Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa
File:                     7108cb79-914e-3bcb-be90-fa39e1b08f83.roa (raw, json)
Hash identifier:          qyC6a4xST1EIC8dyJJs8QT1nxq6fb07wv+K1pAwdp7Q=
Subject key identifier:   B4:FF:41:CA:C1:DA:FE:2B:00:B9:00:67:29:3C:72:CE:FD:E0:66:13
Certificate issuer:       /CN=9d5e8807-643a-46c3-a245-693c793610e4
Certificate serial:       010D0C9F432858491ED6D515AC743B255C018B00
Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     5065
IP address blocks:        23.129.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d5:15:ac:74:3b:25:5c:01:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=2e6ad354-b835-45c1-9430-7b7cf0da462f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:a9:9c:50:36:16:be:ed:c3:e1:e4:9e:4c:
                    75:8b:80:cb:27:f2:ae:6a:84:0a:91:11:83:bf:ab:
                    06:c3:e7:ec:e0:52:c4:73:8a:96:39:b4:f9:3e:17:
                    68:d0:12:2f:96:26:76:19:93:d1:6e:f7:ae:c3:d5:
                    b9:83:76:9c:5d:86:23:4f:bc:48:8e:04:fc:59:00:
                    64:b5:40:bf:58:6c:43:85:9c:85:f1:69:99:48:17:
                    10:d9:cd:f6:e4:f7:42:e5:08:94:0e:8d:ff:28:81:
                    cc:b7:f3:aa:de:a9:fb:0c:84:e0:87:2d:0e:32:ed:
                    09:0c:36:28:0f:c8:ea:ec:3a:bd:0b:c3:2e:a7:c1:
                    0c:19:7f:46:e5:79:90:c9:34:12:07:da:48:81:ad:
                    bd:39:08:d7:63:11:a3:72:1b:bb:13:86:c2:19:5d:
                    72:d0:c7:fb:4a:2e:35:0b:2a:22:73:7c:b3:5b:8c:
                    d1:8c:b2:2f:a2:c2:e0:fa:4f:f4:d0:76:5b:fd:06:
                    9e:c7:f0:18:af:2c:9f:e5:4d:ce:27:5e:e2:a9:13:
                    c3:5d:3d:01:f8:8c:41:c3:ce:26:00:94:bb:93:ad:
                    a1:4b:76:71:04:d2:f1:d3:5e:98:ee:a1:f4:71:1a:
                    80:61:da:80:4c:64:d5:62:d2:a1:54:ec:a3:da:3b:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FF:41:CA:C1:DA:FE:2B:00:B9:00:67:29:3C:72:CE:FD:E0:66:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl

            X509v3 Authority Key Identifier:
                keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:19:40:ce:c0:4d:27:95:31:b8:76:06:c7:9c:cc:33:da:
         e6:50:f4:d2:65:62:e2:75:c7:d6:cc:57:e5:16:2a:d8:68:f5:
         ce:04:01:64:77:84:a8:8f:01:f2:e5:8f:d0:2d:94:d3:06:54:
         86:c0:4a:94:f5:4b:1f:73:ba:fd:7f:a2:1a:2d:a5:d4:60:2a:
         f1:08:41:39:f4:cd:43:62:6f:17:38:c9:cd:8f:6d:64:8a:0d:
         49:c5:3c:a3:92:56:dd:1a:92:e0:e7:1f:fd:15:db:74:2d:4f:
         c4:ca:40:14:a4:1a:7b:81:63:4b:cb:10:89:81:db:8a:af:ed:
         76:f8:29:e4:85:0b:29:12:e7:c8:cc:21:a6:14:f4:3e:cf:c9:
         c3:7a:94:86:ab:b1:61:58:ef:89:86:cb:5b:2f:38:d7:e7:4a:
         b1:95:56:f3:28:2f:ef:77:01:9e:b6:65:a1:77:f4:c5:21:d2:
         f3:03:13:7b:0e:7c:ec:51:2e:cf:19:af:c6:85:f1:b5:3a:52:
         02:81:c5:6e:72:f2:fa:59:40:3f:12:56:ab:08:b7:51:2b:30:
         74:d8:44:1f:66:38:0f:9e:5c:5b:f3:a9:d7:14:e7:4c:fb:9d:
         c5:ce:30:f1:42:e8:26:ce:4d:e4:bb:60:d9:94:2c:ff:41:fd:
         f4:b6:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:41 2025 by rpki-client