Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa
File:                     e3897077-3244-38c8-8022-d843cdb96403.roa (raw, json)
Hash identifier:          H6YESy+xSDKfykcLVu3BaUTGy09dkTAk2xJq4+/zbPo=
Subject key identifier:   65:3F:10:64:2D:61:0D:85:F3:05:4B:3D:D2:3F:AE:3A:BE:C4:00:24
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F432858489340B446CDD7D7E53FC1D480
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     396865
IP address blocks:        23.144.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:b4:46:cd:d7:d7:e5:3f:c1:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=ec0a89c7-8b34-4934-ab63-86c217263819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:e4:c3:0b:bf:ff:7e:4d:53:46:f2:1b:4c:
                    2e:b0:9a:02:ce:79:fe:43:de:0b:32:bd:fb:82:8e:
                    43:23:dd:8a:28:24:e7:48:7b:08:32:99:32:c5:1a:
                    f0:13:5c:b1:75:a8:26:db:6f:48:58:79:a7:5c:85:
                    99:e5:c9:f3:29:ce:f3:bf:72:22:0a:e5:20:fd:8c:
                    fa:70:4f:5c:0a:c8:bb:d7:91:c1:fa:32:58:e7:e2:
                    5c:63:2d:4e:26:61:c4:e2:c0:ca:32:92:13:a2:9a:
                    a0:fd:1f:34:e3:38:41:83:30:e4:39:81:36:4d:36:
                    c0:4b:f8:21:f6:90:99:02:31:22:08:69:f6:ab:29:
                    81:ac:f2:2f:20:da:f0:62:62:3f:07:d3:ef:7a:96:
                    e0:9f:49:2d:6d:11:ea:50:d5:4a:d4:2a:e7:95:dc:
                    c2:a1:b3:8a:1d:5c:be:b6:c0:53:13:a7:dc:83:1c:
                    ba:12:e6:65:fc:c9:de:b1:f7:e4:b2:2d:75:0b:7c:
                    90:86:fe:c3:e4:8c:ce:d8:a4:65:fc:e5:ed:cc:e2:
                    a4:5e:57:bd:d3:ba:34:7c:1b:4c:96:32:8a:d7:08:
                    e7:34:e0:f4:17:db:9f:8d:e8:2c:9a:ae:da:77:8e:
                    6e:05:10:1f:e2:f6:5d:f3:26:c4:92:ee:29:0e:83:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3F:10:64:2D:61:0D:85:F3:05:4B:3D:D2:3F:AE:3A:BE:C4:00:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:27:73:1d:50:3f:ef:1c:86:e8:0d:4e:70:7c:47:50:dc:
         ec:53:2b:4d:7d:50:62:84:db:21:7d:d4:45:d4:fe:cf:eb:6a:
         b9:90:4d:3f:0e:77:ac:ad:16:f0:fd:b9:86:1b:23:21:30:07:
         d1:4e:b1:44:14:0c:07:88:c2:a9:94:b7:67:3e:f4:5e:90:70:
         06:2c:21:15:5b:74:24:9d:b0:9a:57:c1:63:fc:48:bb:58:a4:
         21:24:ac:8c:ea:35:90:b7:53:75:14:f0:25:31:04:a2:d2:ea:
         09:64:c1:59:3a:3f:b2:e8:ec:ea:e0:8f:bd:41:7e:dd:2a:63:
         51:66:0b:12:19:6d:17:f4:21:f7:43:2f:83:59:f6:67:74:db:
         12:79:f8:19:36:1f:1f:d1:37:f6:fc:05:fa:5f:ec:55:71:ff:
         dc:33:74:98:2a:da:5d:28:d3:ff:91:5d:4b:d7:ae:20:d8:1f:
         46:bb:cc:72:3a:6c:f0:36:46:4a:9f:84:d7:9b:9a:46:60:88:
         b6:60:5a:86:98:b3:24:96:cd:ee:01:78:e5:1f:8e:94:32:89:
         dd:e5:a3:00:dc:37:ff:b4:7e:c4:52:e4:52:b0:0e:e5:f6:3f:
         35:5d:79:93:07:46:d4:33:d9:49:52:ad:a3:d5:c2:ce:73:83:
         35:d2:fc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:21 2025 by rpki-client