Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa
File:                     4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa (raw, json)
Hash identifier:          CDMzelNzKnL3H0i+7FwxCHFW09UpX+pNDPKKX/8Mkq8=
Subject key identifier:   59:30:86:92:5B:B5:78:00:11:82:AB:D9:20:E1:73:CC:AE:FD:BE:61
Certificate issuer:       /CN=1e5e6928-fdde-43e0-9e72-10066be1a674
Certificate serial:       010D0C9F43285848FEBBD5FEDCAEC8E4CC811B80
Authority key identifier: B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa
Signing time:             Tue 25 Feb 2025 02:00:39 +0000
ROA not before:           Tue 25 Feb 2025 02:00:39 +0000
ROA not after:            Mon 26 May 2025 01:00:39 +0000
asID:                     18493
IP address blocks:        23.130.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fe:bb:d5:fe:dc:ae:c8:e4:cc:81:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5e6928-fdde-43e0-9e72-10066be1a674
        Validity
            Not Before: Feb 25 02:00:39 2025 GMT
            Not After : May 26 01:00:39 2025 GMT
        Subject: CN=c75015f8-4d3f-4a67-9d76-a5afb8734cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:1b:46:ee:b0:c4:86:0a:81:68:4d:ff:d0:
                    dd:65:74:a3:89:15:27:e4:05:09:82:cd:f7:90:a6:
                    19:46:c3:42:1e:06:82:ad:72:98:51:4a:a0:66:e6:
                    9f:5b:04:0d:22:24:af:81:68:bc:aa:22:b9:66:f4:
                    fd:4c:ce:94:aa:bb:b6:10:c6:4b:c3:5a:c5:8c:a7:
                    6f:0d:76:4f:3d:55:e0:ea:4c:18:56:71:ea:e5:13:
                    2b:0b:1b:82:6d:bc:d4:37:3a:85:9a:2f:67:b6:27:
                    c3:30:0c:88:f3:d6:8d:1c:a4:3e:5b:58:b4:5a:36:
                    37:e8:b7:ef:87:66:c6:5b:83:f6:84:57:70:f3:07:
                    6f:e5:56:38:9e:42:bd:46:8f:af:56:0e:03:c5:a4:
                    55:14:57:4d:72:57:71:1d:95:b9:93:0e:35:da:9b:
                    c5:63:5c:02:f6:49:8d:ef:38:00:fb:93:c0:d9:0f:
                    fc:30:ed:9a:bc:15:b8:0e:52:a6:5c:54:44:6f:f8:
                    43:ef:44:67:c8:7e:9d:00:b9:eb:a2:44:1f:3f:18:
                    3e:36:47:5b:2b:ab:b1:be:93:e6:82:ae:1a:8a:6b:
                    bd:49:74:f2:bf:f9:9d:fe:37:e3:a3:ee:c5:db:df:
                    9d:55:fd:78:6f:64:3c:c3:dc:d5:90:91:11:8f:77:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:86:92:5B:B5:78:00:11:82:AB:D9:20:E1:73:CC:AE:FD:BE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/4b6ed7dd-b800-35b6-9a50-bdd62bae545a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674/1e5e6928-fdde-43e0-9e72-10066be1a674.crl

            X509v3 Authority Key Identifier:
