Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/30d55824-7e1b-3422-9b9f-0e0f3f4777e2.roa
File:                     30d55824-7e1b-3422-9b9f-0e0f3f4777e2.roa (raw, json)
Hash identifier:          kuzdW4stV0xeB3zNNn4vxb1TbOCsFj+2Gtd7V/j1PJk=
Subject key identifier:   B1:75:6D:6D:43:53:39:20:70:2C:42:D4:C9:1A:CC:3D:21:75:60:0F
Certificate issuer:       /CN=7263fa27-2b86-4731-a082-c7608afa2f75
Certificate serial:       010D0C9F43285849446942C28F9065AB2E225280
Authority key identifier: D7:DC:D9:E1:B4:21:CA:42:96:CA:68:FD:ED:19:1F:7E:5A:38:0B:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/30d55824-7e1b-3422-9b9f-0e0f3f4777e2.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     46829
IP address blocks:        23.184.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:42:c2:8f:90:65:ab:2e:22:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7263fa27-2b86-4731-a082-c7608afa2f75
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=b2f4b8cc-e656-47fb-9118-e7b653919590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:a7:d5:92:48:48:72:e0:b6:26:8a:79:09:
                    24:d6:8e:ff:81:a9:3b:a0:2d:32:14:83:96:cb:62:
                    fe:ef:22:92:78:8b:ba:9f:81:0b:09:bf:40:90:e3:
                    34:ea:19:d7:7f:65:06:31:8a:2f:4d:ef:f0:55:ce:
                    e9:55:07:27:a6:bc:97:a0:73:72:0c:06:ae:b6:8b:
                    2b:40:50:de:b6:16:f6:da:d7:07:e9:06:85:52:2c:
                    11:84:38:bc:c2:19:69:5b:ee:8e:f0:11:f4:50:89:
                    85:b1:ce:20:39:31:b2:ed:9c:01:0a:7b:b4:0f:5f:
                    b8:72:a8:be:7e:bb:5b:19:71:f8:ec:13:16:b9:5a:
                    40:88:8d:5e:4f:a0:84:98:7b:4c:b0:5e:4d:4b:69:
                    69:55:a6:08:08:20:e0:38:40:f8:77:4b:bd:09:ae:
                    f3:bb:fc:e1:ff:93:6d:f2:e0:d4:50:56:ce:66:5d:
                    8b:aa:a5:0f:f6:31:e0:86:75:41:9a:66:5e:73:19:
                    d1:8b:66:7b:e4:64:22:e0:b8:3c:34:73:81:23:8f:
                    5f:52:98:b1:86:e2:67:5e:8a:8a:64:1c:2d:6c:df:
                    9b:f4:02:dd:d0:7e:87:04:74:b5:f9:b8:97:df:03:
                    d2:49:13:d7:8c:06:cf:eb:fa:07:0f:e1:6e:ab:ab:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:75:6D:6D:43:53:39:20:70:2C:42:D4:C9:1A:CC:3D:21:75:60:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/30d55824-7e1b-3422-9b9f-0e0f3f4777e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75/7263fa27-2b86-4731-a082-c7608afa2f75.crl

            X509v3 Authority Key Identifier:
                keyid:D7:DC:D9:E1:B4:21:CA:42:96:CA:68:FD:ED:19:1F:7E:5A:38:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7263fa27-2b86-4731-a082-c7608afa2f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:4d:da:5b:4e:4f:6e:c1:a7:7c:4e:07:df:f8:cf:98:df:
