Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
File:                     0955c812-9743-3c42-a60b-5b297ff160cd.roa (raw, json)
Hash identifier:          2VdBIn6FDX0Qxt1PY8jr9yyXiQu9PExyH3F/LdNNhew=
Subject key identifier:   64:F0:05:0E:F3:24:25:49:B7:1E:54:1A:55:A5:6B:FC:94:44:1B:33
Certificate issuer:       /CN=371ab6b7-8872-4856-a33d-61dbefb13d34
Certificate serial:       010D0C9F43285848CDFF79CB8A18B7F568349800
Authority key identifier: 79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa
Signing time:             Fri 07 Feb 2025 15:02:21 +0000
ROA not before:           Fri 07 Feb 2025 15:02:21 +0000
ROA not after:            Thu 08 May 2025 14:02:21 +0000
asID:                     11064
IP address blocks:        23.189.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:ff:79:cb:8a:18:b7:f5:68:34:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371ab6b7-8872-4856-a33d-61dbefb13d34
        Validity
            Not Before: Feb  7 15:02:21 2025 GMT
            Not After : May  8 14:02:21 2025 GMT
        Subject: CN=3a54dc5c-3f2e-47c0-83b3-0bfaefd45991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:47:e6:51:e2:61:02:d9:8a:56:a6:8a:79:
                    a0:38:57:ab:a5:93:af:d8:c2:db:8f:9b:d3:f5:8f:
                    06:82:08:be:a2:08:aa:06:ba:9c:b5:3f:b4:00:54:
                    e4:4f:4b:6f:6d:7a:41:95:19:17:be:ec:33:c9:63:
                    c7:e8:1b:38:44:da:65:3e:be:a6:74:a1:02:7f:98:
                    ad:c3:24:e4:28:71:df:95:e9:34:93:62:36:ef:21:
                    ed:cf:59:cb:a8:16:fd:1c:02:0e:78:33:92:7e:c6:
                    6e:fa:05:d9:d8:8e:41:92:ba:9f:d4:58:5f:13:48:
                    22:ce:01:40:91:e2:61:2b:0e:3a:31:0d:21:fc:1b:
                    47:e4:26:3e:03:68:04:ce:95:a3:12:df:7a:d1:d6:
                    b2:71:87:05:80:39:9b:5a:1d:36:95:d4:b0:1f:cc:
                    7c:92:0c:4e:a4:41:dc:a4:1b:d3:3d:e0:56:e2:66:
                    91:21:fe:d1:e6:a8:e0:2e:f8:32:85:ca:8f:3d:0d:
                    68:ef:43:6e:83:49:07:0b:cd:94:97:94:1e:8f:74:
                    d7:c5:54:fe:be:15:9b:27:6b:37:8c:4e:bd:f0:0b:
                    3e:af:fd:24:e3:54:df:34:71:a1:73:b5:bb:47:51:
                    75:50:b6:a1:ac:97:a2:00:63:18:0b:bd:6a:a8:5a:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F0:05:0E:F3:24:25:49:B7:1E:54:1A:55:A5:6B:FC:94:44:1B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/0955c812-9743-3c42-a60b-5b297ff160cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34/371ab6b7-8872-4856-a33d-61dbefb13d34.crl

            X509v3 Authority Key Identifier:
                keyid:79:E7:BB:97:2F:AA:40:17:3F:82:72:65:10:C6:A0:E0:59:A0:8C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/371ab6b7-8872-4856-a33d-61dbefb13d34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:8e:1b:50:52:e2:92:1a:69:f7:73:45:1f:30:e7:53:14:
         38:82:79:70:14:a9:e8:0c:7c:bd:92:dd:a5:62:00:fc:c6:1d:
         f8:d3:48:46:b1:51:7e:af:11:10:06:e0:3f:d3:98:41:e0:e1:
         8b:6b:ed:f4:fa:e7:f1:62:db:7a:2c:f8:ed:20:90:ef:b2:5a:
         63:ac:8f:f0:ae:86:1e:16:d5:41:e2:d5:17:e7:f2:c9:27:7f:
         57:66:4c:44:f0:82:ae:ef:31:86:f6:bd:ea:0f:aa:18:d8:3a:
         31:c1:7f:20:06:8b:f7:ec:7d:1c:9b:85:ee:35:1d:f4:c0:71:
         d7:d4:6e:6c:e7:24:85:e3:c8:78:53:cc:7b:d1:71:74:3e:53:
         5f:c3:0d:8b:45:88:40:fb:19:ac:e8:17:18:a9:56:8e:f3:d1:
         f3:be:73:93:4d:4c:0b:16:f2:62:7b:de:91:92:1f:ef:36:22:
         19:bb:ac:72:05:aa:0c:bd:1e:4f:58:b6:b9:d2:18:b5:02:5b:
         e3:0c:9b:68:d0:5a:d6:13:97:93:1a:f9:2e:9c:ad:9a:e5:09:
         7c:84:30:fc:81:bb:e0:61:04:1f:1c:72:bb:cd:ba:b6:1a:33:
         fe:f5:47:38:f9:7b:f3:6c:0e:8a:7d:1e:c4:9d:61:34:43:1e:
         4c:ad:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:14 2025 by rpki-client