Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
File:                     4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json)
Hash identifier:          vr0y8YQjsOAwasCEq7JYNJHGChAFOHEP8XCO8MmBHSo=
Subject key identifier:   7B:EB:AD:09:81:CC:1C:E4:A7:F6:4E:5E:68:8B:86:59:43:30:3B:8F
Certificate issuer:       /CN=2c2ae48f-475b-42b3-9a56-ce8852515055
Certificate serial:       010D0C9F4328584913AC1AE1360946F0259E6A80
Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     400142
IP address blocks:        23.191.176.0/24 maxlen: 24
                          2602:fc99::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:1a:e1:36:09:46:f0:25:9e:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=d86be4b8-ff3b-4473-a4da-2d97a6bc5f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:c4:46:77:37:c0:04:25:8e:bf:98:35:3b:
                    b5:4e:c9:04:43:55:3f:a3:b0:35:d8:b1:c7:96:58:
                    de:6b:1d:02:56:17:e2:3c:80:e2:5a:48:ad:81:85:
                    95:cc:a2:68:33:7c:e6:78:7e:77:f0:60:4e:3a:44:
                    d9:0f:d8:73:1c:2a:ca:47:03:1a:61:a8:be:74:83:
                    0a:4e:60:c9:e7:81:cf:7c:c5:1d:98:af:a1:30:09:
                    fb:10:65:f9:11:06:a9:a0:6d:34:bd:fb:6b:58:4d:
                    de:00:21:42:0e:dd:72:c8:d9:88:4c:e9:09:d7:e0:
                    03:ff:7e:27:38:78:a5:cb:d8:61:c5:ae:58:48:1f:
                    0f:64:fc:a8:6b:1e:89:3a:97:80:94:40:4f:a5:ba:
                    80:88:a5:4f:3a:10:1c:82:e7:b2:9d:e3:0c:68:3a:
                    33:ec:5c:51:61:b0:c7:42:49:69:d7:76:1f:9c:a3:
                    46:f6:44:d8:ef:71:90:25:a6:f7:34:af:50:2f:02:
                    c2:79:ac:2f:86:e9:06:00:f6:52:61:5f:ad:1a:77:
                    40:d0:3e:e4:df:f5:c8:e0:fa:41:b1:97:01:36:06:
                    29:84:5b:d2:26:d0:04:a2:b1:52:01:9d:96:9a:cd:
                    ba:31:e0:8e:1b:26:b2:9b:0b:74:74:93:95:53:09:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:AD:09:81:CC:1C:E4:A7:F6:4E:5E:68:8B:86:59:43:30:3B:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl

            X509v3 Authority Key Identifier:
                keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.176.0/24
                IPv6:
                  2602:fc99::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:67:9e:31:26:b1:11:d7:94:7d:1a:67:bc:12:c8:33:cb:f5:
         ed:2c:16:26:2c:0e:70:22:4c:ee:ad:1e:e2:aa:60:d1:3e:a2:
         11:da:51:06:ab:81:8a:30:34:a6:3f:89:5b:8d:29:c4:10:df:
         cf:0b:6d:5f:3c:c9:25:06:b8:ce:d3:2c:3a:c6:cc:74:a5:01:
         d1:f8:28:2c:2d:80:25:89:88:3e:e4:a7:36:7b:75:63:e3:ce:
         86:a7:5b:69:05:3f:45:03:55:8f:20:3e:71:52:ea:4a:d4:81:
         c7:cc:dd:d7:3d:23:ba:c4:51:57:d0:5a:cd:a7:21:79:de:15:
         ef:94:3b:83:eb:cd:89:9a:58:8a:e5:2d:b8:c6:6b:b1:92:66:
         b2:7d:06:3d:b3:05:c2:85:87:09:4b:7f:0b:e3:14:a1:6a:34:
         83:97:38:9f:ce:22:39:26:6b:0b:64:4d:5b:be:ef:00:73:15:
         be:32:e7:fe:50:44:43:ee:bd:c4:26:e4:68:83:b0:a0:55:86:
         4c:56:e6:31:37:36:57:40:be:1f:85:7b:50:f4:16:80:51:99:
         46:08:dd:7c:f8:8f:e6:ca:44:c9:97:5b:71:7a:5d:7a:0c:2c:
         af:b1:eb:a8:b1:61:1f:15:1d:e0:e2:52:9e:21:a0:dc:5b:a0:
         a2:d3:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:37 2025 by rpki-client