Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa
File:                     32d408f4-04fa-3ac0-bfee-544070de9c18.roa (raw, json)
Hash identifier:          UwphXt4ELcSToxVIzzu79+De7fABTomhytygmYG9vQE=
Subject key identifier:   5F:07:F5:C9:A5:2C:68:BA:49:47:33:36:74:4D:F6:5E:F3:41:60:A2
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584917DC2EDA62405C4261DFD5C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     265753
IP address blocks:        23.227.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2e:da:62:40:5c:42:61:df:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=8941ffa6-8185-4839-8d24-bf68eed572a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0b:f1:37:1b:d3:43:dc:9a:46:02:58:9f:74:
                    8b:ed:d2:d8:3c:20:09:6b:3f:46:01:d0:31:57:73:
                    ad:52:79:52:9d:03:2a:47:d9:1d:79:00:8e:68:a7:
                    8a:73:3d:2f:ac:84:31:3e:4d:bf:71:77:3f:bb:37:
                    b2:12:35:6c:2f:a3:09:a5:02:10:6f:20:af:65:05:
                    a4:7e:23:4a:5c:f1:5a:0e:3c:89:cc:e8:8e:8f:d8:
                    fb:ae:7c:25:b9:85:d8:7b:97:c1:3f:49:d0:92:17:
                    7f:d0:56:2e:28:eb:46:92:c9:6f:fd:f1:37:f8:4b:
                    57:7b:18:29:83:d4:ac:22:3b:8c:3f:74:72:00:b6:
                    4f:f0:16:35:bf:5e:4d:b9:c1:0e:ba:34:4c:9d:c7:
                    e2:6c:2f:89:ad:1b:bb:73:48:10:cc:47:af:fc:f3:
                    83:76:cb:5f:fd:6f:15:72:be:1d:8a:b6:0a:9c:71:
                    ad:51:26:a6:5d:16:49:78:07:0c:c7:80:11:80:d2:
                    af:b4:e8:21:5c:bc:b1:3f:0a:2c:11:fb:c0:17:22:
                    25:66:39:92:74:00:7c:23:14:87:89:c1:92:db:43:
                    47:52:6d:ac:06:e2:cc:b0:ff:a9:fa:76:4a:8c:af:
                    99:b0:a7:65:c7:2d:6b:40:5f:e7:40:9d:12:f1:94:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:F5:C9:A5:2C:68:BA:49:47:33:36:74:4D:F6:5E:F3:41:60:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/32d408f4-04fa-3ac0-bfee-544070de9c18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:37:07:00:20:a1:6c:95:c3:9e:64:ec:17:7b:ba:ac:9d:b5:
         a5:39:c4:ef:be:d1:3b:60:c6:f6:5d:c3:0b:eb:6d:00:cd:02:
         96:16:ec:62:c4:4a:6c:f1:b2:33:68:d4:e9:bc:17:a5:b6:9d:
         dd:57:81:99:77:50:15:8c:75:27:61:fc:df:5e:19:b7:fb:38:
         cd:5f:d9:80:f6:9c:7b:37:37:1b:6d:a2:7c:a5:e4:f3:99:8d:
         fc:89:a7:55:13:db:6b:7e:53:91:96:d0:76:ff:e4:86:50:fe:
         7b:bf:7d:48:e0:d6:07:4c:e9:03:8e:2e:8b:eb:4b:22:04:9e:
         3f:2e:fd:14:46:ff:9f:c4:fa:96:58:7b:e5:48:fc:f3:7d:85:
         95:1c:24:cb:8f:2b:a4:2e:a7:30:3a:78:93:aa:55:46:d5:5f:
         a2:4a:d2:14:d5:20:26:c6:a8:b1:ab:fe:46:30:8b:92:55:96:
         7d:5a:b4:30:a7:52:40:3e:9d:e7:00:55:38:1c:ed:d1:fb:ea:
         73:e6:c1:76:f7:1d:9d:97:8e:85:e7:0f:57:fd:88:5c:37:74:
         09:81:bd:bf:24:f2:5f:e3:d0:01:ee:14:de:e5:4c:8f:cc:b3:
         58:02:17:63:19:1b:e5:2e:fb:ee:9d:0d:85:1e:b0:72:60:65:
         e5:50:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:11 2025 by rpki-client