Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa
File:                     7f701af8-6eba-3c96-bc00-1e222896d8bf.roa (raw, json)
Hash identifier:          GijnF7rLGLshE48/livvAYyoV1JsQenm8fUsrzIbAoY=
Subject key identifier:   EA:ED:EB:A7:17:FA:0A:8D:D9:1C:54:8F:60:A0:AB:F7:02:5F:61:B4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848D2113F8EF4F67AAF8EAA728C
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     9312
IP address blocks:        23.230.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3f:8e:f4:f6:7a:af:8e:aa:72:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=7ee061f9-ba97-4e06-91b7-55e387a3e3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:14:2e:4b:07:0b:0a:94:cd:61:2b:5f:62:
                    ba:2f:e0:fb:f2:70:f6:6b:1f:99:b1:59:26:c4:c0:
                    c3:aa:cd:a0:d0:2d:b2:da:f3:34:53:c1:3b:04:56:
                    a8:a6:66:30:7f:db:a4:c3:1e:f6:63:c2:01:7a:09:
                    6c:6a:fe:97:55:d0:08:e8:7a:1e:5e:86:58:01:99:
                    9e:fc:63:ca:73:b2:77:ab:7a:c9:ce:49:ac:ed:8e:
                    5b:33:3e:03:5d:e9:5f:a9:0e:6e:22:83:5a:de:b1:
                    a8:49:e2:06:93:c2:6d:9d:1c:65:dc:37:0d:09:3b:
                    27:2d:16:36:3a:3d:18:f8:08:c6:80:cc:51:d2:c8:
                    07:8d:58:68:e0:ce:68:62:3c:cf:d7:ee:bd:62:c3:
                    23:8e:9c:be:ca:3b:9f:0b:1d:96:78:62:3b:2b:d2:
                    59:2d:8b:69:fc:49:50:92:cd:fc:11:de:9a:0e:dc:
                    40:a8:d3:73:4d:df:7f:a0:5c:f5:23:f8:9f:43:53:
                    e7:b8:27:a8:eb:14:00:c2:b8:7b:ac:21:64:61:37:
                    5c:0a:c7:8f:02:9d:72:ba:ce:b6:4c:8e:bc:0d:83:
                    32:8b:d5:b3:71:74:89:f1:2b:1b:b5:a1:b3:dd:5f:
                    e1:96:d4:1b:94:57:a3:6e:45:cf:92:58:3b:2e:6b:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:ED:EB:A7:17:FA:0A:8D:D9:1C:54:8F:60:A0:AB:F7:02:5F:61:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7f701af8-6eba-3c96-bc00-1e222896d8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:51:a8:a7:50:8d:1d:91:ab:c6:24:d2:7c:2f:f3:1c:8a:36:
         96:78:1a:c6:cf:87:6a:8f:79:4f:fc:f8:0f:b4:a7:1a:30:e3:
         dd:a4:6b:e5:ed:3d:e9:1c:a8:fd:92:88:0a:b5:bb:73:00:11:
         6c:84:8c:b7:c2:e2:86:51:9e:c2:1e:30:de:25:79:6f:42:ff:
         dd:f0:fc:93:e6:53:4b:99:31:9e:bd:dc:11:cc:49:51:54:9c:
         11:b3:fb:68:e8:02:36:3f:33:19:44:d6:4e:25:c6:70:97:e3:
         a2:a1:20:c0:de:fe:8d:80:e7:63:42:0e:6b:b3:05:36:90:b8:
         0c:8d:22:3a:8e:2f:8f:49:36:40:9a:a9:27:d2:77:27:34:46:
         79:c1:34:8f:fb:17:3f:c5:07:bd:b0:61:a1:20:2f:ef:d6:36:
         04:16:cc:71:7a:3b:76:54:06:9d:96:b7:e6:e5:bc:76:9c:bb:
         67:0b:cc:cb:f0:28:f5:44:07:15:c6:d9:22:d6:ff:7a:95:a4:
         03:67:a6:d8:7c:38:cd:e8:69:82:27:1e:84:f0:91:7f:52:1a:
         2b:3d:14:ef:42:c3:60:90:35:64:d6:21:29:eb:0e:0b:ce:67:
         b1:40:be:04:05:bc:49:25:23:32:cd:e5:00:07:22:f6:ed:5f:
         b4:20:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:18 2025 by rpki-client