Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/5abb9cea-a7a2-3906-a0b7-fe7466af172e.roa
File:                     5abb9cea-a7a2-3906-a0b7-fe7466af172e.roa (raw, json)
Hash identifier:          Q8PH/62+NnbvYqjWqjfAhabB+FU9Q4pG/Mj4r90VbIs=
Subject key identifier:   4B:18:15:80:89:F6:59:60:F7:B8:E7:DB:38:3D:F9:B8:C6:E5:7F:80
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F43285849ADCDEB8B9E548CD58BE2B740
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/5abb9cea-a7a2-3906-a0b7-fe7466af172e.roa
Signing time:             Mon 28 Apr 2025 19:03:34 +0000
ROA not before:           Mon 28 Apr 2025 19:03:34 +0000
ROA not after:            Sun 27 Jul 2025 19:03:34 +0000
asID:                     5065
IP address blocks:        216.231.43.0/24 maxlen: 24
                          216.231.44.0/24 maxlen: 24
                          216.231.45.0/24 maxlen: 24
                          216.231.46.0/24 maxlen: 24
                          216.231.47.0/24 maxlen: 24
                          216.231.48.0/24 maxlen: 24
                          216.231.49.0/24 maxlen: 24
                          216.231.50.0/24 maxlen: 24
                          216.231.51.0/24 maxlen: 24
                          216.231.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:cd:eb:8b:9e:54:8c:d5:8b:e2:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 28 19:03:34 2025 GMT
            Not After : Jul 27 19:03:34 2025 GMT
        Subject: CN=115b7b18-e693-4858-9472-dc364e10ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5b:56:26:cf:18:45:01:dc:52:6f:b4:66:af:
                    28:32:ee:3e:f9:46:fe:71:f1:ba:e8:35:d4:46:17:
                    99:8a:58:f8:ae:e0:e5:a4:92:16:13:92:72:d3:4c:
                    4f:56:85:32:d2:ee:79:f0:9d:9b:eb:13:1d:01:47:
                    f8:8b:f1:65:45:77:f4:1f:15:0b:dc:58:d3:e0:f0:
                    e8:ab:d0:63:4b:60:8d:0d:ec:38:9e:92:f6:26:8a:
                    96:cc:f0:a0:88:97:6e:89:bb:8d:59:f3:5c:33:89:
                    fc:87:f2:72:f5:b5:76:45:90:fb:8c:9e:99:fb:2b:
                    c4:32:08:e7:e6:b5:a7:12:87:0c:93:25:a2:51:8c:
                    49:ec:f6:e3:53:88:59:ec:e8:8a:aa:f8:83:bf:58:
                    0c:af:2a:aa:c0:e1:57:b3:7c:45:a5:a9:c1:77:3b:
                    30:02:2e:7e:80:6b:b8:7e:d1:c4:a1:10:72:6e:86:
                    21:87:b7:c1:f1:dc:24:8e:76:ca:8c:6b:09:55:90:
                    1d:06:2a:f3:45:74:d1:da:38:6c:d4:be:22:4e:b1:
                    8d:6c:7e:fc:eb:ca:9c:6d:84:ab:ed:bb:ed:a4:41:
                    f8:b1:dd:ef:8c:b6:4c:48:2c:8c:19:9b:86:03:19:
                    ea:79:a5:17:02:92:c3:b7:d4:36:d7:fa:ed:2c:4e:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:15:80:89:F6:59:60:F7:B8:E7:DB:38:3D:F9:B8:C6:E5:7F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/5abb9cea-a7a2-3906-a0b7-fe7466af172e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.43.0-216.231.52.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:c3:c5:cd:1f:27:fb:d6:99:fa:e7:cd:08:e8:be:81:7a:
         ec:f5:b6:90:d8:56:60:1a:13:4e:6c:38:af:c3:b4:08:9f:b2:
         c8:d6:65:62:16:6f:8b:7c:5a:69:3f:9e:72:78:4e:56:9c:f2:
         3e:65:25:3e:10:12:14:87:b9:53:13:6d:b5:84:78:6e:1d:3b:
         e4:9f:4e:8f:2b:12:5b:9e:90:85:2a:dd:0b:6d:42:ec:4c:07:
         b7:c3:c7:cb:5c:af:99:98:56:81:71:b7:9c:0e:26:62:34:a4:
         83:cd:e9:7c:65:8e:1a:33:4f:17:46:83:c7:9d:71:c6:25:ab:
         25:2c:df:78:15:5d:8a:59:84:48:0e:f5:ee:e3:62:6c:5f:c3:
         16:9a:4c:94:30:3d:1a:23:3a:9a:54:7c:72:27:b9:68:4d:62:
         12:06:6a:ee:84:58:04:6a:10:38:10:37:90:1c:02:04:b2:19:
         09:64:8f:67:7d:b5:2b:08:4a:dd:6b:37:86:44:86:26:3b:4a:
         ff:14:05:f5:e4:87:cb:0e:59:99:91:9b:2b:85:19:74:33:02:
         65:6f:d5:8e:aa:b3:0b:c4:0a:82:48:ce:52:12:4b:8b:9d:1d:
         2d:16:17:46:b4:31:03:a2:b7:e6:96:5e:ab:57:d2:3e:de:db:
         ba:22:ad:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:27:40 2025 by rpki-client