Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          g79bjvsIYefJzox+coDZgYoXNtlqntXBd6QlqE9zuFQ=
Subject key identifier:   69:81:30:C3:7E:66:CF:70:17:E5:E9:90:26:93:D6:57:8D:2F:DA:3A
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F4328584909E6A60408E0CEF3926B7E80
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Sat 01 Mar 2025 02:00:39 +0000
ROA not before:           Sat 01 Mar 2025 02:00:39 +0000
ROA not after:            Fri 30 May 2025 01:00:39 +0000
asID:                     395886
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:e6:a6:04:08:e0:ce:f3:92:6b:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Mar  1 02:00:39 2025 GMT
            Not After : May 30 01:00:39 2025 GMT
        Subject: CN=fe2d6bb0-cea2-4b87-bd59-7d00ef341c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:bc:55:00:7b:dd:57:c1:ad:68:df:e0:ea:
                    64:16:b2:03:3d:53:09:cf:27:41:df:b3:f7:ca:d8:
                    88:a1:9f:ec:d4:e3:79:7d:c0:af:73:18:cc:0c:1e:
                    32:ab:a7:71:3d:50:39:ab:68:62:d8:9a:ca:5e:43:
                    f8:31:98:ac:cf:b3:0d:95:66:f3:dd:ad:09:53:7d:
                    e9:4d:21:94:63:72:69:58:03:6e:b6:2a:c6:18:5c:
                    4f:c7:a2:ed:4d:b2:73:4e:d4:08:94:1c:2e:a0:1a:
                    5c:62:cb:cc:9f:3c:fe:ad:bc:ec:ac:91:3c:b2:21:
                    e7:d4:8e:6b:d4:22:dd:e2:79:36:2d:46:37:34:5e:
                    6a:90:e6:cf:97:7c:4d:ad:e6:01:e5:9b:75:18:70:
                    ca:9a:6b:f6:6c:fd:f3:df:eb:e0:7a:13:c2:d7:a3:
                    8f:54:94:13:62:a8:4e:b4:60:1e:69:2d:38:7b:fd:
                    e4:08:6e:f4:dc:e0:0f:3e:40:40:44:ef:68:d2:90:
                    97:29:0b:48:be:b0:9f:8c:3f:98:b4:c8:e6:5e:cd:
                    88:b8:cf:29:e3:04:46:83:91:d5:79:7b:31:98:4c:
                    2b:57:7c:55:f4:7e:1b:fe:21:5d:22:62:f6:23:cb:
                    98:e8:ff:5a:3c:c3:d9:26:7a:9b:51:2b:0a:5f:1b:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:30:C3:7E:66:CF:70:17:E5:E9:90:26:93:D6:57:8D:2F:DA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:80:9c:ec:d0:7d:bd:31:c2:f5:44:54:41:e2:0e:c3:39:c4:
         d4:88:b6:a5:4e:88:bc:50:1c:1c:4d:dc:f0:89:dd:1f:d7:3b:
         59:02:33:d0:ad:98:ab:a9:f5:dc:b7:08:d9:3d:fd:c3:e9:df:
         13:19:fc:f6:5b:ac:46:7a:cb:47:6e:f4:8d:39:1f:08:ab:5e:
         b5:6a:47:74:05:4c:4c:82:ea:2b:33:2b:c9:a6:8a:d0:42:a0:
         86:ac:56:3d:bf:97:94:6f:4e:11:5e:5c:73:d8:f7:9a:a7:25:
         06:a0:b1:a9:83:4c:48:f6:3e:70:11:ee:9d:0b:bc:a2:a9:de:
         ca:a7:9c:01:9c:d5:59:31:fb:b6:0a:e8:2d:92:7b:8c:b2:05:
         ed:1c:70:38:40:06:62:bb:2d:16:d7:d5:f6:88:04:35:ed:23:
         e7:9a:6f:51:b5:20:ae:54:07:ba:26:f0:75:ab:41:9f:c3:f9:
         6f:89:5e:91:92:55:07:c6:89:84:59:49:51:6f:1c:c7:4a:6d:
         d8:df:8c:c2:7f:ba:b9:7e:66:2b:4e:14:30:b5:7c:5d:e9:f4:
         74:e3:7e:eb:fc:c5:37:54:d2:8d:05:6a:53:c7:1c:c2:88:40:
         c4:df:84:45:74:7f:ab:90:4d:3d:7a:73:a8:92:47:43:6c:87:
         5e:7b:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:43 2025 by rpki-client