Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/20295511-c524-3635-bb2d-effb24410499.roa
File:                     20295511-c524-3635-bb2d-effb24410499.roa (raw, json)
Hash identifier:          BrdkQY5QuQSbvmtkdfiZkgSrM4Gn+cYdUEPts+QvS3E=
Subject key identifier:   DD:1E:E1:C6:EF:9C:B5:8E:E3:9E:06:7C:60:84:D8:7C:F4:B6:85:C0
Certificate issuer:       /CN=b16dab15-57d6-416c-8c05-543d7b01e03d
Certificate serial:       010D0C9F43285848ADC604A98347CDDEC35EEDA0
Authority key identifier: 45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/20295511-c524-3635-bb2d-effb24410499.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     53835
IP address blocks:        23.185.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:04:a9:83:47:cd:de:c3:5e:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16dab15-57d6-416c-8c05-543d7b01e03d
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=7f1be9ed-6956-4681-bc32-5905726b8811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:f7:8e:71:a0:62:fa:21:84:7c:df:5b:65:
                    ff:10:9d:20:23:d9:e9:bb:2c:41:96:93:e9:be:eb:
                    5e:3f:8d:4c:21:cd:3c:33:fc:fc:61:74:e0:ed:13:
                    85:d6:7e:31:bd:a5:af:43:0c:5b:31:24:b4:46:47:
                    7d:cc:9d:b0:6b:89:04:d9:56:95:af:4f:60:9d:8b:
                    6c:2f:cf:77:18:41:5b:56:be:cb:7e:64:e2:1b:e6:
                    9c:55:63:79:b0:35:65:4b:a1:07:20:05:25:4e:70:
                    1e:0f:7c:ff:4f:32:0f:92:59:1e:a4:d5:9d:61:db:
                    b9:13:26:73:0b:2b:de:86:2a:03:76:11:b7:a0:5d:
                    40:34:df:e4:28:8a:3e:14:a9:2f:15:d5:8c:a2:05:
                    89:2f:3d:c1:cb:e8:f3:0b:27:6f:17:d4:0c:77:cf:
                    2f:1e:ef:6a:74:10:c4:71:1b:a8:10:8f:c6:ff:ba:
                    d4:fa:5c:ac:85:3d:78:74:b7:49:ae:93:0f:34:b5:
                    a5:c9:00:db:52:6a:0d:da:c6:b7:df:22:08:14:9f:
                    f1:ce:8c:d0:22:6e:8e:d4:04:53:f5:86:c8:b7:bf:
                    1e:f3:de:99:49:8e:45:51:d8:cb:2f:04:33:ea:ee:
                    d1:dc:94:db:55:55:67:87:23:b4:de:0c:69:8e:ad:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1E:E1:C6:EF:9C:B5:8E:E3:9E:06:7C:60:84:D8:7C:F4:B6:85:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/20295511-c524-3635-bb2d-effb24410499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d/b16dab15-57d6-416c-8c05-543d7b01e03d.crl

            X509v3 Authority Key Identifier:
                keyid:45:BD:2F:AF:92:E7:90:5D:60:6C:16:B8:F8:28:40:72:C9:43:78:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b16dab15-57d6-416c-8c05-543d7b01e03d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:94:f0:95:ea:4b:fc:63:6e:38:08:8c:7a:4b:54:9c:3d:5f:
         47:55:44:a6:ea:73:29:e9:4c:b8:d0:b8:4d:06:79:c5:f1:ad:
         55:7d:a9:ca:a5:ff:ae:1a:db:69:c5:18:6a:a8:ad:74:ae:8e:
         c0:4f:eb:dc:bb:9d:d0:b7:91:13:7b:45:d8:9f:7c:68:c3:29:
         27:8f:73:36:fb:fa:ca:d0:c1:e0:92:fd:eb:cb:06:f6:c7:46:
         7c:72:a6:5d:86:c9:98:ea:d6:c3:c3:18:6f:0e:ed:7a:58:28:
         cc:10:ef:a2:0d:b1:d1:2c:d2:04:df:4e:84:c9:df:22:82:f3:
         9f:00:6c:31:09:95:ed:a9:c3:06:7b:ba:00:dd:10:1f:17:db:
         0b:55:3f:b2:c2:b9:43:8e:cb:38:e7:91:72:3c:f1:75:f6:ff:
         68:e4:1d:bb:14:b3:14:52:af:c6:1f:cb:dd:2d:0c:8c:a1:2b:
         e2:9a:8a:69:aa:12:1e:76:ca:75:37:f1:94:a4:e4:86:34:cf:
         4b:96:7a:dc:97:1e:d7:29:71:f6:3a:89:35:a8:89:5a:57:b2:
         39:80:83:b4:a7:90:e0:88:89:3c:4e:fb:73:c4:9c:64:17:c1:
         1a:b1:ea:9a:87:19:49:21:e0:de:25:c0:4e:1b:7e:2c:03:2b:
         1e:32:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:33 2025 by rpki-client