Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/5f740b60-f558-31ad-b943-494ea9e92e2a.roa
File:                     5f740b60-f558-31ad-b943-494ea9e92e2a.roa (raw, json)
Hash identifier:          HVm3EI29AMZtJVFyQ8AXD5SWYFNjuc2v5BlAQ80opsE=
Subject key identifier:   F1:11:23:46:49:A3:07:E8:1B:E8:75:33:AA:46:73:2A:1C:3F:60:C2
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F43285848A400C05209B68271E7B21480
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/5f740b60-f558-31ad-b943-494ea9e92e2a.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     33548
IP address blocks:        23.227.96.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c0:52:09:b6:82:71:e7:b2:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=19ed84dc-e7b5-4c30-a60f-88288f76361b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:21:d0:40:6a:74:b0:58:3d:44:1b:33:6c:
                    eb:b1:2d:cb:56:8f:bc:a0:93:e5:f4:91:f9:78:5d:
                    91:ad:6b:20:97:1d:24:1d:0e:bd:38:5d:69:60:7f:
                    34:bf:f3:81:fb:5d:44:1f:b1:b5:d5:08:38:f4:5b:
                    77:71:41:93:eb:53:95:22:e5:59:55:8c:6b:5c:39:
                    a3:b8:b3:10:f5:f2:b0:dd:ef:ed:78:8b:52:5e:4b:
                    bd:cd:43:c6:24:08:3a:42:4f:c1:73:1c:ec:b1:e6:
                    29:cc:fe:80:14:17:67:3d:ac:a0:3a:fe:33:26:6c:
                    58:c9:a1:4a:89:22:cb:b1:e9:d2:e2:5d:82:6d:26:
                    62:10:07:65:19:69:a7:fd:56:b7:1a:e1:16:2b:45:
                    ec:29:55:a6:0c:8f:f6:b5:81:bd:74:86:8d:0a:89:
                    16:63:2d:e4:cb:f8:2e:e1:b4:c2:ca:9d:95:b8:ec:
                    fb:25:c1:71:41:94:06:67:d8:4b:96:33:48:5c:ce:
                    73:90:18:d4:93:83:1c:42:98:15:54:ab:28:99:79:
                    eb:fa:ef:4a:89:11:90:12:29:78:23:96:56:46:35:
                    68:39:9a:b1:29:0e:65:1c:d9:f5:d7:ec:51:1b:b0:
                    8b:ad:40:30:f0:c3:e6:e1:34:62:08:99:6f:82:5a:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:11:23:46:49:A3:07:E8:1B:E8:75:33:AA:46:73:2A:1C:3F:60:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/5f740b60-f558-31ad-b943-494ea9e92e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:ea:5c:24:db:e2:7f:ae:b5:5e:a2:1c:cf:57:c7:dd:73:
         0d:5a:ff:7c:b0:f8:53:ee:df:a7:92:82:ce:aa:6a:73:1a:74:
         ea:52:98:b9:cb:ab:b0:c4:24:69:87:8d:87:d2:8d:e8:12:5f:
         c8:7c:fa:c0:9b:b7:8d:c9:6d:ac:88:39:be:5e:32:5d:ca:76:
         92:83:37:91:51:b0:00:13:c1:b9:83:bc:cf:ce:0e:24:a5:73:
         0b:a8:ea:c1:44:cf:f4:79:b5:b5:d0:f4:b1:f0:d0:89:cd:f2:
         3a:c2:c9:8d:70:69:c9:2a:98:07:06:10:01:22:b4:9c:00:62:
         3b:6d:ba:9f:52:b6:75:fe:64:79:61:5e:43:1d:fc:6b:bc:ae:
         8c:65:55:c2:d3:9f:7e:cc:18:6b:e8:f4:2f:56:fd:5e:7a:2a:
         c5:95:b1:f3:d5:43:71:af:c2:5e:78:96:8e:a9:f2:ef:fe:50:
         84:cf:4f:2c:95:7d:1c:22:a0:ba:ce:33:ab:12:b9:ae:d2:17:
         65:81:e3:8c:cc:12:09:05:58:15:15:e1:22:43:ec:19:7c:88:
         8d:0b:a2:77:97:65:5f:95:e1:9a:1f:7a:4f:13:0a:0c:5e:d4:
         a9:0c:b1:64:bf:4b:46:26:18:35:f1:9b:d1:f4:94:a4:15:db:
         a2:36:37:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAMBSCbaCceeyFIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzg4MjktNjkzMC00NmIwLTlhYzgtOTE4OThkMzZi
MDU2MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MTllZDg0ZGMtZTdiNS00YzMwLWE2MGYtODgyODhmNzYzNjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEkh0EBqdLBYPUQbM2zrsS3LVo+8oJPl9JH5
eF2RrWsglx0kHQ69OF1pYH80v/OB+11EH7G11Qg49Ft3cUGT61OVIuVZVYxrXDmj
uLMQ9fKw3e/teItSXku9zUPGJAg6Qk/BcxzsseYpzP6AFBdnPaygOv4zJmxYyaFK
iSLLsenS4l2CbSZiEAdlGWmn/Va3GuEWK0XsKVWmDI/2tYG9dIaNCokWYy3ky/gu
4bTCyp2VuOz7JcFxQZQGZ9hLljNIXM5zkBjUk4McQpgVVKsomXnr+u9KiRGQEil4
I5ZWRjVoOZqxKQ5lHNn11+xRG7CLrUAw8MPm4TRiCJlvglrcFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPERI0ZJowfoG+h1M6pGcyocP2DCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82MTA3
ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5OGQzNmIwNTYvNWY3NDBiNjAtZjU1OC0z
MWFkLWI5NDMtNDk0ZWE5ZTkyZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjEwNzg4MjktNjkzMC00NmIwLTlh
YzgtOTE4OThkMzZiMDU2LzYxMDc4ODI5LTY5MzAtNDZiMC05YWM4LTkxODk4ZDM2
YjA1Ni5jcmwwHwYDVR0jBBgwFoAUIEXV2ie7S4lN1IK5ZqALwLa2VKAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82MTA3ODgyOS02OTMwLTQ2YjAtOWFjOC05MTg5
OGQzNmIwNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF+NgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE816lwk2+J/rrVeohzPV8fdcw1a/3yw+FPu36eSgs6qanMadOpSmLnL
q7DEJGmHjYfSjegSX8h8+sCbt43JbayIOb5eMl3KdpKDN5FRsAATwbmDvM/ODiSl
cwuo6sFEz/R5tbXQ9LHw0InN8jrCyY1wackqmAcGEAEitJwAYjttup9StnX+ZHlh
XkMd/Gu8roxlVcLTn37MGGvo9C9W/V56KsWVsfPVQ3Gvwl54lo6p8u/+UITPTyyV
fRwioLrOM6sSua7SF2WB44zMEgkFWBUV4SJD7Bl8iI0LoneXZV+V4Zofek8TCgxe
1KkMsWS/S0YmGDXxm9H0lKQV26I2NwE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:46:16 2025 by rpki-client