Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa
File:                     75c87170-97fe-3422-9431-4f1945b36749.roa (raw, json)
Hash identifier:          zAUpkYaPT/L/78qgsX9Ii8LJWkGlgfcqWgcxK+yrOLY=
Subject key identifier:   63:F4:52:99:DD:95:BF:28:84:36:23:4E:F5:72:1B:DE:FB:DB:7C:FC
Certificate issuer:       /CN=798f6104-a838-4bf4-a3e9-0419c1690ad8
Certificate serial:       010D0C9F432858489B26C47CB814FD384843EF80
Authority key identifier: A1:3E:D6:27:25:F3:B1:70:FC:F6:4D:7F:BE:A5:E0:6A:82:1F:67:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa
Signing time:             Mon 20 Jan 2025 09:55:18 +0000
ROA not before:           Mon 20 Jan 2025 09:55:18 +0000
ROA not after:            Sun 20 Apr 2025 08:55:18 +0000
asID:                     7018
IP address blocks:        23.132.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:26:c4:7c:b8:14:fd:38:48:43:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f6104-a838-4bf4-a3e9-0419c1690ad8
        Validity
            Not Before: Jan 20 09:55:18 2025 GMT
            Not After : Apr 20 08:55:18 2025 GMT
        Subject: CN=ca63e1df-9a58-49c0-b817-f65727756186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c7:5e:f6:ce:0b:4a:f8:dc:15:ed:d1:18:35:
                    ee:74:31:3f:d4:09:15:c9:50:62:6d:96:4d:bd:55:
                    d3:45:2f:42:6b:d3:cf:a3:e2:67:c4:40:cf:40:2a:
                    20:54:0a:5c:c2:e3:94:a4:05:92:03:06:66:43:1e:
                    2c:03:c8:74:82:66:4f:38:a1:5d:e4:75:ac:54:61:
                    15:15:d5:c5:6a:9a:c6:f8:fa:7e:a9:d1:38:16:51:
                    5b:02:6e:e0:24:2c:b0:17:f6:44:9a:63:d6:11:97:
                    6f:45:e0:02:ff:39:9f:08:6e:77:95:60:2e:7b:fc:
                    da:a6:43:39:d4:ba:a1:66:70:d0:cd:75:06:a0:5d:
                    5b:8b:7d:ed:6c:32:a1:2c:4e:14:97:f1:ee:b0:27:
                    39:6a:dd:2c:3e:00:0d:23:de:7a:a5:82:83:1e:b2:
                    b6:46:79:5e:67:d0:2d:48:19:97:50:97:d5:74:c6:
                    d4:20:4b:c7:69:ef:e8:48:ea:d5:41:9b:69:bb:3d:
                    af:bc:69:ba:db:37:56:b1:69:76:14:4a:63:dc:1e:
                    e6:4e:7b:aa:17:20:f1:78:e5:55:88:4b:d3:00:d8:
                    6d:4b:c8:48:19:9a:cb:cb:c3:86:85:61:96:30:18:
                    bf:93:3e:a3:92:6b:21:70:fb:ee:d6:4a:db:2e:67:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:52:99:DD:95:BF:28:84:36:23:4E:F5:72:1B:DE:FB:DB:7C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/75c87170-97fe-3422-9431-4f1945b36749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8/798f6104-a838-4bf4-a3e9-0419c1690ad8.crl

            X509v3 Authority Key Identifier:
                keyid:A1:3E:D6:27:25:F3:B1:70:FC:F6:4D:7F:BE:A5:E0:6A:82:1F:67:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/798f6104-a838-4bf4-a3e9-0419c1690ad8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:29:bc:1a:15:90:72:31:22:19:b1:a5:79:90:1f:86:bc:
         96:19:cc:34:4d:d2:89:8c:6d:0e:b0:21:73:ad:18:6d:33:05:
         ad:e1:55:0b:d9:5e:d2:da:bb:ce:e9:4b:61:1d:eb:d8:e3:d5:
         41:46:d9:e3:75:a7:53:5f:c1:03:09:99:57:b5:82:ff:02:01:
         25:86:6f:50:ca:6b:62:88:89:e8:f5:6b:b0:75:ba:1f:f3:a7:
         fd:d7:4f:0e:cb:b8:f5:a7:27:47:16:25:84:1b:02:3b:a6:8c:
         0b:b1:16:b7:e6:a1:dc:18:af:f1:a5:4b:2b:bf:e0:16:e0:99:
         a0:7b:34:14:66:4f:e6:4c:67:38:bc:99:0a:d5:0c:d0:74:45:
         d1:dc:16:f6:9d:31:34:5f:13:ad:f2:c6:3f:e1:39:3a:d1:c8:
         5b:71:40:b6:37:e9:6e:da:97:b3:0c:78:2b:13:c6:69:ea:7a:
         c2:33:ce:c2:07:ad:08:a6:3a:f2:53:4d:75:49:e5:25:81:aa:
         d3:00:4a:84:4f:c7:b3:59:32:7e:d2:e1:78:5f:5a:0a:f4:0b:
         06:6b:0b:80:9a:26:a5:77:80:e5:22:64:95:7b:84:da:53:ca:
         ad:68:e3:04:e8:26:17:6e:ed:91:04:02:18:5f:0f:15:c9:57:
         46:d9:a2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:15 2025 by rpki-client