Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
File:                     d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa (raw, json)
Hash identifier:          WzUwRRiKxxNx3QZtTOe39Oax8edcJnLH/U2UWgAhbek=
Subject key identifier:   BB:64:12:97:25:13:19:CD:3F:CC:44:46:06:B5:5F:90:1B:31:CA:E2
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F43285848E59BD2892D5746FB05B9EE80
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     19879
IP address blocks:        23.169.88.0/24 maxlen: 24
                          23.169.89.0/24 maxlen: 24
                          2602:f9a6::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d2:89:2d:57:46:fb:05:b9:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=dc4080a7-6ce4-4252-acec-44c4381a65b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:84:fc:56:af:62:78:82:ae:43:ab:bb:9e:
                    3a:73:f1:d6:da:9e:75:30:85:31:c8:ca:15:1f:4a:
                    88:0e:48:36:ce:c6:e7:1b:94:78:cf:82:e2:6c:4b:
                    eb:0e:e5:c6:f3:9c:b8:f4:b4:5e:c9:61:10:7e:36:
                    1a:be:9f:f7:29:1a:2e:f2:c6:95:17:0f:5b:0c:8f:
                    5e:24:d8:d3:eb:d1:0d:a4:da:84:2e:02:6b:f6:88:
                    17:10:42:14:fd:e3:c9:42:8d:39:fc:16:94:fe:ef:
                    b3:77:e4:04:2e:b2:8d:b3:15:cf:6e:d2:dc:54:7f:
                    5e:06:ad:1f:b9:5d:49:05:c1:e0:cd:a3:8d:09:f4:
                    be:b6:59:43:45:84:04:dc:19:98:d9:33:1e:dc:05:
                    d4:01:6d:08:c1:fe:e6:7b:82:03:13:85:0f:7c:00:
                    99:a1:7e:68:f0:74:76:da:ea:8d:f9:cc:b1:8f:9f:
                    ed:bf:99:7a:02:f7:79:1b:b6:4d:10:de:7c:28:e5:
                    29:78:13:cb:aa:db:0a:a5:03:4a:45:d4:61:ce:5d:
                    9c:f7:c4:0b:76:ad:1e:16:d7:0c:24:f7:21:d1:9e:
                    f9:55:9c:8c:48:da:04:a1:67:b1:63:24:55:f6:b8:
                    83:7d:3b:84:bf:d7:6e:a5:0a:83:c5:83:49:4f:15:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:12:97:25:13:19:CD:3F:CC:44:46:06:B5:5F:90:1B:31:CA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/d823040d-2dfb-35ab-b9c4-95e6b2de2acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.88.0/23
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:8a:c2:73:f7:9d:28:63:16:0b:8e:e9:c7:7f:38:9e:cb:
         4b:9f:1a:3c:1f:30:f2:06:d5:31:c2:bf:02:cb:48:d4:f5:08:
         a3:b1:ff:9e:0d:9a:cb:80:6d:21:7d:bc:b1:2a:df:fe:9f:82:
         61:df:6a:20:d0:64:5b:db:70:d5:75:a4:94:b1:c4:43:63:93:
         1e:9f:15:ba:70:2f:04:a1:26:18:c5:32:29:bd:e2:a5:9c:0e:
         29:2a:06:97:4c:a6:0a:07:84:dd:cf:2f:0d:22:51:7a:72:be:
         dd:5d:67:9f:7b:f1:78:9e:6c:ec:99:f8:c8:72:62:2e:70:d2:
         f3:73:9c:ca:90:9b:6d:14:51:d3:3e:d8:a4:19:04:be:03:56:
         03:ac:7e:bb:3b:8f:f7:93:14:85:5e:4c:2d:60:91:f1:1d:4b:
         17:9a:fa:78:39:55:75:03:1c:d3:56:ac:6d:4a:68:cb:b9:86:
         54:4d:a7:ec:0a:5e:0a:b8:bb:23:1c:67:25:7f:e6:7f:b7:64:
         86:34:55:db:e1:dc:80:b0:30:24:0e:50:b5:73:27:48:07:4a:
         dc:cd:95:de:ef:d3:8d:bb:72:24:da:cb:ff:5c:ea:5f:dd:55:
         da:56:b5:57:68:96:09:00:26:c0:fd:84:11:68:c9:ce:d7:e4:
         77:c6:a2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:30 2025 by rpki-client