Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/2ef67af5-c377-3d85-b512-a62d8d3fdb05.roa
File:                     2ef67af5-c377-3d85-b512-a62d8d3fdb05.roa (raw, json)
Hash identifier:          Ylr9pwlXfrc3u1P4ccl50TibQWR7ZPMQOGD53avcRA8=
Subject key identifier:   B6:B3:69:ED:97:43:23:2B:35:96:A1:EA:33:3B:14:D8:9E:83:8E:28
Certificate issuer:       /CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
Certificate serial:       010D0C9F432858490C30EDB4CE1E8B93A476C44C
Authority key identifier: 79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/2ef67af5-c377-3d85-b512-a62d8d3fdb05.roa
Signing time:             Sat 01 Mar 2025 21:42:07 +0000
ROA not before:           Sat 01 Mar 2025 21:42:07 +0000
ROA not after:            Fri 30 May 2025 20:42:07 +0000
asID:                     13760
IP address blocks:        23.135.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:30:ed:b4:ce:1e:8b:93:a4:76:c4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15c1581-7fa9-4e03-9b8a-b1033654465f
        Validity
            Not Before: Mar  1 21:42:07 2025 GMT
            Not After : May 30 20:42:07 2025 GMT
        Subject: CN=8ba26dbc-e691-456a-baf5-63404696ece1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:fa:95:d6:1f:17:78:b2:bd:9d:66:ab:23:
                    d8:08:f7:1c:8a:1b:81:87:cf:c6:48:46:f2:5a:20:
                    c5:4d:11:f4:67:3b:ea:75:72:7e:53:fe:fc:97:45:
                    f6:69:1b:82:b8:d6:34:8c:10:56:c7:ae:c7:75:bd:
                    a1:f3:fe:4a:68:18:93:39:09:c3:fd:26:a6:65:42:
                    bc:5d:93:b2:12:ea:c8:32:8e:af:1b:e1:bd:c0:f4:
                    da:ee:89:7a:2d:df:aa:2f:14:b7:14:b2:2c:e1:10:
                    cc:31:a0:27:7e:87:a1:45:b5:65:bb:40:45:08:4a:
                    26:d0:9b:6c:11:76:33:ab:5d:c5:b3:58:0b:40:2a:
                    e1:85:d8:a8:4e:5c:b8:ae:dc:95:3e:33:b5:91:26:
                    a6:9f:36:11:ce:f8:c1:75:55:0e:71:3a:68:bd:2a:
                    d2:1c:be:2c:0c:e5:e1:cc:6d:43:fd:a1:9c:ac:82:
                    7e:18:47:2b:e4:cb:33:2f:7f:a3:ab:ce:0d:ba:89:
                    18:fb:5a:ab:0f:14:df:9c:1d:2c:e5:ad:e1:54:67:
                    f0:d4:80:41:95:9a:06:7e:07:31:7a:00:b7:a6:b6:
                    7a:7f:ba:0d:7b:76:41:19:23:78:7d:d6:12:97:db:
                    29:69:f9:b2:02:1a:1a:e5:b6:bd:06:14:6d:1a:cf:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B3:69:ED:97:43:23:2B:35:96:A1:EA:33:3B:14:D8:9E:83:8E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/2ef67af5-c377-3d85-b512-a62d8d3fdb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f/e15c1581-7fa9-4e03-9b8a-b1033654465f.crl

            X509v3 Authority Key Identifier:
                keyid:79:20:E3:BD:FD:B6:87:F9:33:02:C7:31:1C:10:6D:AC:26:B3:6B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e15c1581-7fa9-4e03-9b8a-b1033654465f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:29:93:9b:79:b1:ea:d3:d5:53:7f:bd:77:e5:9d:ab:41:
         f8:8d:68:7c:63:fe:d3:03:c3:77:c5:63:49:d0:b2:71:1a:fa:
         63:d4:21:fc:cf:4f:0a:8f:33:ff:45:18:ac:0d:30:e9:03:84:
         f5:63:2b:cf:bc:ac:92:15:da:6e:1c:07:a5:ad:ba:78:c4:32:
         8d:73:1f:98:a8:1e:e1:ef:97:36:e4:c5:3f:5e:ef:4e:8d:7e:
         51:6c:a1:d8:30:62:27:4d:6f:b9:ea:50:7b:5e:e6:47:04:69:
         a1:aa:c9:72:6a:88:e3:e7:be:0c:09:50:75:98:62:80:42:48:
         f1:e2:2f:c3:02:86:b9:4e:e2:75:cd:db:38:33:81:c4:88:6b:
         cd:55:cc:ae:27:a2:53:fd:a1:09:95:ca:3d:65:74:74:8e:e8:
         43:82:f6:27:36:2d:7a:52:91:93:c5:5d:1a:f6:df:b1:86:1d:
         cf:b1:6d:ad:78:bb:a3:7b:a3:da:51:5b:eb:41:f0:47:05:4f:
         cc:70:f2:e8:ad:95:a6:cb:4b:11:f6:65:29:e3:78:e2:fc:6e:
         27:2b:58:ab:8c:fb:56:ce:55:ae:f5:04:cf:5a:44:43:17:01:
         05:e1:99:a6:e5:71:02:2d:ed:a8:eb:42:f2:a1:25:56:43:2b:
         cd:b0:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:04:59 2025 by rpki-client