Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
File:                     04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json)
Hash identifier:          1WW5CG3qPQI9qPrEh+36mrb+t4CR2vH85IqJ5mcfOQA=
Subject key identifier:   2C:79:6B:47:F5:0C:0D:FB:30:8E:7F:C7:77:47:53:7A:78:37:40:7E
Certificate issuer:       /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Certificate serial:       010D0C9F43285848A13613F45A9B5F0E53EA3D00
Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     49585
IP address blocks:        23.149.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:13:f4:5a:9b:5f:0e:53:ea:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=bd3cf1dd-402f-4e8d-992c-d0b1e73ba16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:04:0c:bd:17:59:f1:58:5d:fe:13:bf:96:
                    aa:51:ae:c8:75:b8:9f:60:e8:5a:ca:0c:a4:fa:f7:
                    86:da:3d:8a:ea:0f:90:31:e9:1b:4c:55:a8:97:35:
                    b2:db:90:fc:7a:46:5e:16:af:bc:7a:70:3b:b9:77:
                    1d:63:0a:39:a1:5b:24:66:8b:7c:c7:23:a0:62:b6:
                    fe:78:8a:92:fa:9c:84:d0:d3:c1:ca:fb:33:99:14:
                    24:ba:0b:c2:38:57:d4:84:59:ea:a2:bb:cf:d3:69:
                    24:6c:07:de:d8:c4:2b:c2:15:6d:ca:eb:d5:db:24:
                    0f:6b:01:0f:27:25:c5:0e:14:bc:a9:01:a9:24:d0:
                    a7:23:d4:9f:2c:98:6b:84:16:83:f7:33:a4:53:c5:
                    70:8a:da:06:4e:d7:ca:6e:44:47:7d:e2:c3:99:96:
                    63:37:e5:98:a4:16:93:22:5c:89:ca:1f:6b:32:2c:
                    c4:f5:9f:09:c4:6d:83:f7:e0:04:e6:aa:4e:97:b3:
                    8f:1d:8a:5c:7d:9f:34:0d:cc:84:7f:37:95:51:37:
                    8e:99:03:4c:7b:3e:8d:a2:3e:91:f8:25:78:77:88:
                    cf:83:9e:5f:18:74:cd:0b:9f:9f:29:23:d9:a1:5a:
                    0d:8e:78:8d:57:59:71:f6:41:13:88:34:31:3c:0a:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:6B:47:F5:0C:0D:FB:30:8E:7F:C7:77:47:53:7A:78:37:40:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl

            X509v3 Authority Key Identifier:
                keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:38:a4:ea:27:4c:3d:e4:5d:a5:50:a8:71:4d:a0:b3:ab:4c:
         f5:3f:2e:3d:51:3d:e3:6a:c7:10:0e:9d:c7:d3:e8:c5:1d:9b:
         21:d5:d3:e1:4a:a0:ea:31:78:fa:bc:f2:93:dd:71:0f:d0:21:
         1a:f6:96:1c:98:36:86:68:22:ad:8f:f2:6e:ec:40:d3:96:25:
         b1:51:79:8a:e1:2b:a0:c2:a5:db:6f:0f:d4:27:e2:53:34:82:
         ad:1e:4d:b2:57:05:c5:7b:08:79:14:12:f1:57:75:d3:4b:54:
         1d:f4:41:2a:ce:fe:31:4e:bc:1a:29:fe:b8:fb:db:ae:3e:2f:
         35:79:78:a3:58:df:49:d5:c0:ad:39:fb:73:95:04:47:b0:25:
         3a:58:93:2e:d3:07:de:07:72:bf:83:9f:6e:5f:91:4e:dd:fc:
         c4:c6:a2:cb:d9:58:e4:b6:9b:1e:df:4b:70:a4:f6:b2:c8:f9:
         cc:7d:3c:36:53:60:92:98:73:c1:6a:a2:3e:f5:d8:4d:4c:60:
         75:97:9e:f0:9d:e6:5d:1c:a7:a9:4f:b3:3c:c6:db:85:d2:f7:
         8c:4b:0a:f0:c1:b3:f4:4f:c0:5a:26:f7:3a:bf:6e:d3:64:16:
         b7:5f:7d:8b:29:25:8a:b9:53:51:15:af:10:06:29:c5:b6:e4:
         ee:6c:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:38:53 2025 by rpki-client