:d3:e3:2f:77:77:e7:77:27:42:d9:36:3d:
         69:fb:57:30:2b:e3:5c:a5:87:a7:7b:44:c0:f4:63:0e:43:9a:
         91:ed:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:19 2025 by rpki-client