Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
File:                     c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa (raw, json)
Hash identifier:          J8U+jvIDjfHUt0G9iEkZ39loKLRQ18xI6pteb7XskQA=
Subject key identifier:   6E:4D:EC:E7:F6:42:0B:A7:D0:8C:16:BF:17:6D:CB:D3:DB:CE:EF:12
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BE9FED8360867E5001380
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     30633
IP address blocks:        23.19.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e9:fe:d8:36:08:67:e5:00:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=c6e90154-686d-4ce4-abf3-2b7a695b7486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:74:5a:98:04:cc:90:a5:4d:28:10:95:95:
                    72:da:ff:58:20:ab:fc:f4:2e:87:63:cc:2c:29:ff:
                    c7:ec:2a:80:86:99:4b:35:4d:23:ea:d4:8f:21:d9:
                    e1:bd:99:0c:eb:51:26:78:81:c3:8a:48:d2:d7:34:
                    46:10:c6:a4:11:c2:86:3f:a5:55:fe:72:2c:48:a2:
                    6e:c4:d1:6f:d3:02:42:0b:0b:09:f9:14:32:4a:ab:
                    a0:84:16:b0:eb:1a:44:a9:68:97:8f:95:90:b1:26:
                    3a:52:ab:c6:74:6c:80:a2:63:f2:71:9b:08:1d:bb:
                    c1:92:f9:72:79:aa:44:85:37:04:0b:37:86:00:88:
                    a9:96:bb:2a:52:d4:e2:6f:d6:eb:d5:69:bd:bd:da:
                    d5:3f:51:44:92:27:8b:aa:31:83:f2:3c:5f:ff:46:
                    12:e1:a0:02:09:24:a4:71:d3:46:e1:d7:15:2d:67:
                    44:cd:3f:bb:20:3e:bb:c9:3a:f0:d8:35:e5:39:79:
                    c7:32:63:7c:9f:f7:3b:11:ce:be:eb:53:48:f7:93:
                    b1:44:89:36:3c:46:9b:ff:dd:79:c8:83:4d:12:e9:
                    58:2d:bd:72:a3:03:64:e9:db:5b:12:11:5a:85:e9:
                    f1:08:7a:2f:ce:27:44:76:04:2a:d0:85:ab:a2:b4:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:EC:E7:F6:42:0B:A7:D0:8C:16:BF:17:6D:CB:D3:DB:CE:EF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c9ad6fa0-e61f-38b7-aa1e-4185f5cd8b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:41:8c:86:c0:fd:5c:01:82:9e:0f:25:d3:71:8c:66:94:39:
         e7:dd:e5:f9:03:c3:f2:b9:8d:c9:72:94:03:04:31:fd:52:24:
         d6:6d:29:88:74:43:ac:5e:d3:cf:ca:2a:32:57:ed:a7:14:ac:
         2a:8b:9f:00:d8:59:2a:ed:b3:b1:14:ee:ce:8b:a3:49:64:70:
         5b:66:35:ec:45:41:60:6b:3c:7c:18:54:13:05:2f:c4:6d:7d:
         66:1a:ae:98:08:32:6b:e6:2e:2f:03:43:fa:63:51:d9:e9:77:
         91:de:5e:df:5e:3a:31:2a:34:19:25:44:f7:76:86:4c:97:e0:
         de:bf:42:ea:34:f0:3c:c0:65:0e:1a:36:07:9d:be:3d:fc:63:
         41:92:10:53:96:f8:64:17:67:94:e4:40:76:99:8d:f4:84:9a:
         00:99:60:00:0d:8a:93:96:6b:8d:d1:d8:a3:42:ea:4f:80:0e:
         f5:ee:52:83:df:03:91:e6:0f:f1:7f:0a:2e:1b:fe:c5:ce:5d:
         7d:80:61:7a:31:8f:6a:a2:b8:d8:79:a9:1b:88:a1:70:77:a0:
         ae:17:bd:29:73:83:10:fe:43:fc:e4:99:3e:d9:e2:27:56:84:
         91:15:20:37:ed:85:d0:02:51:27:94:37:f1:51:a7:60:dd:82:
         be:af:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:31 2025 by rpki-client