         af:e0:66:85:d6:9a:3c:a7:06:a6:cf:97:10:52:a9:a4:85:3e:
         5e:50:c1:42:4a:80:9a:eb:c2:24:e7:bf:cc:23:1d:53:0e:bb:
         0d:d9:89:41:1f:90:b2:d3:ef:90:c6:b1:02:4a:ca:10:0a:ed:
         ae:f2:00:09:02:0f:33:60:9d:df:47:6c:b6:bb:30:c3:76:1a:
         b8:fb:b8:ac:22:e9:98:f6:f4:cb:d9:6e:f3:ec:0c:19:a9:09:
         9f:e8:e2:42:d9:3b:ee:de:33:09:ab:fa:02:0c:84:83:ba:56:
         28:e7:53:ec:87:d0:93:cd:ca:52:a5:91:ce:c5:a6:b6:e0:4e:
         85:9b:05:04:02:b0:29:77:60:4c:05:bf:e0:7b:28:83:1c:36:
         bf:f2:1e:71:6d:d8:b9:e3:66:ec:b0:cd:aa:b2:e5:2c:3e:1b:
         27:d1:2f:e3:a0:7b:dc:d3:ce:aa:ad:c2:b6:54:30:8d:2c:59:
         e3:fa:7a:5b:3b:60:ed:9a:ba:af:a3:99:62:85:ab:c2:5a:e3:
         27:91:3a:e0:84:82:d9:4a:76:e9:3e:b5:9f:e4:c5:8f:19:e0:
         02:31:7a:88:df:d9:93:49:57:fb:bb:a6:98:11:b5:61:7b:fc:
         c9:2f:eb:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaULCj5Blqy4iUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzI2M2ZhMjctMmI4Ni00NzMxLWEwODItYzc2MDhhZmEy
Zjc1MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk
YjJmNGI4Y2MtZTY1Ni00N2ZiLTkxMTgtZTdiNjUzOTE5NTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieWn1ZJISHLgtiaKeQkk1o7/gak7oC0yFIOW
y2L+7yKSeIu6n4ELCb9AkOM06hnXf2UGMYovTe/wVc7pVQcnpryXoHNyDAautosr
QFDethb22tcH6QaFUiwRhDi8whlpW+6O8BH0UImFsc4gOTGy7ZwBCnu0D1+4cqi+
frtbGXH47BMWuVpAiI1eT6CEmHtMsF5NS2lpVaYICCDgOED4d0u9Ca7zu/zh/5Nt
8uDUUFbOZl2LqqUP9jHghnVBmmZecxnRi2Z75GQi4Lg8NHOBI49fUpixhuJnXoqK
ZBwtbN+b9ALd0H6HBHS1+biX3wPSSRPXjAbP6/oHD+Fuq6vBYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLF1bW1DUzkgcCxC1MkazD0hdWAPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83MjYz
ZmEyNy0yYjg2LTQ3MzEtYTA4Mi1jNzYwOGFmYTJmNzUvMzBkNTU4MjQtN2UxYi0z
NDIyLTliOWYtMGUwZjNmNDc3N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzI2M2ZhMjctMmI4Ni00NzMxLWEw
ODItYzc2MDhhZmEyZjc1LzcyNjNmYTI3LTJiODYtNDczMS1hMDgyLWM3NjA4YWZh
MmY3NS5jcmwwHwYDVR0jBBgwFoAU19zZ4bQhykKWymj97Rkfflo4C2wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83MjYzZmEyNy0yYjg2LTQ3MzEtYTA4Mi1jNzYw
OGFmYTJmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7hYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkNTdpbTk9uwad8Tgff+M+Y36/gZoXWmjynBqbPlxBSqaSFPl5QwUJK
gJrrwiTnv8wjHVMOuw3ZiUEfkLLT75DGsQJKyhAK7a7yAAkCDzNgnd9HbLa7MMN2
Grj7uKwi6Zj29MvZbvPsDBmpCZ/o4kLZO+7eMwmr+gIMhIO6VijnU+yH0JPNylKl
kc7FprbgToWbBQQCsCl3YEwFv+B7KIMcNr/yHnFt2LnjZuywzaqy5Sw+GyfRL+Og
e9zTzqqtwrZUMI0sWeP6els7YO2auq+jmWKFq8Ja4yeROuCEgtlKduk+tZ/kxY8Z
4AIxeojf2ZNJV/u7ppgRtWF7/Mkv6+8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:59 2025 by rpki-client