Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa
File:                     7116d002-a54f-3ba1-bffd-5a3025913cf3.roa (raw, json)
Hash identifier:          ZLuBRi71BxWRtx5hT7GnAHoAhvmcnh80yuRqLZTqdQM=
Subject key identifier:   34:00:FD:00:5E:BE:F3:A8:5B:15:B5:C2:62:C9:B2:63:6A:9C:FD:8E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D6412ECF1086AD814EC45680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     400536
IP address blocks:        23.230.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:2e:cf:10:86:ad:81:4e:c4:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=b87d97f2-4ef9-4630-ac19-ed0425d317b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:4e:43:b2:a4:77:dc:76:43:cb:36:de:27:
                    eb:31:eb:8c:eb:be:2c:fd:4f:39:98:a4:15:39:63:
                    f9:44:3b:7c:66:ff:fc:54:d7:05:59:4d:bf:81:9b:
                    ed:c1:2d:a2:73:58:39:9c:bf:f2:9f:ef:18:e2:ff:
                    70:84:cb:6d:ce:bd:93:8b:b9:05:18:dd:e7:a1:b7:
                    b1:d3:91:02:79:54:19:00:ba:f7:3f:80:9a:7b:39:
                    cc:ca:48:27:ac:b3:ae:f6:19:a8:50:99:10:77:f5:
                    ee:dc:7a:1e:ce:72:6d:fc:90:73:a4:7d:6c:86:00:
                    97:ce:c6:0f:f2:02:67:62:ee:fb:f0:fb:a8:52:10:
                    9e:4d:2a:33:18:9e:d9:08:e4:a2:9e:ea:96:74:c0:
                    13:b9:89:53:06:f6:6f:2b:b9:62:77:25:74:bd:18:
                    50:c0:ea:45:a8:30:cc:2e:30:38:eb:f4:2f:cd:9f:
                    f7:b3:0b:1e:16:0e:69:bb:ad:d4:79:08:41:e5:a9:
                    f8:1f:2e:6c:17:b9:ab:4d:01:63:39:7f:e8:52:04:
                    23:ba:2e:0b:3f:fe:54:da:05:4e:0d:fe:7f:f6:c7:
                    a8:ef:d8:d7:d5:50:74:08:29:e9:17:71:8b:4f:4b:
                    6a:52:23:49:ab:07:3c:80:46:7a:21:5f:62:74:35:
                    45:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:00:FD:00:5E:BE:F3:A8:5B:15:B5:C2:62:C9:B2:63:6A:9C:FD:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7116d002-a54f-3ba1-bffd-5a3025913cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:e5:8f:69:99:60:5f:e1:15:ba:df:d1:47:60:c6:67:13:
         fb:1d:1e:f0:01:a7:f4:b6:c0:db:d8:93:8e:05:02:e2:ed:d3:
         5b:7b:33:9f:df:ff:6e:6e:91:ad:62:24:c0:e3:f9:82:21:3f:
         12:1a:9c:b1:18:cc:bb:88:aa:0b:13:77:81:03:3c:70:80:53:
         a7:2c:c6:60:9e:b2:27:ef:66:60:c7:10:2c:ef:08:98:7f:1b:
         ca:6a:b5:a9:64:ed:95:e0:3f:94:6f:07:cc:2e:56:eb:32:fe:
         68:46:60:6b:b1:a9:c5:d4:61:37:5b:f9:e4:20:2f:7a:ab:2b:
         93:fa:01:10:49:3b:9c:62:18:d4:37:58:59:54:f9:88:93:52:
         b4:fe:55:ab:b5:18:9a:f1:08:5b:98:67:5e:0e:43:97:8f:88:
         ee:30:56:3a:aa:25:ea:98:2a:ca:17:48:08:72:21:c0:5f:09:
         23:3f:80:c3:32:3f:de:2d:21:30:37:e4:52:05:29:f0:6c:51:
         0c:b4:b3:b8:85:04:70:da:4b:2a:0d:63:c2:9d:30:b2:b2:2e:
         25:43:ae:8b:36:5a:c6:75:a1:bd:c2:1d:3a:91:c7:8a:34:e8:
         60:1b:3c:e8:54:45:07:14:27:e4:2f:0f:c4:fd:e1:43:72:b4:
         74:cc:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:05 2025 by rpki-client