Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa
File:                     efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa (raw, json)
Hash identifier:          EwYBc9Ebe7BJEC9mE5Y/OlPzwMoPHZATe+WjovWUDvQ=
Subject key identifier:   71:39:87:24:82:60:76:44:5B:61:28:D6:BB:2B:34:2D:E7:20:B1:3F
Certificate issuer:       /CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
Certificate serial:       010D0C9F432858490B4C28150D50FCDBBE4CED40
Authority key identifier: 0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     401131
IP address blocks:        23.183.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:28:15:0d:50:fc:db:be:4c:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f98d2b-74bc-4c35-b3c4-6890c248ed4b
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=92443e9c-1b42-4376-baef-2c4a1c819bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:42:39:b0:91:2c:cb:be:98:7d:f4:05:c8:
                    5c:2f:e2:2f:9b:35:ce:d3:38:cc:40:cb:6b:08:ae:
                    11:76:80:57:c3:7f:f6:8d:4f:b5:87:08:54:a8:13:
                    61:38:54:ad:fa:29:20:ac:2c:59:2e:1e:9b:ef:68:
                    a2:9b:b3:8f:1c:d4:d0:49:2a:a0:17:63:6e:4f:19:
                    c4:ef:56:0b:c7:7c:78:f1:1d:0f:38:a6:20:75:c7:
                    8c:be:65:e1:55:25:84:25:7c:d2:63:eb:95:c2:39:
                    08:79:0e:16:57:b0:f5:dd:86:b6:08:37:84:e2:41:
                    70:17:d7:d8:5a:81:ac:94:17:be:96:5a:42:de:00:
                    69:86:81:f0:c6:44:b7:5c:16:97:e2:fc:93:64:a9:
                    ec:a6:af:d4:57:c3:3c:a3:32:70:62:1a:ae:e0:20:
                    d0:a5:27:60:91:08:39:ae:92:f0:0d:a0:93:c8:ce:
                    10:e1:5c:24:74:20:b1:02:ac:68:01:2a:f8:ff:bd:
                    dd:bc:fe:ae:b6:30:43:99:f9:04:55:95:5e:92:df:
                    72:45:e9:4a:84:c1:c8:07:cc:33:0a:a0:e1:2d:7a:
                    3c:15:e9:40:c6:ff:76:c6:98:59:94:46:7c:fc:37:
                    70:3b:ae:46:aa:39:e3:29:ec:8b:04:95:7b:1e:0c:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:39:87:24:82:60:76:44:5B:61:28:D6:BB:2B:34:2D:E7:20:B1:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/efa07b76-a425-35d5-bbc5-a1f6963a4baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.crl

            X509v3 Authority Key Identifier:
                keyid:0F:70:4F:1D:6B:A6:7F:86:97:8E:0D:57:46:A5:13:CF:B7:20:5F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10f98d2b-74bc-4c35-b3c4-6890c248ed4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:75:9f:21:71:77:d7:46:b1:92:38:26:ac:da:ed:d6:d6:
         66:27:3a:be:c4:cb:cd:db:ce:95:27:f0:10:ef:49:af:78:90:
         53:42:21:3a:b6:98:55:16:41:af:53:1c:de:d2:58:9f:ef:0e:
         7f:3a:99:0b:83:91:5c:18:9b:ba:95:6a:b5:ed:1d:22:d8:9f:
         29:2c:da:7c:9d:1a:a6:5a:8a:72:2d:d9:11:b2:b0:a2:9f:68:
         e4:20:af:1f:d8:7b:81:1a:85:8d:f8:4a:de:f9:a6:3d:29:8c:
         4d:13:5c:6c:ff:35:02:de:41:63:56:42:f7:8e:b4:ef:a5:84:
         d3:91:3e:9a:74:25:4b:3e:0f:e3:76:12:ac:43:51:3e:6a:10:
         e0:2f:ce:55:d4:53:7b:db:43:9f:62:f1:69:79:2c:94:bb:13:
         9c:b2:11:ef:9b:c2:b1:3c:09:b7:47:10:cc:c2:9d:14:e5:c0:
         6c:40:2c:05:10:01:0a:bc:0b:a7:db:f7:dd:b8:92:e2:d7:2b:
         61:b2:bd:31:a8:f2:91:3d:ac:3b:c3:b7:3d:72:0b:bc:32:5e:
         d1:dc:cc:b6:f8:5f:cb:24:54:f6:bf:15:c6:9f:fe:2c:6a:d9:
         40:a4:e3:79:0b:e8:ae:34:23:9f:38:1e:6c:26:fc:25:e3:22:
         0f:36:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:54 2025 by rpki-client