Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/ccb59ff9-ad3c-3f46-b138-47c42ce32ed5.roa
File:                     ccb59ff9-ad3c-3f46-b138-47c42ce32ed5.roa (raw, json)
Hash identifier:          weyOrHn+9yAGWN7H3hzugj81pM9mX4i5bMPUYl+h8gU=
Subject key identifier:   36:E1:6E:F5:97:EC:74:27:EB:7C:7B:3D:CA:7C:8C:D1:AE:DF:03:B1
Certificate issuer:       /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
Certificate serial:       010D0C9F432858488DAB4EA01E1757CDDB50D600
Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/ccb59ff9-ad3c-3f46-b138-47c42ce32ed5.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     209242
IP address blocks:        23.145.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:4e:a0:1e:17:57:cd:db:50:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=de26134f-895c-4eb0-a9c6-1f73026d940b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:22:43:4f:17:2a:c4:ee:aa:8b:52:27:a1:
                    83:20:eb:cb:23:79:53:aa:87:ee:7e:e1:7a:18:20:
                    cd:5e:a1:8c:25:9d:b3:84:27:76:d9:7e:b0:ac:84:
                    7d:45:cd:d6:4f:27:74:26:63:f0:df:d7:0d:5a:1a:
                    f9:c2:fa:b2:3d:63:1b:35:9e:95:7f:f0:f5:1a:99:
                    c2:c7:04:3d:5d:fe:af:ce:37:61:8d:cd:e4:36:1f:
                    c0:f2:f5:83:97:31:2e:10:d5:51:36:a5:42:e3:d1:
                    da:f2:cf:7b:25:34:18:77:4e:9f:fd:20:32:26:d0:
                    a7:89:c6:43:e9:54:c9:11:71:db:35:6c:be:c1:49:
                    6c:6c:5a:dc:fe:87:b9:83:3d:64:f0:0c:bf:f5:fc:
                    df:ea:5d:bf:a1:93:46:cc:ef:8b:d4:18:1f:cd:f7:
                    5f:6b:0d:c9:f0:df:cd:5f:56:8d:bf:75:88:88:33:
                    bc:09:24:79:69:0a:06:9f:e8:f5:44:e2:c7:63:dc:
                    b8:c1:ac:3d:1e:24:9a:15:63:2e:46:34:43:01:59:
                    5a:ce:14:fe:f1:5a:a3:5e:af:db:d0:08:a5:0f:c4:
                    67:88:c5:53:34:36:d9:b4:2a:d1:6d:c1:d2:5e:9b:
                    42:c6:0c:c9:fd:02:09:da:3c:ff:9a:59:97:f1:05:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:6E:F5:97:EC:74:27:EB:7C:7B:3D:CA:7C:8C:D1:AE:DF:03:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/ccb59ff9-ad3c-3f46-b138-47c42ce32ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c7:5a:6f:2f:fc:f1:e9:e9:a7:56:9a:5f:d8:75:40:c3:de:
         78:33:38:94:4b:5f:8c:35:14:96:0b:ce:26:a6:03:22:47:64:
         ef:a2:57:69:4b:37:3c:f0:aa:14:f5:4c:f5:4f:9d:4b:0d:76:
         c6:a8:53:61:99:a4:26:23:9f:93:de:33:b4:f2:0f:34:83:4f:
         36:6d:f0:fd:a3:54:4b:63:4b:ca:e4:01:1b:a0:63:1d:22:be:
         c6:d3:5f:68:0f:9a:18:3c:3f:72:98:4f:ff:a0:ad:86:76:69:
         f9:a4:06:d3:c1:1a:b1:6b:78:51:8f:c9:53:63:4a:68:23:26:
         80:75:bc:48:fd:9c:16:d6:4d:70:5c:3f:22:69:c1:86:78:38:
         d1:20:99:54:49:05:61:a8:a7:dc:1c:2b:ea:b4:20:65:7b:d1:
         a9:98:0f:f8:f7:53:b1:a0:47:58:04:8f:a8:60:a2:d4:2f:23:
         6f:89:1f:98:ee:01:2f:01:dd:d6:6d:82:16:5c:d4:c0:84:7c:
         1b:a6:3f:57:75:14:85:a5:d0:60:a1:ac:94:40:7a:0a:41:07:
         65:f9:e2:64:a0:a1:45:d9:56:5f:34:12:ef:0e:13:23:12:fd:
         52:6c:bb:25:df:45:30:40:45:cb:1f:dd:b5:3a:53:bf:d6:9e:
         49:2d:0f:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq06gHhdXzdtQ1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJk
MmFhMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZGUyNjEzNGYtODk1Yy00ZWIwLWE5YzYtMWY3MzAyNmQ5NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF4iQ08XKsTuqotSJ6GDIOvLI3lTqofufuF6
GCDNXqGMJZ2zhCd22X6wrIR9Rc3WTyd0JmPw39cNWhr5wvqyPWMbNZ6Vf/D1GpnC
xwQ9Xf6vzjdhjc3kNh/A8vWDlzEuENVRNqVC49Ha8s97JTQYd06f/SAyJtCnicZD
6VTJEXHbNWy+wUlsbFrc/oe5gz1k8Ay/9fzf6l2/oZNGzO+L1Bgfzfdfaw3J8N/N
X1aNv3WIiDO8CSR5aQoGn+j1ROLHY9y4waw9HiSaFWMuRjRDAVlazhT+8VqjXq/b
0AilD8RniMVTNDbZtCrRbcHSXptCxgzJ/QIJ2jz/mlmX8QXXpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbhbvWX7HQn63x7Pcp8jNGu3wOxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1
YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvY2NiNTlmZjktYWQzYy0z
ZjQ2LWIxMzgtNDdjNDJjZTMyZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTRmNWE4ZTEtM2QxYS00N2E1LWI2
YzgtY2Y2YzEyNDJkMmFhLzE0ZjVhOGUxLTNkMWEtNDdhNS1iNmM4LWNmNmMxMjQy
ZDJhYS5jcmwwHwYDVR0jBBgwFoAUr350/HCfq7eqaEboMNLdm/MIMDowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZj
MTI0MmQyYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFvHWm8v/PHp6adWml/YdUDD3ngzOJRLX4w1FJYLziamAyJHZO+iV2lL
NzzwqhT1TPVPnUsNdsaoU2GZpCYjn5PeM7TyDzSDTzZt8P2jVEtjS8rkARugYx0i
vsbTX2gPmhg8P3KYT/+grYZ2afmkBtPBGrFreFGPyVNjSmgjJoB1vEj9nBbWTXBc
PyJpwYZ4ONEgmVRJBWGop9wcK+q0IGV70amYD/j3U7GgR1gEj6hgotQvI2+JH5ju
AS8B3dZtghZc1MCEfBumP1d1FIWl0GChrJRAegpBB2X54mSgoUXZVl80Eu8OEyMS
/VJsuyXfRTBARcsf3bU6U7/WnkktD7M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:41 2025 by rpki-client