Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1399815-8124-3768-921a-ad4ef03620a5.roa
File:                     c1399815-8124-3768-921a-ad4ef03620a5.roa (raw, json)
Hash identifier:          Id+Ezz6/NNUn8O/MZ9jL93HhP+l1pgfcpf9cywGrG9c=
Subject key identifier:   55:1B:39:40:AE:CE:A1:43:78:27:41:3F:FE:F4:5F:36:AC:7B:EC:E5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848BBBB887CC6580BF0E424B100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1399815-8124-3768-921a-ad4ef03620a5.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     8100
IP address blocks:        23.230.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:88:7c:c6:58:0b:f0:e4:24:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=569985df-ce26-4016-b2f8-8b54b4048b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:93:aa:14:ee:2e:0d:e8:fa:e5:08:ee:56:
                    3b:61:1d:13:32:2a:45:7c:79:8f:7b:76:28:f5:0a:
                    a5:20:67:24:a0:48:8c:44:06:48:db:73:b5:c3:b1:
                    78:a6:38:a3:ef:8b:f4:ca:9d:6f:a9:8c:02:05:87:
                    72:da:3b:11:b2:83:88:17:5a:bb:ee:97:4a:62:3e:
                    f9:bb:95:86:7f:07:d3:57:5b:14:02:94:c4:4d:a9:
                    51:39:62:51:7a:c0:26:68:27:05:39:54:d8:8f:52:
                    fa:0b:29:e8:4b:94:97:5d:e1:49:91:95:77:70:48:
                    67:ca:14:43:24:a7:c3:71:ee:26:11:20:1a:7c:d0:
                    6b:56:24:89:cd:e2:79:f1:6f:41:a2:62:28:81:0e:
                    be:76:80:cd:07:fc:e1:cd:a4:27:2d:2c:a5:4e:ec:
                    b5:5d:ea:13:3a:be:b4:61:68:7c:35:af:b9:4b:d2:
                    91:14:0f:36:3f:d7:6d:a1:c2:a1:a1:5f:4c:b3:82:
                    13:c4:b3:b4:ad:19:e7:98:38:eb:c7:0d:7b:04:13:
                    d0:62:f3:71:9d:d5:b0:0d:f4:dd:46:a1:ac:24:76:
                    e5:dd:3d:5d:5d:55:e5:2f:af:ff:41:97:9a:a3:02:
                    58:f8:d7:80:df:05:46:8a:47:59:ee:b4:fa:ea:fb:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:39:40:AE:CE:A1:43:78:27:41:3F:FE:F4:5F:36:AC:7B:EC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c1399815-8124-3768-921a-ad4ef03620a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ba:05:8c:f8:17:39:bc:1b:c8:50:86:db:5d:54:a1:40:2b:
         00:99:11:de:dc:c1:1a:79:96:25:c3:41:fd:c7:ac:93:32:1b:
         8f:85:4c:48:a9:4a:40:63:1e:e8:c7:6d:1f:ed:23:50:04:31:
         be:43:a0:2c:8b:bf:c3:a6:b8:24:8c:65:73:09:29:17:1a:f5:
         bc:2a:50:69:ff:b4:44:69:76:29:56:71:a8:18:f6:0f:0b:be:
         c5:d7:43:b0:6b:87:b0:6a:83:b2:36:c5:67:64:0f:ed:ca:b9:
         0a:24:90:3a:bd:25:52:b0:2b:af:4a:3e:92:ed:f2:cd:5a:2f:
         74:6b:7f:55:d3:95:f6:f9:6e:e9:e7:69:1d:f7:d1:ee:e9:69:
         d5:83:ab:15:36:c7:4d:b0:13:5c:34:5a:c2:da:9c:8a:2a:25:
         83:01:16:c2:ab:26:91:dc:2c:ed:9d:d3:72:13:c8:fc:ae:7a:
         45:a2:18:76:ef:1c:f9:73:a9:83:a1:2c:43:f8:06:db:a8:ba:
         81:21:e8:eb:74:ae:bb:56:55:75:6b:e3:f0:c8:51:78:31:57:
         45:80:43:1a:9c:d2:95:8a:d8:ff:ed:17:3d:fc:61:9e:27:d8:
         1a:cd:fc:bd:73:0c:6f:40:94:7a:a7:7b:94:6b:1b:2a:3c:55:
         1b:b3:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:00 2025 by rpki-client