Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
File:                     a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa (raw, json)
Hash identifier:          yGnFB1EhLGnAJyYQZfhwKHz4U8gRu2Y+GqXTKGlTN1U=
Subject key identifier:   DB:01:5F:9B:90:38:7B:D1:BC:A2:26:6A:49:E5:4B:83:85:E4:13:62
Certificate issuer:       /CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
Certificate serial:       010D0C9F432858487FD71A0897E110A988CCD880
Authority key identifier: 92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa
Signing time:             Fri 10 Jan 2025 15:07:57 +0000
ROA not before:           Fri 10 Jan 2025 15:07:57 +0000
ROA not after:            Thu 10 Apr 2025 14:07:57 +0000
asID:                     30006
IP address blocks:        23.169.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:d7:1a:08:97:e1:10:a9:88:cc:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c87fef-d8f8-4134-a4ec-f2a073567030
        Validity
            Not Before: Jan 10 15:07:57 2025 GMT
            Not After : Apr 10 14:07:57 2025 GMT
        Subject: CN=da950e00-3ffd-4ac3-ab77-79204fbb8004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:fa:38:32:bd:c6:8e:eb:54:41:1e:bb:9e:
                    fe:41:75:02:6b:f6:64:a6:05:01:b3:77:22:c2:7f:
                    b2:d2:d5:dd:17:ad:00:49:5c:da:c3:49:87:5e:6e:
                    21:b9:d3:b2:09:f5:7c:ae:3f:3e:d7:2f:c1:03:a3:
                    ab:af:b4:d4:fb:99:13:45:9c:dd:7e:d2:99:96:4b:
                    38:a9:e1:23:eb:ad:f5:5d:20:b3:ea:59:3a:fe:b0:
                    d0:66:6d:61:5e:db:28:e0:41:02:60:f0:a3:e9:83:
                    7e:ad:7f:56:34:29:c5:3d:f2:8b:23:62:93:90:c0:
                    64:9f:5f:cd:a8:ac:42:73:c7:d7:c0:00:a6:3a:b5:
                    fc:a7:15:ba:f6:06:75:fe:60:58:2c:41:ff:d6:65:
                    b5:60:11:1c:db:9f:62:7e:9a:a1:98:80:9e:8c:5a:
                    56:de:05:26:6a:80:8f:bc:37:dc:c0:8f:af:ff:fc:
                    ea:71:3d:a2:a5:c9:59:cf:d4:9c:3c:3e:72:8d:7d:
                    d2:c5:aa:65:c6:45:59:33:db:34:7c:14:cb:11:98:
                    72:b5:d8:d5:00:e6:6f:d5:1c:66:f0:59:28:31:1e:
                    41:2a:5d:47:2a:3f:ac:5a:df:3d:04:4a:2e:d8:73:
                    0f:9e:66:39:12:de:80:87:67:cc:f0:3b:c8:52:29:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:5F:9B:90:38:7B:D1:BC:A2:26:6A:49:E5:4B:83:85:E4:13:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/a387c0f3-e8f6-36dc-b9dc-b4e5d293a519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030/f9c87fef-d8f8-4134-a4ec-f2a073567030.crl

            X509v3 Authority Key Identifier:
                keyid:92:BB:03:6F:12:A9:48:6F:48:A5:0D:56:FF:94:5E:2E:62:3C:1D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9c87fef-d8f8-4134-a4ec-f2a073567030.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:14:a3:5f:1a:cc:a3:69:3f:98:22:e3:93:df:a6:a3:ab:
         7e:48:29:db:19:87:ef:40:af:4c:ee:73:07:94:57:59:9a:c2:
         13:a6:4f:70:f2:47:ea:42:87:f4:a9:52:96:d5:44:1b:e0:0c:
         0f:20:0b:b7:30:0f:5f:64:cb:44:e5:c2:5a:d2:0d:b8:06:5b:
         fe:ba:c8:ed:35:f0:85:5b:55:d3:25:04:15:5f:bd:13:98:c6:
         7b:75:fc:8c:fe:4d:b9:49:f2:71:71:72:80:c9:3a:11:4a:3d:
         21:d0:e6:63:f2:50:ce:d4:87:03:2d:dd:46:bb:7e:b2:b5:0b:
         ea:eb:68:67:fa:e4:ea:d3:f7:81:f3:37:89:dc:f8:a2:d6:ca:
         aa:a5:e0:80:a4:8e:ad:af:df:f9:79:44:3f:4b:c6:4f:cf:07:
         df:1b:53:b7:27:9d:09:e7:8f:e3:ad:75:be:da:69:fb:c1:96:
         40:d0:2c:44:91:21:61:96:fa:d9:63:63:c8:89:be:68:0a:17:
         4e:dd:a1:95:30:6a:f8:2f:7e:f9:74:cd:cc:71:22:6f:b1:67:
         65:7d:13:1f:e2:92:55:94:20:2c:f1:e4:ba:cc:0a:63:78:ed:
         d2:20:0f:3a:ff:25:ad:e9:09:58:60:56:23:a1:17:4b:41:4b:
         4e:15:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:22 2025 by rpki-client