Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa
File:                     f915a33a-8fb8-313e-878b-c72cf841dc5f.roa (raw, json)
Hash identifier:          Q/IoCrQANbYVvFCaFyaHUxidem0W/sdbNs44In1on1Q=
Subject key identifier:   76:6C:FF:00:F3:EE:2E:23:A3:29:FC:8E:0D:78:73:DC:DA:70:CB:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848BFEB953BB712F19958323878
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     5650
IP address blocks:        23.230.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:95:3b:b7:12:f1:99:58:32:38:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=c8f81932-8907-47df-99eb-62122cf6ed20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:8a:51:45:10:e1:75:30:eb:9f:4d:e3:f1:
                    1d:b9:b8:59:ff:4a:8d:5e:b9:48:38:2c:fe:f4:97:
                    30:91:12:1b:ad:fa:91:04:d3:c4:2f:1f:84:b3:87:
                    e7:17:33:7a:a9:27:ea:50:07:91:b5:8a:9b:1d:4a:
                    fe:94:e0:e7:05:04:8e:c6:9c:c5:fa:98:fe:58:31:
                    16:f1:46:56:00:4f:de:3e:5b:31:f2:6b:b1:3b:d3:
                    ed:15:2b:08:d4:ba:38:bc:51:8c:c7:54:25:d7:fc:
                    01:04:2d:0e:8b:e6:00:83:9f:e8:60:d9:5b:be:a9:
                    ce:df:9a:05:85:56:8d:c4:ff:84:d1:d1:c7:04:5e:
                    6e:8b:37:58:0c:59:b2:28:5a:8c:96:af:ee:cc:64:
                    c9:a3:84:18:bd:c2:86:c7:48:45:e4:e1:7f:3a:df:
                    14:e0:84:43:ad:7d:75:7b:7d:e7:8b:f7:78:73:86:
                    54:a7:4c:76:c8:82:de:d0:22:ce:a5:58:ee:7b:b9:
                    e2:9c:b8:00:3d:34:0d:0c:36:c9:7b:6b:b8:29:cf:
                    34:ea:c9:8e:ae:17:92:70:6d:81:ea:a9:0b:ea:0a:
                    ba:b0:58:22:34:78:13:b2:86:f1:65:4a:be:0f:73:
                    23:a4:2b:38:95:ac:6a:4f:8c:23:cc:ac:a6:a6:51:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6C:FF:00:F3:EE:2E:23:A3:29:FC:8E:0D:78:73:DC:DA:70:CB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f915a33a-8fb8-313e-878b-c72cf841dc5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:00:03:45:f9:30:23:10:ca:3c:cd:77:72:cc:30:e1:96:1a:
         59:f7:e0:2c:64:8a:85:14:fa:83:53:90:7b:fd:b7:c3:d6:67:
         2e:55:4f:8a:56:5c:98:67:74:97:e9:8f:0b:c1:5d:66:dd:5f:
         50:d7:ef:20:62:66:7d:58:e8:98:3f:33:47:c9:1c:8d:89:ec:
         41:37:be:62:74:8f:20:85:6e:a8:69:75:ec:32:1e:3f:7a:f0:
         22:d7:74:53:58:ef:af:01:75:86:c7:7c:a6:d1:f1:8d:c2:19:
         82:21:91:d1:aa:b2:1c:ae:51:dd:20:23:c8:38:1a:11:0d:1c:
         ea:d8:e5:2f:9a:ca:90:74:a0:cb:c9:9e:77:b4:be:ab:b1:03:
         7e:77:6c:67:f8:11:c1:79:c8:0f:05:3e:c6:1f:5a:f8:59:f3:
         be:12:8d:f5:97:9a:ca:57:df:f6:c0:41:70:0f:26:b8:03:5e:
         7b:13:a2:56:95:0c:9b:4e:f6:74:29:33:69:e1:44:4c:87:42:
         3a:05:97:63:2c:a5:b3:48:f3:eb:70:27:45:3c:9f:96:b0:6b:
         e0:0d:08:e3:df:2d:62:6d:e5:c8:97:bc:1e:84:b5:70:5e:50:
         8a:e7:f9:0a:25:2b:5d:5f:3c:af:4a:ae:ec:6f:00:15:7b:5b:
         f2:47:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:22:35 2025 by rpki-client