Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/6a38ca77-dbb3-362a-8297-a9a77cdd86a5.roa
File:                     6a38ca77-dbb3-362a-8297-a9a77cdd86a5.roa (raw, json)
Hash identifier:          15jWJOezRBgFBArfw7FZAkOB1n814lfTvECLH40WB2k=
Subject key identifier:   73:38:43:63:E5:EB:6A:F1:A4:F6:5B:59:48:DD:22:9D:BD:95:DF:D5
Certificate issuer:       /CN=3d82b0b3-c91b-494a-9015-fd97f7b12ea2
Certificate serial:       010D0C9F43285848FE442454AE7DCEEA85B9B5B0
Authority key identifier: 27:6E:20:98:0E:57:AD:71:04:AC:15:6C:AB:87:14:3B:99:41:32:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/6a38ca77-dbb3-362a-8297-a9a77cdd86a5.roa
Signing time:             Mon 24 Feb 2025 21:59:30 +0000
ROA not before:           Mon 24 Feb 2025 21:59:30 +0000
ROA not after:            Sun 25 May 2025 20:59:30 +0000
asID:                     0
IP address blocks:        23.185.88.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fe:44:24:54:ae:7d:ce:ea:85:b9:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d82b0b3-c91b-494a-9015-fd97f7b12ea2
        Validity
            Not Before: Feb 24 21:59:30 2025 GMT
            Not After : May 25 20:59:30 2025 GMT
        Subject: CN=f628b8d2-fc8d-4d57-9eb5-c4d2cde4521e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:1b:4a:83:79:de:28:0c:0b:82:b5:37:6b:
                    57:57:2f:63:b7:43:5c:26:72:93:ab:b1:a3:38:9c:
                    98:99:47:05:20:5f:1d:41:e2:a6:40:93:89:5f:1f:
                    bf:e2:95:4f:0d:4c:e9:5a:b4:91:9c:9d:26:75:6a:
                    87:e1:0e:f6:26:f6:04:16:f8:7f:63:d4:b4:83:2b:
                    fa:97:d5:4c:8a:a8:77:8e:da:fa:f6:d7:23:4a:4d:
                    3f:5f:7b:41:d7:fe:f1:b6:bb:67:e2:88:eb:b4:b6:
                    b3:04:1e:e8:d1:16:44:cd:a5:26:17:62:e7:fe:b1:
                    6c:6b:1b:66:97:39:9c:26:9b:71:e6:c2:ec:1f:d6:
                    21:31:0b:5e:28:3e:ee:1c:6f:cc:83:e4:c8:c4:25:
                    3f:44:38:b1:a7:eb:78:cd:8b:b1:37:85:81:f5:0d:
                    6e:72:84:0c:63:9d:37:f3:84:f1:ce:37:0b:92:6d:
                    09:00:0e:bc:b9:a6:14:7a:08:77:64:9b:89:09:55:
                    f2:f5:c6:45:ad:58:77:6c:86:53:6b:ac:bc:ea:72:
                    d5:f1:8c:5f:e2:31:65:48:2a:48:8b:ad:18:34:f9:
                    dd:ef:21:26:c5:c3:0d:d9:a3:df:e9:f9:e2:e3:1b:
                    d0:32:e0:95:50:4e:f4:02:d3:6d:3c:0c:e6:59:6b:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:38:43:63:E5:EB:6A:F1:A4:F6:5B:59:48:DD:22:9D:BD:95:DF:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/6a38ca77-dbb3-362a-8297-a9a77cdd86a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.crl

            X509v3 Authority Key Identifier:
                keyid:27:6E:20:98:0E:57:AD:71:04:AC:15:6C:AB:87:14:3B:99:41:32:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d82b0b3-c91b-494a-9015-fd97f7b12ea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:47:9c:31:06:a2:26:ea:ec:18:8a:90:c9:5a:58:a6:07:75:
         dd:19:d1:b0:bc:33:9d:bc:3a:bc:fe:6b:7a:b4:58:28:3e:44:
         05:cf:1f:fa:34:5b:5a:17:d4:4b:ef:96:16:5f:6c:21:c8:57:
         e1:23:c5:89:76:0d:ef:8c:4b:40:fb:18:18:20:49:c1:17:46:
         40:74:97:e5:1f:57:d8:4f:68:3b:ed:dc:6a:33:ff:d2:f5:00:
         6d:c1:e8:e2:0c:56:7d:01:2c:d5:5c:d5:bf:6a:aa:33:d0:b4:
         f8:76:d8:27:97:72:c8:83:62:53:ce:b3:bf:be:6d:0b:4f:66:
         39:c3:ed:f3:d3:4d:80:eb:df:b1:93:1b:7c:be:dc:00:58:db:
         e3:5a:9f:5e:de:97:91:23:6a:18:ff:7c:23:bc:99:be:13:97:
         b5:8e:53:b1:65:b6:cd:ab:49:f0:b8:66:03:71:a5:5c:1e:6c:
         9b:2b:47:da:0f:ea:47:17:4a:16:b9:0c:39:d7:8e:ea:38:56:
         71:e7:05:b1:c4:89:d3:d8:a4:48:45:96:be:4c:8e:ed:aa:45:
         c2:3a:e0:f8:0c:09:0e:27:9e:25:3a:45:ae:ff:7d:1f:e3:26:
         d9:e4:3b:79:d8:c3:93:a6:0a:ba:ce:db:bb:e2:d1:44:3f:6b:
         48:b0:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:36:35 2025 by rpki-client