Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
File:                     6f898a92-27c5-34f5-ab5d-94a7194d0508.roa (raw, json)
Hash identifier:          pNeksgGWSKQATrOC9zIsCjFJJiPDLCyKrODBjQip9T0=
Subject key identifier:   0E:97:73:A0:6D:52:A3:02:22:8F:0E:8F:A8:BB:96:30:BF:02:1A:7B
Certificate issuer:       /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
Certificate serial:       010D0C9F43285848F47073C5366327AEE0270680
Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa
Signing time:             Fri 21 Feb 2025 09:30:42 +0000
ROA not before:           Fri 21 Feb 2025 09:30:42 +0000
ROA not after:            Thu 22 May 2025 08:30:42 +0000
asID:                     10753
IP address blocks:        23.132.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:70:73:c5:36:63:27:ae:e0:27:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94
        Validity
            Not Before: Feb 21 09:30:42 2025 GMT
            Not After : May 22 08:30:42 2025 GMT
        Subject: CN=c2ce631e-1967-4679-9baa-293b7dd7d274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:85:c9:bf:e9:41:ba:51:29:5c:e5:cc:67:
                    20:c5:e7:57:52:c0:d4:a7:5f:14:e2:81:22:43:f4:
                    52:10:b9:aa:e9:85:57:e7:4e:bf:d6:5b:db:55:17:
                    51:48:36:ab:df:ff:7a:31:df:a2:c2:f9:36:23:9f:
                    39:a3:61:4c:d1:e5:0e:1e:bd:8e:1d:69:f9:7c:56:
                    8a:a6:fa:80:82:3c:40:96:03:40:68:06:9f:f2:18:
                    c1:3f:eb:76:cf:f1:49:47:df:c0:78:0f:ed:c0:e4:
                    c9:de:76:6f:03:36:11:8a:e8:0d:ef:79:6f:b2:65:
                    9d:3a:ce:5d:17:fb:54:76:b8:04:a3:dc:40:f6:62:
                    60:b0:ec:cc:df:f3:3d:fb:d0:d2:ca:cd:ac:ae:85:
                    77:85:43:2c:52:2b:f0:01:6a:b8:44:0f:09:57:ca:
                    fe:3d:2b:3d:e5:1b:1f:99:b5:f3:81:8a:d5:d3:7a:
                    e4:5a:0e:58:3b:ca:ff:8d:35:28:b6:a8:58:10:81:
                    72:b3:5c:85:d9:87:34:ac:62:58:ef:98:0a:e8:3f:
                    24:88:97:15:1a:58:77:fb:7f:3e:5e:d0:d9:19:e1:
                    ab:4c:e8:16:30:fb:91:59:4f:9e:d0:f8:8c:60:ca:
                    65:48:e9:d5:f1:bf:a2:a0:46:88:11:38:7a:3d:c6:
                    c3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:97:73:A0:6D:52:A3:02:22:8F:0E:8F:A8:BB:96:30:BF:02:1A:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/6f898a92-27c5-34f5-ab5d-94a7194d0508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl

            X509v3 Authority Key Identifier:
                keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:77:d8:12:21:d0:bb:9d:87:1d:2c:b0:73:05:28:9b:b4:
         18:1f:7b:e0:c9:9e:dd:5d:42:0b:e5:98:39:3c:08:d0:3c:67:
         b7:2a:09:9d:cb:08:ac:34:30:42:31:f4:9c:fd:5b:34:b6:bc:
         24:db:f9:28:ea:c9:d2:18:8c:89:d2:05:8a:e4:8d:a6:21:f2:
         45:b6:cf:0b:ae:ff:5c:60:40:23:97:2e:ca:c9:46:0f:8c:84:
         9c:c4:e9:83:32:98:fa:65:75:3d:75:fb:18:8c:49:e4:53:15:
         56:54:24:92:28:5b:bc:4c:5b:31:b7:81:65:d5:68:37:51:ef:
         fb:7e:4b:03:c2:be:57:fa:9c:5a:4f:67:1d:9d:59:d6:de:88:
         d1:60:de:ac:6a:e7:f9:9c:6f:45:6c:6b:80:4c:94:be:5e:fc:
         65:b9:0a:86:e5:c8:90:26:01:f0:28:3e:e9:2d:0f:39:b6:8d:
         56:2b:2b:1a:02:7f:d9:ae:ca:87:d4:29:ba:e6:dc:b6:51:96:
         3a:3c:a1:ea:e4:46:60:5a:c9:c5:62:02:01:91:a8:9f:f4:bb:
         4e:05:74:35:ce:6d:27:a8:b3:6a:02:3c:c1:5a:23:30:54:ae:
         c6:1e:f1:0d:73:67:3f:d9:bf:55:73:4a:e8:08:bf:2c:d1:aa:
         be:de:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:11:27 2025 by rpki-client