Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b90233-64a7-3133-bb78-9d19cd5bfd81.roa
File:                     63b90233-64a7-3133-bb78-9d19cd5bfd81.roa (raw, json)
Hash identifier:          WOLeURyI4z7JfbdYBB1ETcMy8vDZ91rCqvF0L1PDMbs=
Subject key identifier:   AF:1B:21:FF:15:35:CB:FD:13:B9:FA:F4:D8:37:E9:85:65:6A:D5:03
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849287E71D8520C70F465BF9C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b90233-64a7-3133-bb78-9d19cd5bfd81.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     10557
IP address blocks:        23.230.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:71:d8:52:0c:70:f4:65:bf:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=cd0bec30-f7d2-46b8-a512-5e1de09ebc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:7f:3b:2f:f2:b9:f8:cd:87:0d:d8:fe:6e:
                    05:de:12:a2:41:d7:2d:e0:3d:13:18:44:77:7d:b2:
                    68:c7:0e:1c:1a:2c:38:da:17:5e:48:8a:f0:3a:00:
                    de:9f:54:78:7a:18:49:d9:bf:c7:ce:29:2f:cf:63:
                    97:0f:78:1f:72:8c:b6:e0:32:dd:9b:3a:21:ce:8b:
                    2a:59:29:d5:02:51:51:fa:22:e5:cb:61:c6:b9:2c:
                    5d:4f:46:f9:66:ae:9d:e2:39:cd:b9:e0:76:ba:3d:
                    71:dc:0e:6c:2f:b6:64:df:c2:9c:69:2d:4b:d3:1e:
                    b2:14:f7:c0:a1:84:37:c8:1a:8c:05:90:b1:70:b1:
                    9e:08:7c:dd:3e:7c:11:34:fc:6e:68:6b:d0:69:2c:
                    56:47:cc:42:ff:50:f1:1b:f7:f8:6a:bf:62:41:a2:
                    5a:57:7f:af:47:61:b1:e1:bf:4e:68:43:91:9a:8c:
                    cc:f4:83:93:c5:f2:95:4c:67:32:4d:20:1b:66:07:
                    16:69:cd:a4:3e:00:5c:60:61:a1:82:a3:eb:da:50:
                    34:db:f2:3b:ce:15:8c:e6:cc:99:83:40:75:b5:8c:
                    26:0d:c5:b5:7e:81:4e:4f:79:99:a6:4c:e9:1b:8e:
                    db:69:02:1a:b6:2d:15:3d:70:71:5b:b5:e2:14:e2:
                    55:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:21:FF:15:35:CB:FD:13:B9:FA:F4:D8:37:E9:85:65:6A:D5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/63b90233-64a7-3133-bb78-9d19cd5bfd81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:57:7b:50:2f:45:31:f4:ee:64:d5:c7:b9:9c:4c:49:5e:1b:
         43:47:67:cc:93:bf:d2:69:b5:3f:5b:64:a3:f1:58:8b:91:ec:
         7a:14:5a:a0:34:d0:28:9b:c6:fa:aa:4e:bd:58:af:75:76:f2:
         ba:dc:8f:4b:cb:ff:a0:fa:37:0e:91:be:98:fa:4b:7d:4e:48:
         9f:bf:dd:a1:33:e1:b9:b7:18:a7:79:ca:14:10:25:81:34:ac:
         9f:56:2a:ff:d0:54:54:71:77:97:29:96:a0:61:0d:7d:74:b0:
         6c:52:7d:a8:c3:b1:79:77:d5:94:44:59:7a:95:c5:45:4d:ac:
         95:68:a2:7f:bd:32:5f:c7:72:f7:68:0f:e3:ac:dd:8a:ea:35:
         7c:9e:44:33:29:1a:ac:d0:49:8c:dd:90:9e:3a:85:d7:49:22:
         88:45:08:38:97:5e:de:71:de:a1:a1:1f:c6:c8:21:72:09:0c:
         b0:18:06:af:21:b6:f3:3e:8d:77:d9:2e:38:22:86:7a:d1:de:
         35:62:10:b2:d2:47:df:e8:9c:71:23:af:e6:f9:bb:76:91:f6:
         cb:71:63:ad:be:a0:5f:bb:72:49:01:86:6a:5f:02:6e:ae:77:
         44:4d:ec:a6:28:65:e7:69:29:8a:05:a3:47:f5:1b:8b:3f:37:
         79:d5:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:41:58 2025 by rpki-client