Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/26394a3c-a341-30e4-8f48-dc4c0bbb6d2c.roa
File:                     26394a3c-a341-30e4-8f48-dc4c0bbb6d2c.roa (raw, json)
Hash identifier:          MTZZ5hb7tAb7AU6OJjoVmcqYaw9ABaF6q4vFR1IPQM4=
Subject key identifier:   CB:91:61:4F:17:D7:B2:81:AA:52:9B:23:32:04:0B:57:2A:B5:66:99
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F432858494B64173753DF70E60F029BC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/26394a3c-a341-30e4-8f48-dc4c0bbb6d2c.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     394285
IP address blocks:        23.88.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:17:37:53:df:70:e6:0f:02:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=2a866a16-5837-46d4-a615-458e3689d2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:79:0e:0b:e8:0d:fb:11:06:bb:27:d9:3f:
                    e8:dc:86:05:b5:b5:c9:61:ee:ae:fb:7d:ea:e2:b6:
                    f3:38:a8:e9:93:58:7c:79:6c:01:60:f4:98:07:61:
                    27:49:ab:7f:e7:dd:e9:36:e1:d5:6e:93:c0:14:40:
                    45:25:14:98:99:39:e0:dc:57:df:40:b9:30:67:d0:
                    50:11:05:18:2e:fa:3c:13:6e:8c:05:4e:9c:a2:86:
                    e6:a9:c5:46:7f:33:b8:e6:ff:b9:16:88:09:33:87:
                    1d:a0:16:c5:9c:46:9c:ba:60:4b:22:1f:61:14:6e:
                    7e:35:ff:08:2e:d6:74:0b:aa:6f:da:d4:b2:f5:9a:
                    38:78:b2:c9:7d:ad:e9:79:78:90:1a:d0:91:6a:84:
                    09:2d:78:a4:44:6a:6a:4b:c7:9f:03:9b:7d:e5:d6:
                    c1:1e:de:4c:e1:0e:10:41:b8:1b:61:b4:49:48:99:
                    b0:7a:e4:76:25:a8:39:87:fe:85:ed:df:bf:55:ec:
                    35:55:4e:7d:bc:f9:87:2d:ca:9a:ef:25:41:83:32:
                    f8:6d:d9:00:63:f8:3d:7c:e0:63:67:3b:bc:a1:21:
                    b1:27:74:ef:d8:e9:df:6e:d1:d6:93:11:91:73:c0:
                    95:9c:9e:86:08:36:3f:79:d0:fd:9a:58:20:b1:08:
                    aa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:91:61:4F:17:D7:B2:81:AA:52:9B:23:32:04:0B:57:2A:B5:66:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/26394a3c-a341-30e4-8f48-dc4c0bbb6d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0f:ce:00:be:f4:b7:36:e1:ac:7c:c3:b8:6f:a1:af:2b:54:
         87:22:62:ad:34:4c:3c:42:51:2b:3e:fb:7b:d4:ca:a7:a6:5f:
         bc:64:1e:49:bc:23:51:b5:29:b3:9f:5d:30:6f:e7:74:82:45:
         0e:c4:87:55:4d:db:38:0b:b5:1d:81:20:3f:6e:77:9b:6c:7d:
         7b:21:9b:18:38:f1:1d:07:ad:88:39:06:08:e8:12:a3:f1:56:
         13:39:87:33:a8:2a:44:a2:82:db:0c:54:1a:d5:b7:cc:24:8e:
         1b:d9:33:eb:a0:d7:0e:51:9c:a9:38:7f:fb:6f:30:b8:df:36:
         b9:49:7e:de:ae:22:1a:0c:ea:95:41:46:4f:e7:8f:f7:69:81:
         15:d9:57:74:0b:a9:62:9d:a7:d6:36:c7:94:2a:c9:fd:f4:f6:
         a4:68:64:dd:ee:6f:a3:b5:a6:00:84:2f:d9:23:f2:a8:4f:a2:
         7f:c3:5b:cb:4b:e7:9e:d7:19:96:45:2c:41:0a:9a:21:20:99:
         56:6d:27:97:20:6c:e0:b7:b9:7d:50:74:1a:ea:69:36:df:f6:
         37:33:80:60:e8:3e:f2:77:4f:2e:65:85:dd:c4:fe:a5:ca:02:
         dc:5e:df:b6:24:3d:f5:b6:2f:a5:83:5d:e6:dd:b7:28:de:1b:
         31:c4:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----