Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa
File:                     b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json)
Hash identifier:          OGWP/Sz5ikYjUTVSzcHlnM69tSO5irs7EBPpfUn8Tn4=
Subject key identifier:   03:8D:EF:14:99:E3:6A:7B:CC:24:12:83:BA:53:F6:3C:1E:FD:7C:23
Certificate issuer:       /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0
Certificate serial:       010D0C9F43285848C2B64F60D979E2CEE1632100
Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     11913
IP address blocks:        23.163.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:4f:60:d9:79:e2:ce:e1:63:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=1126a3b6-4d07-4bb2-90ce-6a928da1330c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:82:0d:f6:4e:98:2e:62:ce:67:16:01:67:
                    ba:88:a0:6e:43:b8:80:12:a8:e6:84:ce:9d:c3:b1:
                    bf:07:ce:21:e6:3b:90:90:7f:d7:e2:cb:ee:ce:4f:
                    78:57:7d:23:be:3f:5d:d7:18:b2:81:04:8c:77:cd:
                    73:a3:c3:b0:27:46:3d:41:2c:60:0f:79:53:7d:82:
                    63:d4:ae:25:fc:89:a7:d6:de:c6:ec:37:e5:ba:4e:
                    5a:fb:8e:64:f5:3b:61:56:3b:f0:b9:c3:02:c4:b9:
                    57:f0:68:3c:e6:ad:d1:24:d9:5a:d7:2d:94:87:19:
                    7e:dc:d5:a7:1f:5c:ad:4f:74:b0:ec:2f:8f:3f:65:
                    f4:0b:ea:18:c0:48:d8:3c:e0:33:2f:28:b7:f5:49:
                    fe:58:43:78:5b:a7:3b:77:e1:d3:fe:ac:5a:88:6e:
                    8f:3f:ae:5b:ee:6a:b5:37:43:ad:01:47:07:7a:8d:
                    1e:93:50:aa:45:93:0a:49:2a:3e:8d:52:a0:18:4c:
                    8d:b4:ff:d8:23:a2:7a:82:cc:17:23:0f:81:68:56:
                    88:3f:ea:5a:0d:5e:ef:ae:5c:94:ad:70:29:63:22:
                    ba:8c:2f:e0:b1:88:6f:77:d7:24:75:aa:e1:62:a1:
                    ad:e8:f6:c6:7d:2d:a7:b8:97:b0:61:67:6f:ba:4c:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:EF:14:99:E3:6A:7B:CC:24:12:83:BA:53:F6:3C:1E:FD:7C:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl

            X509v3 Authority Key Identifier:
                keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b6:ca:5d:3a:d8:30:22:e4:57:53:cc:13:58:c1:e1:f8:0f:
         12:77:cb:1d:7f:81:e5:8a:c3:0e:61:7f:02:af:e3:3c:e7:c2:
         7c:6a:da:89:c6:20:4e:28:07:54:bf:66:5b:f1:f4:c4:e8:f8:
         4d:e5:eb:ce:78:18:eb:d1:8d:cd:de:83:57:70:61:6e:3b:6a:
         40:b8:81:f4:8b:26:e6:ce:f0:2c:d8:7e:fd:5a:43:df:9e:a3:
         bc:37:73:b7:b4:66:4b:f0:c5:31:b8:34:e3:32:47:47:5f:4e:
         9a:f4:2b:19:67:4f:19:4f:1e:f3:3e:45:6b:42:5b:40:bb:eb:
         ed:3d:b5:1a:d1:f7:1d:9f:70:ce:9a:7f:07:39:1d:65:5d:9e:
         c3:ee:3a:fb:9f:6d:95:6c:33:c6:45:ff:23:be:4d:58:94:26:
         2b:2a:91:47:56:16:9d:d4:8b:44:6f:a1:77:1e:69:3d:8a:32:
         6e:a0:f2:87:ba:37:72:9f:6f:39:91:81:c1:f8:04:04:fc:bd:
         08:63:72:a6:11:17:71:34:d3:47:55:61:c4:28:61:60:55:4a:
         cb:37:5c:b0:7d:67:cd:59:9f:1f:ae:ce:16:77:a5:c4:6f:d1:
         e6:10:e1:5d:fc:90:51:e0:8d:e9:57:9a:8b:0d:38:b9:20:75:
         77:6b:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:03 2025 by rpki-client