Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa
File:                     b9088027-6641-3388-ab02-b3330242f7fd.roa (raw, json)
Hash identifier:          E2iNwVoOUp+5gesYyiIuvEs41w1nErh2pTx0hAbQLQQ=
Subject key identifier:   57:66:AF:FC:EF:13:8F:59:AC:F9:56:88:BC:6A:F5:15:E3:EC:C6:42
Certificate issuer:       /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Certificate serial:       010D0C9F432858495EEEDAF72EAA63E5B84B1B40
Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     209242
IP address blocks:        23.247.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:da:f7:2e:aa:63:e5:b8:4b:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=3f6de814-3248-4f27-9f8b-d458da32bfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:22:5c:47:eb:65:43:48:9c:58:65:dc:08:d0:
                    02:5f:60:88:ce:ca:e8:d5:43:e1:a6:68:7b:90:cd:
                    e1:9e:e7:9c:33:65:52:23:b0:1a:6f:63:94:0d:96:
                    6c:c3:5d:c0:ef:23:6c:0d:ad:95:45:8c:6b:b7:eb:
                    bf:c3:4e:26:c9:ab:aa:08:11:e4:8e:33:c2:f1:f0:
                    e9:d0:c5:26:90:80:24:4a:6c:99:cc:45:44:24:1c:
                    9b:cf:80:49:10:45:c7:3c:45:37:83:c5:6d:c7:d7:
                    e5:8e:da:b5:af:ed:18:13:29:98:22:96:7e:ae:41:
                    c7:c1:71:83:68:aa:77:08:0b:20:64:b8:38:07:01:
                    d8:c1:dd:8e:50:82:fb:e3:2a:4f:bf:71:c5:bb:1b:
                    0e:f8:dc:68:f4:a5:b6:e6:27:f1:26:f4:e2:cc:5d:
                    04:2d:74:08:0e:36:2c:b8:74:bc:ee:cd:15:d1:7e:
                    d6:d3:c3:37:f1:bb:8f:8b:d7:0c:61:6a:89:0b:4f:
                    27:b3:88:9c:69:70:f6:fb:b8:bd:59:b2:cf:ec:16:
                    48:01:04:cf:57:cd:53:4c:51:ab:2f:c5:1f:50:68:
                    1f:c6:4c:02:82:61:cd:c5:5e:ba:f7:b8:a0:d3:1a:
                    7a:44:96:fa:d1:71:d6:4d:3c:31:fe:fb:89:10:b2:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:AF:FC:EF:13:8F:59:AC:F9:56:88:BC:6A:F5:15:E3:EC:C6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl

            X509v3 Authority Key Identifier:
                keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:ed:b3:60:5e:aa:c2:94:df:2f:de:1c:c2:9a:59:2d:8c:
         bf:2f:b7:4a:61:b4:11:d8:38:65:93:58:44:68:80:fa:d1:ca:
         39:e6:3f:5b:60:c9:96:8f:c6:ed:7f:50:30:0e:ba:ab:75:94:
         c8:d7:15:dd:1e:22:02:ac:79:6a:5e:4b:04:ce:fd:ac:dc:fd:
         47:8a:32:3f:6a:b5:be:86:31:18:47:d6:92:b8:9d:4d:0d:8a:
         c3:f5:a1:ea:59:b7:4e:2c:dd:96:d3:e8:43:b1:8b:42:4d:97:
         65:4c:a9:3b:4e:9f:3e:5b:a6:3c:9e:02:ec:ea:2a:aa:27:d7:
         24:50:bd:14:89:b3:c1:75:6f:11:b3:08:19:5f:69:8e:fe:c6:
         c7:83:cf:56:b9:11:6f:88:69:63:fa:aa:d7:1d:02:80:19:24:
         70:a7:18:55:45:83:4d:f1:57:a9:ce:e6:95:52:4f:f7:a7:33:
         58:39:bf:29:74:ed:df:80:5b:fa:ff:35:e8:47:ef:9f:5e:ec:
         71:fb:a9:6a:09:b7:5c:f3:bd:6b:d9:d4:d0:52:10:16:bf:25:
         8a:4e:a9:eb:79:c4:78:01:85:96:55:64:6a:a1:08:f0:6b:97:
         b1:1c:23:c0:30:d2:2f:15:e8:87:46:58:40:4d:8f:f0:a8:ff:
         6e:f4:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----