Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
File:                     b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa (raw, json)
Hash identifier:          +p13T21cnVZkFh0EUGeb/Oacy9RvK66mJW7EKwqCZ2I=
Subject key identifier:   25:A7:5E:17:A3:2E:47:18:D0:E3:28:29:B9:C1:71:6F:6A:29:F9:A9
Certificate issuer:       /CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
Certificate serial:       010D0C9F43285848894E93AF2281C015FD907540
Authority key identifier: 8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa
Signing time:             Tue 14 Jan 2025 00:30:57 +0000
ROA not before:           Tue 14 Jan 2025 00:30:57 +0000
ROA not after:            Sun 13 Apr 2025 23:30:57 +0000
asID:                     401581
IP address blocks:        23.132.60.0/24 maxlen: 24
                          2602:f741::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:4e:93:af:22:81:c0:15:fd:90:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029df8bd-41c5-4f22-a4bc-f84f1bc04bfc
        Validity
            Not Before: Jan 14 00:30:57 2025 GMT
            Not After : Apr 13 23:30:57 2025 GMT
        Subject: CN=c5e3bf02-48aa-4e83-9b93-6f7473fadad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:1f:f1:f7:ff:38:8b:2e:26:30:65:94:ae:
                    52:19:c6:6d:4a:ef:a5:14:73:2c:ea:1a:05:2f:92:
                    c6:cd:af:73:51:23:1a:77:82:5e:78:83:b0:f7:0b:
                    e3:9a:48:b1:d5:6b:04:6c:75:b3:da:a2:ca:2e:98:
                    aa:24:af:f9:af:dd:a0:b4:7e:68:bc:7e:9e:17:da:
                    af:bf:c2:08:3f:f2:b3:13:a1:e7:2f:d4:3b:4f:c8:
                    5b:09:ed:8d:11:ab:1a:8d:b3:74:d6:03:06:19:39:
                    e7:70:b2:82:a3:a8:7d:e5:77:82:06:25:db:3e:5f:
                    86:80:4a:f2:7a:10:0f:ad:f4:af:5e:4a:37:c8:62:
                    9c:e3:2d:58:9e:bb:df:3f:71:2e:8a:bb:ff:ce:60:
                    82:2f:d1:b9:45:4f:2e:8f:ac:9b:2e:03:66:94:0c:
                    80:87:8f:61:4e:5c:9a:74:74:57:52:c0:58:71:6f:
                    69:48:7c:fe:7b:94:78:25:de:8d:36:7d:69:ca:08:
                    de:ae:25:25:de:12:d2:9a:9b:ce:ae:36:84:30:52:
                    f2:aa:73:eb:65:0a:9c:6f:e3:e3:60:c7:83:47:c2:
                    e4:c3:86:d9:d5:79:08:1d:17:03:e5:06:9d:dc:e9:
                    aa:f3:f0:0f:65:fb:6f:91:83:9d:84:07:6a:6d:a7:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:5E:17:A3:2E:47:18:D0:E3:28:29:B9:C1:71:6F:6A:29:F9:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/b7eac23d-a9cf-3242-a01d-bc8f52b57b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.crl

            X509v3 Authority Key Identifier:
                keyid:8A:ED:2B:27:17:D4:6B:41:C6:6A:26:23:08:87:A8:D8:8F:91:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/029df8bd-41c5-4f22-a4bc-f84f1bc04bfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.60.0/24
