Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/cb4a0007-2f19-3f80-a615-0de555126b1c.roa
File:                     cb4a0007-2f19-3f80-a615-0de555126b1c.roa (raw, json)
Hash identifier:          EktHITF56h2BJuHG+nDgAUoaUcV0mp87tmaHZ0Fd/lc=
Subject key identifier:   B7:AE:78:4A:36:2A:CD:81:1D:3F:7B:1E:E0:3A:F9:1E:A2:84:67:9D
Certificate issuer:       /CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
Certificate serial:       010D0C9F432858489A3B4BB89479817948E79200
Authority key identifier: D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/cb4a0007-2f19-3f80-a615-0de555126b1c.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     16611
IP address blocks:        23.163.136.0/24 maxlen: 24
                          23.175.248.0/24 maxlen: 24
                          149.112.111.0/24 maxlen: 24
                          2602:fa07::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:4b:b8:94:79:81:79:48:e7:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b10d7ba-e273-4d34-8688-c7c1e38ab6da
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=adec2d98-7d37-4d7c-8d27-814ff08a51fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:c3:c7:5a:dd:a4:19:3c:0c:73:f3:d0:2d:
                    61:58:ae:8c:6e:60:c9:81:6a:3b:1f:8a:8e:19:30:
                    07:72:45:f9:d2:3a:48:a0:bc:6a:73:e6:cc:e9:6d:
                    2d:85:30:fa:6f:c5:30:db:e5:17:aa:5d:f3:b0:e1:
                    5a:72:7f:15:26:8d:e5:57:57:e5:73:39:1a:00:99:
                    35:2d:fe:08:bc:5c:33:63:3a:f0:b5:b6:a3:64:df:
                    8e:28:bf:88:9a:d6:51:89:46:ed:5f:cc:d4:90:3d:
                    79:35:5a:09:f6:00:28:25:fa:2d:79:fb:54:96:40:
                    ec:df:ef:96:dd:5e:02:44:79:70:fc:7b:7e:81:83:
                    ae:a3:a5:0a:5b:51:fb:73:3b:c3:88:74:31:0b:eb:
                    be:25:d8:0b:29:75:f3:af:85:6f:34:58:b5:5f:df:
                    30:2b:a2:a5:66:93:69:de:73:87:b0:ea:37:83:bd:
                    c6:cb:29:c7:aa:3c:0e:b2:33:5c:71:aa:28:b3:6c:
                    b5:f4:9d:91:9b:4b:3f:d0:ed:f9:f6:5a:2a:d9:a8:
                    71:9f:de:38:2e:6e:db:1e:83:68:84:c1:5a:0a:59:
                    0f:4a:6e:2a:c1:7d:d5:5d:44:78:9f:0b:54:8b:e7:
                    fa:26:00:93:2c:e5:59:21:07:17:68:6c:91:72:23:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AE:78:4A:36:2A:CD:81:1D:3F:7B:1E:E0:3A:F9:1E:A2:84:67:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/cb4a0007-2f19-3f80-a615-0de555126b1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.crl

            X509v3 Authority Key Identifier:
                keyid:D6:45:D5:C1:6C:FB:39:78:63:09:8C:D9:84:C6:B1:13:16:72:9A:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7b10d7ba-e273-4d34-8688-c7c1e38ab6da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.136.0/24
                  23.175.248.0/24
                  149.112.111.0/24
                IPv6:
                  2602:fa07::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:05:67:76:dd:7d:bb:df:7a:dc:c3:f7:cc:a4:4f:f7:a7:50:
         31:10:21:bf:8f:4d:43:0e:4c:1c:66:0c:be:c9:71:9d:5c:78:
         8a:d3:2d:a6:de:fb:e0:c4:3f:f2:ab:df:2c:f2:65:ea:67:59:
         7f:0c:d8:64:9d:75:25:94:65:20:68:c0:8e:ce:58:32:b3:8b:
         ee:a4:73:33:cd:73:a7:a5:b0:e6:85:c7:2c:b7:87:4f:11:64:
         ac:e6:be:14:b6:16:dc:18:76:73:14:b8:da:d9:18:9d:6b:8a:
         2f:20:d3:06:a9:b8:7a:cf:f2:f4:25:96:b9:7a:46:08:73:28:
         61:2c:0e:7a:e8:cf:19:df:e3:c5:8d:84:9e:94:36:dd:04:d3:
         c1:5f:4a:87:6c:04:69:16:26:9c:ff:fc:52:71:1b:bb:ea:fb:
         32:51:b1:3f:46:a0:2f:92:0e:5b:74:1e:26:33:57:71:5e:d9:
         8b:cd:d8:50:8b:74:f1:fb:9b:a5:6e:fb:87:07:f3:84:a7:6e:
         7d:17:47:f6:32:29:e9:5d:2f:6f:4c:a7:80:81:03:9e:0e:bc:
         18:01:2c:85:5d:05:53:17:86:df:cd:1c:7e:42:19:55:17:17:
         34:0b:77:d0:fb:58:15:2e:ee:6f:93:55:b2:31:0f:08:52:c9:
         51:46:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:20 2025 by rpki-client