Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/dea42b91-56b8-31ba-9130-753e24d29e78.roa
File:                     dea42b91-56b8-31ba-9130-753e24d29e78.roa (raw, json)
Hash identifier:          1K1pN8V3pe5LDwbf9mlym5OTXnGcIkPYPTZngtoLbvY=
Subject key identifier:   C4:56:AA:57:81:C2:F9:10:1F:A4:7B:F0:B6:A7:50:BE:34:40:D2:DA
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858483E1AB1C20241036B10F79000
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/dea42b91-56b8-31ba-9130-753e24d29e78.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     59426
IP address blocks:        208.123.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:b1:c2:02:41:03:6b:10:f7:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=e2e572e1-9dfb-4148-8265-f15e346efdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:48:88:3b:9a:69:6c:68:e5:97:c6:76:5c:c0:
                    f4:2c:fb:9b:2c:1d:65:e8:df:83:e7:e1:4e:67:e2:
                    00:a6:2c:06:82:4d:2c:a6:17:b7:02:d7:3a:5a:ff:
                    3e:6b:24:9d:69:47:1a:f6:9c:79:83:69:1c:c1:dd:
                    7c:c9:73:98:88:24:01:a1:97:78:c1:e1:a3:32:f3:
                    3d:30:83:a4:04:cf:47:86:76:25:ea:3e:1c:cc:1e:
                    80:ff:da:67:b4:ed:6c:a9:2c:e0:76:84:d1:67:2a:
                    0e:69:cd:e0:83:56:f8:65:ed:42:80:73:e3:70:74:
                    f1:f5:92:34:40:6f:d5:c0:54:95:28:97:8a:7a:d3:
                    03:0b:b2:7c:cc:d6:7e:a1:2d:7c:95:a8:51:52:46:
                    ff:fc:ec:4e:48:ac:b8:f8:6c:ce:f1:42:2c:87:b6:
                    3f:ba:55:82:33:9b:02:cc:f1:a8:39:47:81:b5:ee:
                    f2:cc:70:dd:b0:35:c2:83:e3:e8:97:d5:17:23:dd:
                    f4:4e:dd:6e:f4:ba:e3:e5:9a:11:2b:d5:09:87:8b:
                    7a:c7:4e:21:b5:b4:a4:69:63:d9:d0:ad:5b:03:b0:
                    dc:16:35:00:ae:60:46:fd:1a:8c:18:ca:49:12:63:
                    d5:60:de:48:89:ed:56:b2:ac:d6:2e:e3:e7:69:61:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:AA:57:81:C2:F9:10:1F:A4:7B:F0:B6:A7:50:BE:34:40:D2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/dea42b91-56b8-31ba-9130-753e24d29e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:f4:80:f0:b6:f1:77:14:d4:a6:a7:44:4b:d9:a2:4e:42:
         ca:5b:e6:86:76:70:66:b7:64:01:04:00:b7:26:bb:00:b0:32:
         f8:5e:ce:96:79:17:90:8e:ef:f8:df:a9:31:da:c4:1d:08:0b:
         cf:47:22:c5:16:0e:04:26:d6:31:15:d7:9e:53:91:25:46:34:
         38:5d:c8:84:43:e0:c3:37:cd:1e:0c:ff:21:47:93:f1:87:a0:
         6f:78:0f:ae:e5:9c:c1:99:e4:ee:1a:c2:85:b3:df:d8:fd:fe:
         ff:0f:bd:50:0a:05:0b:80:a1:a5:a5:ad:b0:3d:7a:c0:c1:ee:
         df:01:32:a8:68:f4:11:81:3e:30:2c:88:b7:2b:46:93:74:c4:
         44:88:85:69:28:af:b8:f5:83:a9:9b:b4:3b:a5:2c:f1:75:35:
         f4:07:61:89:51:d2:45:fe:e0:a1:2b:67:c2:b2:e6:23:b5:de:
         87:3d:7f:aa:e7:d8:1f:ca:61:5a:cc:a1:80:84:bb:d8:d5:90:
         cb:68:07:ab:22:69:35:1e:18:7f:76:c5:7b:e8:3f:d0:40:cb:
         a9:3d:2a:d4:e9:2d:64:ef:45:b8:8e:22:c9:99:c3:20:6c:fc:
         66:d0:a1:be:fc:7d:fc:eb:86:d1:c9:43:26:3c:5c:f5:27:7b:
         49:eb:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:55 2025 by rpki-client