Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/ff5325ee-6a9b-32e9-8cef-339b85fdfaa3.roa
File:                     ff5325ee-6a9b-32e9-8cef-339b85fdfaa3.roa (raw, json)
Hash identifier:          lvb+UES1WSn2ptmVgF0V4z4D/wwqC13lhTWmpWJN0QA=
Subject key identifier:   F4:DF:00:22:4B:84:1C:00:18:D4:35:FC:AF:22:5D:2B:F8:50:AC:BA
Certificate issuer:       /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
Certificate serial:       010D0C9F432858489A3B496CF06315A67C7A5A00
Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/ff5325ee-6a9b-32e9-8cef-339b85fdfaa3.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     20220
IP address blocks:        23.176.144.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:49:6c:f0:63:15:a6:7c:7a:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=44aa4365-26b3-4cb5-8cb9-e21e7c909b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:cc:27:d5:7f:d6:c4:65:43:51:ee:2b:c6:
                    74:54:6f:08:4c:22:0c:3a:dd:f4:56:04:05:fb:7d:
                    48:d8:4e:e2:d0:40:9b:4a:3b:2e:83:a9:0f:f4:3d:
                    cf:ff:f9:66:21:d9:4e:35:55:ca:ca:01:09:7f:0a:
                    bc:cf:a5:14:01:30:7f:14:fe:47:64:8d:c6:5c:bc:
                    be:76:12:69:1a:02:86:75:fe:85:4c:7a:60:d1:6c:
                    42:91:dc:bd:38:d7:cd:86:80:23:87:ce:bd:96:02:
                    1c:c1:c0:5c:e3:bd:24:26:95:72:b6:83:71:5d:a2:
                    37:c7:c9:02:e7:9c:1b:78:98:e6:f1:33:b5:78:ef:
                    b5:a7:b5:8b:46:80:15:00:e3:e8:66:c3:3c:6d:fa:
                    ce:3f:e2:40:8d:38:ac:a8:a3:a8:57:da:bf:8b:d4:
                    6b:6d:0e:79:9e:31:81:8b:99:86:8f:37:e6:98:a3:
                    9d:91:5c:5b:b4:12:b5:72:38:e3:b2:79:5f:79:3e:
                    1c:d1:47:2b:47:01:c1:89:38:4c:06:9e:1a:26:54:
                    6a:80:de:96:27:6b:6e:e7:a3:de:95:52:0d:44:f9:
                    35:d4:d8:34:95:4a:1b:26:ec:df:7e:67:52:90:0d:
                    f3:3b:47:4d:90:b8:a1:3b:67:8e:64:94:af:d3:ad:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:00:22:4B:84:1C:00:18:D4:35:FC:AF:22:5D:2B:F8:50:AC:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/ff5325ee-6a9b-32e9-8cef-339b85fdfaa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl

            X509v3 Authority Key Identifier:
                keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:78:b3:77:7b:91:5d:63:99:8d:5e:c9:fa:d1:0d:0b:ad:45:
         29:1e:0e:4b:23:3e:63:a0:43:f4:d1:8f:73:64:03:2f:b1:bb:
         75:f6:bc:08:ff:0b:c7:a3:f9:9a:33:61:f2:08:0b:10:77:9f:
         c4:6d:29:e6:99:ca:75:76:84:50:2a:10:f6:75:40:85:fd:45:
         45:fe:a1:b5:bd:7b:f8:d3:22:0c:35:33:8c:dd:11:13:8e:2f:
         29:f2:ee:bb:ec:ed:c6:ea:80:0f:96:a6:5d:7e:ec:f9:2e:08:
         f6:ef:0d:21:28:7f:b5:89:7b:56:55:91:df:17:8b:e0:93:a7:
         7b:74:4b:6f:91:de:b6:38:13:79:81:16:3a:c6:8f:79:7f:8c:
         da:83:f6:9d:73:a2:ae:ef:de:87:21:4c:3f:34:d2:5f:c0:8a:
         a1:67:ae:91:34:c4:7a:d7:93:26:74:52:95:7b:84:32:32:70:
         85:b9:92:18:61:d5:34:5c:1a:02:87:6f:a4:9d:ec:ab:4c:94:
         9a:e6:a6:f8:c6:d8:8e:9c:d2:cc:d6:61:99:85:a1:84:52:2a:
         4d:80:9e:9c:d9:3c:e2:21:07:47:b0:d9:49:ca:68:fd:75:e9:
         f0:30:b7:5d:69:46:4f:3e:b4:80:52:9f:ac:4b:4e:78:65:80:
         3f:5c:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:35 2025 by rpki-client