Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa
File:                     c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa (raw, json)
Hash identifier:          18oE4M7TUao26Obf8pUa+oRscvCN0SWVuC9YtEnJLo0=
Subject key identifier:   A7:12:F9:A7:A5:DE:7B:90:19:F8:EF:C6:97:F1:F4:8A:17:B9:B3:AC
Certificate issuer:       /CN=756004e4-ddca-45b3-bf76-89761c8369fd
Certificate serial:       010D0C9F43285849078313CF7BE01998B2FCD9E0
Authority key identifier: 89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa
Signing time:             Fri 28 Feb 2025 05:28:35 +0000
ROA not before:           Fri 28 Feb 2025 05:28:35 +0000
ROA not after:            Thu 29 May 2025 04:28:35 +0000
asID:                     401052
IP address blocks:        23.187.200.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:83:13:cf:7b:e0:19:98:b2:fc:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756004e4-ddca-45b3-bf76-89761c8369fd
        Validity
            Not Before: Feb 28 05:28:35 2025 GMT
            Not After : May 29 04:28:35 2025 GMT
        Subject: CN=3313e63c-f8ce-452c-8559-c4d35483ad55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:1c:56:b4:6b:ad:8d:68:d2:6d:09:06:a4:
                    a4:a4:2e:d5:1f:7d:98:58:91:62:c1:6d:e1:40:c6:
                    4f:33:19:fc:db:8e:fb:5e:86:23:9f:c0:1f:1b:42:
                    20:68:b9:b6:bb:bd:b1:45:aa:85:f7:f1:b5:6c:d5:
                    50:fd:67:98:65:a5:1e:ef:00:62:bc:50:76:a0:5e:
                    4f:f6:63:1a:92:8f:a6:a9:4e:22:22:3b:96:43:8e:
                    2f:4b:e1:b4:b5:72:8e:0d:a7:8f:82:1d:b2:ab:43:
                    8d:97:c1:b4:54:95:56:64:a0:66:15:de:f8:fd:f3:
                    d9:a9:0d:5e:4a:1a:b6:2b:3d:e2:8c:0f:41:4d:da:
                    98:56:3c:98:64:66:45:be:2f:4b:4f:9b:7e:7d:c1:
                    b5:36:a4:73:4e:32:25:f2:7a:7a:29:1e:61:39:ff:
                    a0:4e:7a:66:bb:12:d3:a7:4e:b3:e6:5f:20:50:5b:
                    ec:d3:e0:d0:9b:0e:1c:c9:c6:39:3a:a9:04:f8:32:
                    ce:47:9c:9c:c5:d8:d7:90:fc:c2:2a:92:48:95:69:
                    c6:f3:9b:e8:66:08:52:08:46:40:b4:3a:bb:b7:f2:
                    eb:bb:53:66:99:77:32:f1:16:f3:ed:5f:24:35:e7:
                    19:e1:00:e3:93:a4:28:d7:78:43:6e:63:99:8e:cf:
                    72:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:F9:A7:A5:DE:7B:90:19:F8:EF:C6:97:F1:F4:8A:17:B9:B3:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl

            X509v3 Authority Key Identifier:
                keyid:89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:ae:67:4b:a7:f5:40:f8:38:d9:bb:f0:ce:9f:2d:ef:57:
         81:14:10:9c:a5:a7:d4:91:8d:40:c6:b5:49:42:f2:27:9e:d7:
         b3:82:da:05:68:24:24:49:55:69:8b:40:3d:b2:e0:71:b8:c2:
         9a:3b:61:33:32:42:ad:55:52:26:eb:15:bf:83:92:8c:76:10:
         2a:96:05:cc:8c:8c:5c:7e:62:e2:8f:59:03:69:b9:e0:93:fa:
         af:a0:13:2d:3d:cd:76:81:82:ec:88:40:77:c3:29:2f:8f:9a:
         0e:70:8b:f4:70:f2:7b:05:6e:e0:1e:f9:a9:7b:d0:3e:59:4d:
         19:ce:b4:45:89:00:db:2c:d6:6e:69:68:b0:ae:d9:ef:32:3b:
         6e:34:01:c5:ad:73:16:5f:06:d2:9e:08:46:c7:d3:1c:40:88:
         3a:51:d3:31:9f:1e:fe:71:55:30:21:54:0e:d6:9d:e5:b0:d0:
         79:61:83:b5:2a:f6:b8:50:53:aa:17:c5:dd:ba:1b:95:82:e0:
         e4:aa:26:74:e4:78:a3:8a:9c:ad:e9:bc:ce:ba:a8:32:0a:1d:
         23:3d:bc:1c:ca:57:cd:18:a8:42:8d:cb:e5:a7:c4:cd:37:aa:
         27:5a:34:c2:7c:0b:9d:37:d9:48:17:8d:35:ef:95:1c:51:66:
         ea:78:15:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHgxPPe+AZmLL82eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzU2MDA0ZTQtZGRjYS00NWIzLWJmNzYtODk3NjFjODM2
OWZkMB4XDTI1MDIyODA1MjgzNVoXDTI1MDUyOTA0MjgzNVowLzEtMCsGA1UEAxMk
MzMxM2U2M2MtZjhjZS00NTJjLTg1NTktYzRkMzU0ODNhZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoEcVrRrrY1o0m0JBqSkpC7VH32YWJFiwW3h
QMZPMxn82477XoYjn8AfG0IgaLm2u72xRaqF9/G1bNVQ/WeYZaUe7wBivFB2oF5P
9mMako+mqU4iIjuWQ44vS+G0tXKODaePgh2yq0ONl8G0VJVWZKBmFd74/fPZqQ1e
Shq2Kz3ijA9BTdqYVjyYZGZFvi9LT5t+fcG1NqRzTjIl8np6KR5hOf+gTnpmuxLT
p06z5l8gUFvs0+DQmw4cycY5OqkE+DLOR5ycxdjXkPzCKpJIlWnG85voZghSCEZA
tDq7t/Lru1NmmXcy8Rbz7V8kNecZ4QDjk6Qo13hDbmOZjs9y+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKcS+ael3nuQGfjvxpfx9IoXubOsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTYw
MDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2MWM4MzY5ZmQvYzI4ZTY2MjMtM2ZkNy0z
NzAzLTkyYjUtMmEzMmI1NjRmZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzU2MDA0ZTQtZGRjYS00NWIzLWJm
NzYtODk3NjFjODM2OWZkLzc1NjAwNGU0LWRkY2EtNDViMy1iZjc2LTg5NzYxYzgz
NjlmZC5jcmwwHwYDVR0jBBgwFoAUiTibcRBjsvRcO2v+P9cJm9M+rykwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTYwMDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2
MWM4MzY5ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7vIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFpmrmdLp/VA+DjZu/DOny3vV4EUEJylp9SRjUDGtUlC8iee17OC2gVo
JCRJVWmLQD2y4HG4wpo7YTMyQq1VUibrFb+Dkox2ECqWBcyMjFx+YuKPWQNpueCT
+q+gEy09zXaBguyIQHfDKS+Pmg5wi/Rw8nsFbuAe+al70D5ZTRnOtEWJANss1m5p
aLCu2e8yO240AcWtcxZfBtKeCEbH0xxAiDpR0zGfHv5xVTAhVA7WneWw0Hlhg7Uq
9rhQU6oXxd26G5WC4OSqJnTkeKOKnK3pvM66qDIKHSM9vBzKV80YqEKNy+WnxM03
qidaNMJ8C5032UgXjTXvlRxRZup4Fag=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:55 2025 by rpki-client