Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/ff01ee25-792d-3cf8-877c-63fbb7ee41d4.roa
File:                     ff01ee25-792d-3cf8-877c-63fbb7ee41d4.roa (raw, json)
Hash identifier:          aXl1vh5pw4AVLAdaiTzK/A8h8MKdcFj7cEfreD4AVF0=
Subject key identifier:   31:86:B3:EF:BD:6A:B5:F8:38:79:0E:A6:6B:4D:2E:FA:60:9F:72:4B
Certificate issuer:       /CN=abc8ef5a-9ffc-4ec0-92c1-99611c70382f
Certificate serial:       010D0C9F432858494B641B9C32AEA18A477C4E40
Authority key identifier: 32:3E:6D:9E:50:65:F6:EF:A2:1A:66:99:91:88:31:B3:24:79:DA:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/ff01ee25-792d-3cf8-877c-63fbb7ee41d4.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     62716
IP address blocks:        23.166.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:1b:9c:32:ae:a1:8a:47:7c:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8ef5a-9ffc-4ec0-92c1-99611c70382f
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=6490d856-d81c-4d10-ac83-84d03f0c2fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:00:92:c1:d7:44:3f:a7:4a:22:9f:72:29:
                    be:b0:69:57:46:9d:e4:3a:0b:41:26:c3:08:84:72:
                    50:2d:2d:b3:15:e4:f9:39:6f:f9:33:51:40:40:7c:
                    af:33:3f:31:63:77:0e:f0:f5:aa:a0:4d:fd:09:98:
                    a6:30:84:70:1a:fb:41:25:d2:0d:0c:5c:7f:0b:79:
                    f5:ff:2b:eb:2a:aa:bb:78:e5:ec:fb:a1:db:47:cd:
                    d7:db:74:ff:f8:b4:74:af:ca:a5:1e:6a:8b:cb:cd:
                    fe:b7:23:9b:75:58:18:eb:51:90:6a:e2:15:a7:49:
                    c5:bc:28:5d:75:c6:75:94:52:04:fb:66:7d:46:6b:
                    11:a2:de:7b:3b:de:aa:02:7e:15:c4:4e:bc:4b:8b:
                    31:c3:e6:ae:04:4b:d0:9a:71:b4:27:6b:7b:22:b3:
                    ed:5e:34:48:98:84:c9:ed:47:85:6b:d8:a8:b1:41:
                    24:bd:99:a2:16:76:6d:16:32:28:35:4a:c0:ef:2c:
                    72:d3:56:34:4d:4b:84:f5:42:5a:c2:42:ea:19:0a:
                    bf:af:d7:d2:e5:3c:fb:e5:82:2e:c2:ee:a1:f6:bc:
                    44:89:97:5b:2a:68:f2:b9:a4:d8:0b:83:07:c1:96:
                    1e:cf:2c:e3:09:55:79:24:36:22:2e:d2:7f:b3:4d:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:B3:EF:BD:6A:B5:F8:38:79:0E:A6:6B:4D:2E:FA:60:9F:72:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/ff01ee25-792d-3cf8-877c-63fbb7ee41d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.crl

            X509v3 Authority Key Identifier:
                keyid:32:3E:6D:9E:50:65:F6:EF:A2:1A:66:99:91:88:31:B3:24:79:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abc8ef5a-9ffc-4ec0-92c1-99611c70382f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:06:86:07:97:ca:a4:db:86:5a:8b:0f:15:4e:c9:44:f1:
         78:4f:cd:ea:97:d6:98:e0:f4:c1:e4:69:ab:ab:c8:93:f2:82:
         4d:4a:a9:94:9b:96:b5:8d:03:09:0b:6e:49:77:42:14:99:cf:
         bb:6c:7b:63:7d:40:d5:43:e9:da:be:85:56:06:bf:64:4e:12:
         1b:b2:0d:9b:d4:60:80:33:3b:17:f8:57:47:33:62:c3:50:7c:
         44:19:97:2d:1e:f3:c2:51:44:99:b7:24:1b:44:de:a2:b5:a9:
         6a:a7:63:62:34:ba:c3:25:c6:55:a0:52:8b:31:3b:af:41:ca:
         b0:62:d8:0f:a6:5d:e6:11:6b:b4:38:17:05:f6:13:48:b9:75:
         5f:98:e9:93:10:4e:6e:b1:11:68:87:be:7b:fe:cb:0b:02:be:
         82:db:7e:e3:e7:e2:bb:34:1f:b8:c0:f7:40:13:53:a3:ef:2e:
         1f:8c:c4:23:bc:ed:e4:bf:21:87:c8:f2:08:4e:3c:93:67:15:
         4a:79:d4:c2:49:e7:ed:8b:d0:3a:92:17:42:e9:6b:35:54:c6:
         fe:39:22:9c:68:44:f7:5e:85:dc:5a:fa:40:ab:d3:c2:61:a5:
         cd:be:1e:b9:68:cd:ed:f3:e9:44:be:a5:1a:51:e6:a8:9e:ea:
         b0:49:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:50 2025 by rpki-client