Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/f61ff705-aef8-3491-a23d-ecc8ae19200a.roa
File:                     f61ff705-aef8-3491-a23d-ecc8ae19200a.roa (raw, json)
Hash identifier:          rzvevHIbgtfsHZwbYiPOUrjdJTDPElL74jguaS4hMiA=
Subject key identifier:   C8:7A:0E:41:5A:9B:B2:14:BB:A0:30:9E:4D:82:70:CB:48:88:6B:CA
Certificate issuer:       /CN=25cf742f-4f64-4e51-b004-d972a8dd5948
Certificate serial:       010D0C9F4328584C65C142CA29EFBD6A2A3A4DC0
Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/f61ff705-aef8-3491-a23d-ecc8ae19200a.roa
Signing time:             Sat 03 Jan 2026 02:00:30 +0000
ROA not before:           Sat 03 Jan 2026 02:00:30 +0000
ROA not after:            Fri 03 Apr 2026 01:00:30 +0000
asID:                     14618
IP address blocks:        23.129.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:65:c1:42:ca:29:ef:bd:6a:2a:3a:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948
        Validity
            Not Before: Jan  3 02:00:30 2026 GMT
            Not After : Apr  3 01:00:30 2026 GMT
        Subject: CN=dc61cfe6-e3d2-4b3b-a4e2-a99f687f2273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:34:70:bf:47:3a:1d:c8:84:4c:7e:2e:06:
                    5c:7a:d4:3b:16:55:9d:34:84:15:ac:44:2b:e6:46:
                    d6:4d:7a:27:38:b8:9e:4e:10:45:aa:3d:01:03:ed:
                    f5:cf:95:12:e1:0e:ef:3d:57:cf:8b:99:77:30:ff:
                    2f:1f:dc:62:99:d7:66:54:41:78:dc:f6:b2:66:81:
                    5b:e3:ca:11:05:0d:8f:85:54:9a:be:8e:ca:4a:1f:
                    9b:0e:4a:2e:8e:73:71:47:6f:f3:d1:17:68:fc:e2:
                    81:66:fa:a9:27:38:ac:98:a6:14:78:9d:c9:95:79:
                    8e:a5:2c:41:f7:4b:3b:0d:66:65:5a:28:30:bc:0c:
                    49:9e:c1:ef:eb:74:06:fb:6f:aa:31:71:23:bc:43:
                    c8:ef:2c:98:ef:89:a8:48:0c:98:a0:51:a2:8e:57:
                    0a:5a:d3:c3:cf:0a:b5:ad:99:5a:1a:09:fb:69:32:
                    d7:f0:52:7c:33:83:28:e3:92:b4:e5:49:c8:2f:c7:
                    66:ef:db:33:58:bf:27:35:f1:69:4b:7d:db:e0:af:
                    89:d3:bd:c0:35:41:49:e7:60:4c:c4:5d:80:b2:0a:
                    49:ea:a2:b3:44:76:40:a0:04:d0:02:d7:79:a6:30:
                    8f:5b:b9:8e:6f:5b:38:49:b9:7c:39:67:90:9e:1f:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7A:0E:41:5A:9B:B2:14:BB:A0:30:9E:4D:82:70:CB:48:88:6B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/f61ff705-aef8-3491-a23d-ecc8ae19200a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl

            X509v3 Authority Key Identifier:
                keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:04:92:40:6d:dc:08:b1:c7:39:89:ec:ec:4e:ee:b4:00:85:
         ae:64:98:4c:d8:fd:ec:b2:b0:48:7e:ec:2c:9d:7f:19:9e:76:
         b3:e0:fa:db:f3:68:cc:b7:15:3f:57:17:43:bb:3a:68:b9:fb:
         9a:31:dc:19:7b:7b:9f:e3:c5:c8:d4:4a:1f:46:39:14:92:a8:
         ec:36:33:75:5a:0a:47:58:51:02:91:9a:b9:80:15:e8:f9:af:
         b9:b4:de:3d:81:b3:6c:f5:69:14:26:5f:aa:27:0d:78:5a:2f:
         b6:d7:3e:59:a6:e0:36:6e:49:50:98:28:aa:e5:9d:ac:0e:fa:
         9d:0b:eb:f7:b3:3a:77:74:c1:0c:b8:36:11:83:a1:1d:69:42:
         19:71:c9:47:00:96:83:19:ac:40:26:a7:55:10:77:86:ca:9f:
         d1:4c:3a:24:70:1c:bb:4c:9c:ce:7e:7c:71:fc:08:c9:fb:8d:
         57:c5:72:2b:1a:86:f6:2d:c7:b4:ac:69:c2:f4:c7:2e:2b:1d:
         30:e2:95:2a:04:41:ba:38:5d:61:22:d2:2d:01:4b:5a:5f:5a:
         85:87:1c:cb:f6:bd:d8:de:87:34:2f:f7:94:40:8d:cc:0b:78:
         3b:7c:9b:bd:16:a3:c1:f5:45:ba:ac:76:b5:6e:72:48:74:42:
         90:b8:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 01:59:18 2026 by rpki-client