Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa
File:                     32e02635-8cd2-3775-81c9-ed30a8a029d4.roa (raw, json)
Hash identifier:          R/0ZKb7Tp+XZ+7m97ZNVR+DPXNQDtZN0qH/QTBlIilE=
Subject key identifier:   7F:3E:5E:64:F3:AC:CC:47:61:D3:38:33:D9:C8:44:E8:CF:BC:CF:5C
Certificate issuer:       /CN=e3587642-0817-4894-845b-fb11599b2f03
Certificate serial:       010D0C9F432858492E13C15ACDA72836DE2E0E00
Authority key identifier: 79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     401222
IP address blocks:        23.183.248.0/24 maxlen: 32
                          2602:f87d::/36 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c1:5a:cd:a7:28:36:de:2e:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3587642-0817-4894-845b-fb11599b2f03
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=5ce709a4-5c53-4b04-bf7a-be65d03c7c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:de:c5:f0:fc:e3:a2:f7:10:f1:7f:82:c9:bf:
                    a5:83:39:4a:bb:4e:87:b5:b8:49:54:57:e1:6f:87:
                    81:b7:fc:68:21:05:f4:9e:e2:2e:1b:f5:38:47:14:
                    32:38:7f:f7:cc:45:26:28:e1:f1:c2:f5:30:7c:7e:
                    15:9c:8c:56:59:f0:93:f8:e0:2f:4a:7c:a5:8a:fd:
                    e2:03:bb:8d:a8:2c:37:1d:e3:73:43:96:d6:2f:27:
                    84:a0:04:f0:c2:ed:29:13:ef:70:16:a0:16:bf:07:
                    68:22:a1:3e:8a:53:6c:03:94:53:40:49:24:fd:72:
                    57:5d:90:6c:ec:38:c8:bf:e0:1a:91:3e:1f:a8:e3:
                    d6:7c:68:3f:c3:1e:63:39:5d:6e:3e:58:ef:b1:61:
                    8b:fb:9a:46:fb:37:52:36:46:eb:71:b6:2a:39:ab:
                    af:7a:6b:b7:37:f5:71:8a:08:21:84:a1:28:e5:f3:
                    99:c7:bc:ff:ad:94:c3:ab:d0:51:92:22:4a:e0:c7:
                    71:fe:7f:d2:ea:ad:6b:e0:19:c0:d4:09:69:20:f5:
                    9d:95:82:34:1f:71:28:e4:6e:c9:5e:36:d1:ba:af:
                    c1:66:e0:2d:e5:97:c3:17:30:9c:66:c0:47:d9:11:
                    54:31:ab:8d:0a:f1:45:43:64:84:f3:a3:72:4b:65:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3E:5E:64:F3:AC:CC:47:61:D3:38:33:D9:C8:44:E8:CF:BC:CF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.crl

            X509v3 Authority Key Identifier:
                keyid:79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.248.0/24
                IPv6:
                  2602:f87d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:41:b6:ad:8c:7b:de:25:18:98:26:22:19:c8:c8:1e:7b:7e:
         d1:52:3a:a8:84:7d:2d:2d:32:24:95:15:be:66:3d:6f:0f:a6:
         d2:5b:a4:4e:b2:d4:eb:a1:9f:4b:db:b8:fa:76:c0:af:1d:61:
         64:a0:fe:2a:0f:88:fa:78:8f:04:3f:02:cb:54:01:9b:6c:df:
         42:db:13:9f:59:bf:f5:d9:e0:28:2b:c4:bd:4c:c0:0a:6f:c2:
         eb:51:63:17:58:0b:e7:7e:2e:03:a3:6a:49:fe:71:c7:e0:66:
         ef:94:b9:f1:72:14:09:fc:bf:c2:73:55:9c:2d:01:d1:74:7d:
         13:bd:12:53:f4:d1:87:87:02:c9:3a:e4:eb:72:13:60:f8:dc:
         30:d9:ad:a3:41:5b:aa:8b:29:f4:f1:cd:2a:60:7e:13:2c:87:
         76:90:20:75:56:b8:8c:5e:02:12:8b:b3:c1:c4:74:68:82:e8:
         60:9a:ec:77:93:95:0d:df:9a:a7:b0:f4:70:51:95:ce:cf:a2:
         a3:e8:4a:e0:bb:9f:f0:44:5c:ea:10:04:12:aa:c6:f0:28:8f:
         e5:db:7f:8b:b6:56:1d:f8:eb:ef:f1:87:f7:0c:e0:0d:11:2b:
         c2:6d:90:59:54:f6:65:bc:33:72:25:41:ea:ba:e7:c1:b4:6e:
         b2:54:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:52 2025 by rpki-client