Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa
File:                     cdaea958-113c-3933-89d1-eadb786eec06.roa (raw, json)
Hash identifier:          Whb8963MdpnzrhJsNQdfgzpYcYDs6/eYa+4y3ysVtL8=
Subject key identifier:   8C:3E:3F:1F:99:BA:B2:3A:D5:48:3F:69:2C:22:C7:73:7D:4D:F5:17
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584917DC2ECDEDF1DB851F8D50C0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     266820
IP address blocks:        23.227.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:2e:cd:ed:f1:db:85:1f:8d:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=ed958f73-7d27-42d0-95c6-6a0b250e9ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:33:c8:60:f9:3f:37:75:80:45:5b:22:d4:83:
                    7c:f8:9f:af:56:63:b4:ad:58:22:e2:69:a6:3a:f8:
                    96:b7:cf:b9:2a:af:98:45:32:81:12:2b:9b:c4:5a:
                    92:4f:ef:9f:d9:7a:a2:1b:b6:68:6b:6d:e1:26:b5:
                    39:18:f3:e9:10:2f:37:1d:c3:02:b0:74:0b:da:9d:
                    a4:06:0d:49:fe:f9:d8:ec:60:5c:d4:68:fa:26:3e:
                    ee:b4:c5:a3:82:bb:f0:86:fa:c8:9f:31:df:1f:dd:
                    4d:0c:5e:73:ee:3c:d3:0b:77:98:f1:e1:72:15:b7:
                    ad:06:7e:53:dc:d2:d2:35:c7:dd:04:9c:ea:00:b3:
                    31:9b:7a:7f:b8:61:fd:30:60:d1:de:74:1b:e1:a9:
                    d9:b2:a3:10:e0:78:14:1c:ea:f0:18:e1:35:7e:f1:
                    19:d8:37:c3:33:a4:07:a8:35:33:8d:90:0d:d0:1d:
                    c4:b8:3c:00:74:1f:c7:4a:2c:bd:e5:5c:75:b3:31:
                    9d:d2:96:ad:a6:97:35:ab:75:7b:a2:15:40:32:b5:
                    12:2b:2e:4f:41:a8:07:94:56:b3:84:c9:8d:8c:1f:
                    b3:dd:fb:d9:aa:60:59:73:2e:8d:04:b7:96:4e:18:
                    ae:3e:da:96:d2:50:3e:48:06:90:e7:e0:dc:5d:2d:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3E:3F:1F:99:BA:B2:3A:D5:48:3F:69:2C:22:C7:73:7D:4D:F5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cdaea958-113c-3933-89d1-eadb786eec06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:82:ba:a2:72:e1:d8:c8:97:85:e3:6e:15:98:88:e9:fc:34:
         bc:47:18:c9:e5:57:fb:29:e0:c6:7d:60:ba:5b:a2:dd:4c:af:
         33:ef:20:30:22:75:19:fe:27:64:0c:11:bf:5c:05:6a:35:63:
         2e:be:ac:c7:49:67:e5:c3:a4:f8:1f:7b:06:19:48:98:ef:08:
         ff:83:f3:ce:2b:e5:65:3c:9a:9b:ee:fd:3c:e4:41:a3:4c:a1:
         84:0b:d2:67:59:c5:fd:f2:32:b4:63:cc:b4:81:07:23:41:07:
         af:a8:3f:ef:27:6b:fa:7a:14:da:e3:fc:c7:ae:bb:a3:6e:0d:
         f3:29:3b:f6:7a:b6:a8:ae:19:e5:1f:7b:47:68:1e:b3:83:d5:
         34:6b:36:ab:22:b8:3f:b6:82:69:15:32:a8:aa:33:08:5f:6e:
         cc:f7:96:fe:bb:36:2b:c9:81:0a:2b:3a:68:fd:8d:2e:6f:97:
         32:62:f3:a5:e6:e8:40:7c:94:94:00:23:5c:fa:f1:be:8d:70:
         ce:b4:ba:ae:91:ce:a7:45:f5:cc:ae:37:c9:52:8e:14:1e:26:
         64:ca:bf:e1:12:3a:8e:6d:c8:9c:b2:f5:b8:e0:0a:cf:7f:d7:
         61:c1:50:f8:0c:eb:65:f7:f7:2f:25:8a:1b:62:30:a0:f7:c1:
         76:eb:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:59 2025 by rpki-client