                keyid:B5:86:6C:5D:11:A3:44:AA:34:EB:42:57:0D:40:64:83:19:F8:15:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1e5e6928-fdde-43e0-9e72-10066be1a674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:77:5a:4e:ac:bb:bd:47:f6:5b:fd:02:fa:a9:67:78:bb:08:
         ce:22:45:2b:fc:2b:a9:89:fa:ed:18:65:ee:36:9c:ef:44:0f:
         da:a6:af:c7:71:49:2d:28:09:d9:42:c0:a3:a1:7f:40:51:fd:
         c3:e9:46:e5:a9:8b:e0:3f:c1:5f:d7:95:a8:26:83:42:1a:12:
         31:c0:8f:b1:66:27:93:4d:10:70:4e:ce:0a:c0:8f:6d:e0:fe:
         3b:3d:9a:9c:11:4a:ec:50:03:f0:af:f8:82:49:ed:53:75:5e:
         61:6b:73:0e:d3:58:25:aa:3d:38:0f:f2:24:73:dc:69:48:66:
         22:bc:80:ac:cc:a1:e2:98:20:7b:6a:27:85:11:85:b1:f8:2d:
         6d:c3:42:d2:37:56:a0:c6:e4:60:95:4e:23:60:75:21:eb:dc:
         d6:ea:2d:fa:8a:a7:f2:1a:e4:a8:e2:ff:7a:5b:47:22:09:d0:
         f1:ae:04:f3:43:dd:4c:02:76:bb:9c:26:be:56:13:7d:2f:a3:
         44:cb:e2:04:df:ce:06:d5:0d:e0:85:b0:e2:91:a2:03:63:0b:
         75:7c:f3:1b:ae:b6:74:05:6e:bf:e1:8a:53:62:0a:5f:26:c2:
         4b:52:4e:4a:a5:1d:4c:1c:b9:08:df:77:f9:9f:f4:84:d1:08:
         58:fa:d7:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9X+3K7I5MyBG4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU1ZTY5MjgtZmRkZS00M2UwLTllNzItMTAwNjZiZTFh
Njc0MB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk
Yzc1MDE1ZjgtNGQzZi00YTY3LTlkNzYtYTVhZmI4NzM0Y2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPkbRu6wxIYKgWhN/9DdZXSjiRUn5AUJgs33
kKYZRsNCHgaCrXKYUUqgZuafWwQNIiSvgWi8qiK5ZvT9TM6Uqru2EMZLw1rFjKdv
DXZPPVXg6kwYVnHq5RMrCxuCbbzUNzqFmi9ntifDMAyI89aNHKQ+W1i0WjY36Lfv
h2bGW4P2hFdw8wdv5VY4nkK9Ro+vVg4DxaRVFFdNcldxHZW5kw412pvFY1wC9kmN
7zgA+5PA2Q/8MO2avBW4DlKmXFREb/hD70RnyH6dALnrokQfPxg+NkdbK6uxvpPm
gq4aimu9SXTyv/md/jfjo+7F29+dVf14b2Q8w9zVkJERj3eQFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkwhpJbtXgAEYKr2SDhc8yu/b5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZTVl
NjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2NmJlMWE2NzQvNGI2ZWQ3ZGQtYjgwMC0z
NWI2LTlhNTAtYmRkNjJiYWU1NDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWU1ZTY5MjgtZmRkZS00M2UwLTll
NzItMTAwNjZiZTFhNjc0LzFlNWU2OTI4LWZkZGUtNDNlMC05ZTcyLTEwMDY2YmUx
YTY3NC5jcmwwHwYDVR0jBBgwFoAUtYZsXRGjRKo060JXDUBkgxn4FSIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZTVlNjkyOC1mZGRlLTQzZTAtOWU3Mi0xMDA2
NmJlMWE2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF53Wk6su71H9lv9AvqpZ3i7CM4iRSv8K6mJ+u0YZe42nO9ED9qmr8dx
SS0oCdlCwKOhf0BR/cPpRuWpi+A/wV/Xlagmg0IaEjHAj7FmJ5NNEHBOzgrAj23g
/js9mpwRSuxQA/Cv+IJJ7VN1XmFrcw7TWCWqPTgP8iRz3GlIZiK8gKzMoeKYIHtq
J4URhbH4LW3DQtI3VqDG5GCVTiNgdSHr3NbqLfqKp/Ia5Kji/3pbRyIJ0PGuBPND
3UwCdrucJr5WE30vo0TL4gTfzgbVDeCFsOKRogNjC3V88xuutnQFbr/hilNiCl8m
wktSTkqlHUwcuQjfd/mf9ITRCFj61/I=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:02 2025 by rpki-client