                IPv6:
                  2602:f741::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:3c:8f:cb:3f:f3:b1:9a:32:68:07:86:12:1f:0f:d5:a5:90:
         47:a1:cb:2b:b3:25:46:e2:81:4c:5f:be:34:e3:e0:cb:4f:e9:
         b4:e3:5e:0a:cd:54:31:9e:2c:33:a0:95:a3:70:36:97:77:db:
         89:7c:bf:fd:f6:3f:16:3c:56:b3:0f:a9:bf:6e:47:46:19:c7:
         06:ad:0a:5e:c3:cb:bb:5c:bb:31:ee:d1:28:f8:33:7a:6c:0f:
         4c:72:10:4f:47:bf:f2:b5:c6:d5:02:54:29:4f:ef:36:95:94:
         cc:8d:d2:1c:3d:33:06:16:e7:d0:d1:ac:fd:98:dd:a4:c3:70:
         c8:5e:ef:f6:bb:73:fd:3a:a5:9b:e1:2f:eb:2e:1c:71:73:89:
         57:60:d3:0e:2e:d5:89:c6:9a:06:df:51:05:48:04:69:85:12:
         26:9c:d8:5a:5e:f7:a3:08:dc:0d:f0:20:2b:ac:ae:41:1f:2f:
         e6:7d:8c:b8:87:d3:c7:ed:9e:f0:88:85:e3:a2:71:b2:2b:fd:
         ff:e9:b4:41:31:e7:97:63:ed:3c:c6:bf:58:07:0b:94:82:5b:
         2e:52:1c:dd:55:29:97:8d:c0:d7:2b:52:4c:7d:7a:86:44:b0:
         8c:57:c6:11:7f:54:e3:b1:03:c6:4c:33:39:00:03:34:73:df:
         f0:3e:b4:08
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEiJTpOvIoHAFf2QdUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDI5ZGY4YmQtNDFjNS00ZjIyLWE0YmMtZjg0ZjFiYzA0
YmZjMB4XDTI1MDExNDAwMzA1N1oXDTI1MDQxMzIzMzA1N1owLzEtMCsGA1UEAxMk
YzVlM2JmMDItNDhhYS00ZTgzLTliOTMtNmY3NDczZmFkYWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzMf8ff/OIsuJjBllK5SGcZtSu+lFHMs6hoF
L5LGza9zUSMad4JeeIOw9wvjmkix1WsEbHWz2qLKLpiqJK/5r92gtH5ovH6eF9qv
v8IIP/KzE6HnL9Q7T8hbCe2NEasajbN01gMGGTnncLKCo6h95XeCBiXbPl+GgEry
ehAPrfSvXko3yGKc4y1YnrvfP3Euirv/zmCCL9G5RU8uj6ybLgNmlAyAh49hTlya
dHRXUsBYcW9pSHz+e5R4Jd6NNn1pygjeriUl3hLSmpvOrjaEMFLyqnPrZQqcb+Pj
YMeDR8Lkw4bZ1XkIHRcD5Qad3Omq8/APZftvkYOdhAdqbaenKQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFCWnXhejLkcY0OMoKbnBcW9qKfmpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMjlk
ZjhiZC00MWM1LTRmMjItYTRiYy1mODRmMWJjMDRiZmMvYjdlYWMyM2QtYTljZi0z
MjQyLWEwMWQtYmM4ZjUyYjU3YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDI5ZGY4YmQtNDFjNS00ZjIyLWE0
YmMtZjg0ZjFiYzA0YmZjLzAyOWRmOGJkLTQxYzUtNGYyMi1hNGJjLWY4NGYxYmMw
NGJmYy5jcmwwHwYDVR0jBBgwFoAUiu0rJxfUa0HGaiYjCIeo2I+RbXwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMjlkZjhiZC00MWM1LTRmMjItYTRiYy1mODRm
MWJjMDRiZmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q8MA4E
AgACMAgDBgQmAvdBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzPI/LP/OxmjJoB4YSHw/VpZBHocsrsyVG
4oFMX7404+DLT+m0414KzVQxniwzoJWjcDaXd9uJfL/99j8WPFazD6m/bkdGGccG
rQpew8u7XLsx7tEo+DN6bA9MchBPR7/ytcbVAlQpT+82lZTMjdIcPTMGFufQ0az9
mN2kw3DIXu/2u3P9OqWb4S/rLhxxc4lXYNMOLtWJxpoG31EFSARphRImnNhaXvej
CNwN8CArrK5BHy/mfYy4h9PH7Z7wiIXjonGyK/3/6bRBMeeXY+08xr9YBwuUglsu
UhzdVSmXjcDXK1JMfXqGRLCMV8YRf1TjsQPGTDM5AAM0c9/wPrQI
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:23 2025 by rpki-client