Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
File:                     f30842c9-2946-3389-a971-2942db75d63c.roa (raw, json)
Hash identifier:          Tr5+EUHI3ybVZSjMAVdrPeZh31wEjlaGQSzyK1EE/ac=
Subject key identifier:   46:64:62:F0:41:E3:A4:95:C9:EB:73:4C:D1:06:85:6A:BE:85:28:0C
Certificate issuer:       /CN=7bb7623d-5096-425c-aeab-03e71deea5ce
Certificate serial:       010D0C9F432858492CAE90E171F09F0488FD6B00
Authority key identifier: 40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     46705
IP address blocks:        23.171.40.0/24 maxlen: 24
                          2607:88c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:90:e1:71:f0:9f:04:88:fd:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bb7623d-5096-425c-aeab-03e71deea5ce
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3b195ddc-9cb6-4d39-b24d-31579e68674b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:0e:03:89:fb:91:af:ae:08:82:8f:a5:a5:
                    0c:81:c9:2c:fa:54:d1:1d:9c:25:f1:e9:5b:38:81:
                    2f:15:24:08:3b:8e:8d:14:51:23:7a:5a:25:1c:7b:
                    06:27:ea:38:f9:30:f8:28:8c:2a:40:58:c3:16:f5:
                    7f:e4:5e:fe:de:34:3b:a0:59:de:98:c2:23:37:07:
                    21:b1:2c:ab:35:af:91:4a:8d:49:71:3b:1f:69:32:
                    b2:e9:87:d8:f2:d2:e5:99:03:b9:24:fa:43:a7:31:
                    29:d9:23:e9:c8:5c:dd:76:86:a8:cd:3a:8f:d0:76:
                    e8:c6:3c:f8:64:23:40:d5:4b:cb:86:ce:8e:a8:f2:
                    42:84:46:f2:7c:be:dc:16:8d:ea:ae:ad:a5:10:ab:
                    a2:97:df:97:9e:f9:21:4d:fe:96:1c:81:d2:b6:d1:
                    45:8e:f2:5e:1b:67:d4:08:46:f2:90:02:67:2d:14:
                    4a:c5:c0:64:d7:9a:45:85:a1:d0:b8:20:67:d5:2a:
                    70:6c:5d:cf:d7:05:06:db:d2:27:ec:eb:7c:e6:4d:
                    64:bd:55:d8:1f:53:b2:95:a5:24:91:61:06:6a:b6:
                    29:4b:05:77:f7:28:cd:d0:c5:70:9a:ea:fc:78:5a:
                    a5:68:38:6f:8e:87:76:22:44:f4:e3:1e:a5:e6:8b:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:64:62:F0:41:E3:A4:95:C9:EB:73:4C:D1:06:85:6A:BE:85:28:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl

            X509v3 Authority Key Identifier:
                keyid:40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.40.0/24
                IPv6:
                  2607:88c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:48:29:09:22:09:1d:04:fc:73:6e:f0:62:06:c8:8e:f7:
         b8:9c:0c:16:ea:83:e1:23:9e:96:1a:17:18:63:03:31:f7:e7:
         3a:59:15:51:52:fb:cb:19:1f:4e:e2:30:ea:5d:3b:a9:bf:f4:
         4e:96:9b:3e:ae:39:b7:c4:25:7c:74:35:9b:88:70:e5:eb:05:
         33:ac:07:22:b6:a8:8d:0c:03:2e:c2:15:f4:6f:ec:d3:7f:6a:
         e0:08:e5:73:5b:2a:ca:52:f5:35:f4:db:03:0a:3d:46:6c:3f:
         f6:fb:8c:3c:3b:92:af:6c:ba:b2:d1:68:06:35:85:cd:f0:b6:
         2f:f8:b6:58:43:df:30:75:1f:a9:ac:8b:28:ce:2c:22:05:d1:
         26:19:16:af:9c:f4:39:f2:f1:be:b7:6f:30:39:5d:60:28:b6:
         3d:87:00:7d:7e:09:82:ca:bc:ff:f3:3e:67:f9:08:8c:71:1b:
         d1:5c:47:cd:d1:8e:fc:c6:6c:61:2c:d5:7e:eb:4d:4d:c8:da:
         96:30:d4:59:f8:84:b3:61:0a:a4:bb:5d:0d:d6:1a:a7:9a:1c:
         7c:21:14:02:76:f6:1e:ac:62:54:8b:ed:04:fd:c6:25:12:67:
         58:01:a7:3f:c0:74:64:44:e9:18:a8:12:70:92:b7:6f:ce:b7:
         fd:c1:cb:05
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEksrpDhcfCfBIj9awAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JiNzYyM2QtNTA5Ni00MjVjLWFlYWItMDNlNzFkZWVh
NWNlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
M2IxOTVkZGMtOWNiNi00ZDM5LWIyNGQtMzE1NzllNjg2NzRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdUOA4n7ka+uCIKPpaUMgcks+lTRHZwl8elb
OIEvFSQIO46NFFEjelolHHsGJ+o4+TD4KIwqQFjDFvV/5F7+3jQ7oFnemMIjNwch
sSyrNa+RSo1JcTsfaTKy6YfY8tLlmQO5JPpDpzEp2SPpyFzddoaozTqP0Hboxjz4
ZCNA1UvLhs6OqPJChEbyfL7cFo3qrq2lEKuil9+XnvkhTf6WHIHSttFFjvJeG2fU
CEbykAJnLRRKxcBk15pFhaHQuCBn1SpwbF3P1wUG29In7Ot85k1kvVXYH1OylaUk
kWEGarYpSwV39yjN0MVwmur8eFqlaDhvjod2IkT04x6l5ouRbwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFEZkYvBB46SVyetzTNEGhWq+hSgMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83YmI3
NjIzZC01MDk2LTQyNWMtYWVhYi0wM2U3MWRlZWE1Y2UvZjMwODQyYzktMjk0Ni0z
Mzg5LWE5NzEtMjk0MmRiNzVkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2JiNzYyM2QtNTA5Ni00MjVjLWFl
YWItMDNlNzFkZWVhNWNlLzdiYjc2MjNkLTUwOTYtNDI1Yy1hZWFiLTAzZTcxZGVl
YTVjZS5jcmwwHwYDVR0jBBgwFoAUQA5g4U+itOEnGoDex+w+i9rBd4swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83YmI3NjIzZC01MDk2LTQyNWMtYWVhYi0wM2U3
MWRlZWE1Y2UuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6soMA0E
AgACMAcDBQAmB4jAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAGZNSCkJIgkdBPxzbvBiBsiO97icDBbqg+Ej
npYaFxhjAzH35zpZFVFS+8sZH07iMOpdO6m/9E6Wmz6uObfEJXx0NZuIcOXrBTOs
ByK2qI0MAy7CFfRv7NN/auAI5XNbKspS9TX02wMKPUZsP/b7jDw7kq9surLRaAY1
hc3wti/4tlhD3zB1H6msiyjOLCIF0SYZFq+c9Dny8b63bzA5XWAotj2HAH1+CYLK
vP/zPmf5CIxxG9FcR83RjvzGbGEs1X7rTU3I2pYw1Fn4hLNhCqS7XQ3WGqeaHHwh
FAJ29h6sYlSL7QT9xiUSZ1gBpz/AdGRE6RioEnCSt2/Ot/3BywU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:07:20 2025 by rpki-client