Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa
File:                     7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa (raw, json)
Hash identifier:          iX7J3FDgkJ9kXNh9OIe7rNQm4x91GWp2BvYpMvHcK2s=
Subject key identifier:   BD:57:3C:8E:86:C5:97:5B:BD:16:4C:AA:D3:DE:DB:33:DA:8C:44:61
Certificate issuer:       /CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
Certificate serial:       010D0C9F432858489340AEE7812AE83E07C6C300
Authority key identifier: E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     400882
IP address blocks:        23.162.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:ae:e7:81:2a:e8:3e:07:c6:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81d86d00-f6e5-47a7-932c-048a6cc0c427
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=0b2575ef-f780-4806-b0c1-28d801758017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:57:3c:a4:54:69:bf:3b:b5:c9:76:a3:5f:
                    b7:66:9e:fb:37:2f:c2:69:59:40:6e:3f:c0:bc:05:
                    36:05:6b:b3:28:fc:09:01:ea:40:bb:b6:06:20:67:
                    14:00:54:cb:42:3f:a9:42:03:75:b6:05:9a:bb:4d:
                    ef:f4:7e:fe:0c:ab:be:74:0e:3a:f5:b5:a3:21:22:
                    73:d3:9d:47:8f:a7:ea:6e:21:0f:58:83:1e:92:23:
                    f2:c6:48:9a:40:19:5b:51:f3:e2:78:64:63:73:5f:
                    15:c4:66:df:9b:d1:1c:f1:3f:aa:6e:f1:ee:e0:35:
                    b4:9e:18:b0:3d:ad:8a:be:8a:2a:a0:35:b3:5b:13:
                    e7:18:0c:1f:3f:36:5e:a4:7c:22:32:98:b4:23:ba:
                    88:ee:02:62:cc:56:1f:e1:2b:73:a3:bc:43:8b:b2:
                    50:34:67:ca:7c:18:55:1a:df:56:57:8f:50:a1:78:
                    14:6a:bc:27:8e:f7:3a:d2:83:66:c2:36:af:61:56:
                    81:0d:61:e0:5b:0b:90:17:03:fd:43:1c:87:aa:0c:
                    69:3f:3b:f1:06:18:14:de:d6:69:3c:36:a5:b8:2e:
                    c9:1e:e9:41:e1:0c:14:34:b1:04:35:f2:09:22:6d:
                    d0:b5:f1:a8:02:38:72:5f:79:11:26:dc:06:2e:34:
                    e8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:57:3C:8E:86:C5:97:5B:BD:16:4C:AA:D3:DE:DB:33:DA:8C:44:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/7a5b4e05-abef-321c-8f1f-f1d7585b66d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427/81d86d00-f6e5-47a7-932c-048a6cc0c427.crl

            X509v3 Authority Key Identifier:
                keyid:E9:E7:54:A9:4D:31:87:14:2D:5D:CB:91:4B:29:24:A1:8A:BB:6E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81d86d00-f6e5-47a7-932c-048a6cc0c427.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2b:dc:29:7d:8c:0c:95:e2:f4:87:9a:3c:cf:71:78:db:59:
         f0:ae:90:41:5e:87:27:9a:12:fc:b8:75:ab:41:a4:0c:c7:08:
         89:c1:eb:54:d8:a6:04:2e:96:b9:8e:cf:18:eb:24:d4:19:4f:
         7e:28:eb:b4:63:f7:cf:27:f3:23:aa:af:99:45:ab:e5:20:a2:
         14:dc:3f:46:a6:a2:61:9c:65:65:53:a9:31:ac:c8:df:08:96:
         5e:32:c8:a9:27:67:24:99:65:dd:5b:b7:56:a9:8f:07:66:9a:
         26:9d:0a:9b:18:ae:c2:ea:2c:f1:3c:02:88:9a:3b:0b:2e:0c:
         65:0a:35:ea:8e:dc:97:94:48:c1:e4:65:5f:e9:7d:1b:19:19:
         99:66:75:c5:f6:72:ea:5f:f3:4a:02:82:a9:9a:04:66:eb:6a:
         8e:48:84:d1:fc:09:94:e2:b5:01:e4:9c:46:77:af:67:dd:1d:
         4a:80:15:fb:d3:58:09:5a:4c:6f:6a:2b:66:e3:c1:2f:54:86:
         5a:3f:e6:b0:36:5d:b2:89:f3:14:9f:22:1a:c6:d4:59:3e:31:
         bf:1c:d1:d5:38:59:48:6a:ac:81:e9:47:48:f7:e3:14:4a:0e:
         4f:e7:37:66:70:e4:8f:55:cc:43:2a:a4:52:7c:45:7b:47:25:
         ea:c8:bc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:19 2025 by rpki-client