Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa
File:                     79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa (raw, json)
Hash identifier:          6wqTBvBo9xwN4HLJDeVkFET2MT/VAdaQbYxWLjocOLo=
Subject key identifier:   BD:D0:29:5A:C8:53:58:89:9C:C2:96:19:A8:8E:7B:4A:5C:44:CE:2D
Certificate issuer:       /CN=5a3c1ef7-d18b-4bf7-a6a9-d8959334423b
Certificate serial:       010D0C9F4328584E0D84209750CD40FA7BDE6780
Authority key identifier: 43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     401541
IP address blocks:        23.132.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:20:97:50:cd:40:fa:7b:de:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3c1ef7-d18b-4bf7-a6a9-d8959334423b
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=3aa6e658-c2c6-4eff-8bfc-953ae99f799d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:49:77:c6:14:25:94:41:85:b0:bd:a1:32:6b:
                    2d:f4:e7:46:2b:f4:74:22:ab:e9:b3:85:f3:01:74:
                    4e:87:80:7f:72:1e:20:f4:b4:61:67:04:da:fe:c1:
                    1f:f7:23:be:70:68:6f:61:d9:c9:ec:8a:bb:f8:e0:
                    6a:40:89:ea:9f:55:48:34:26:1a:e0:ca:03:fe:4d:
                    e4:e8:ac:99:32:a3:15:a3:58:ee:00:e4:b9:11:54:
                    95:4f:62:cc:24:a6:22:a7:6c:8c:2f:04:18:44:8a:
                    3c:82:1c:cc:ec:39:22:86:74:49:1d:43:73:48:5f:
                    7a:90:46:ff:9b:83:a6:00:44:99:d2:d3:8e:e2:bc:
                    26:2e:87:0c:bc:6d:8c:75:a8:e5:3f:f7:e9:da:cd:
                    9a:7e:05:42:e0:48:97:b8:f3:85:5d:65:fc:bb:e9:
                    96:6b:05:45:1a:5b:23:38:5f:3d:70:20:74:1c:d2:
                    58:35:03:1b:57:03:dd:ef:dd:cb:7e:87:03:91:c5:
                    2b:f4:fd:1d:75:3f:f1:ae:6a:0f:c2:d4:27:5a:c6:
                    a8:70:43:01:9b:10:c9:ef:61:37:79:f8:4f:24:92:
                    c2:ce:14:d0:bc:97:88:5f:68:53:aa:93:b9:85:d3:
                    8d:4d:0b:ee:17:8e:7f:89:0a:ce:bb:02:6a:9d:c6:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:29:5A:C8:53:58:89:9C:C2:96:19:A8:8E:7B:4A:5C:44:CE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/79bca2f2-9949-33bd-9bdb-7b1a8b40a6e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.crl

            X509v3 Authority Key Identifier:
                keyid:43:4E:A8:C1:E7:39:79:C9:C0:B7:35:80:0D:7A:E5:85:26:8E:0B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a3c1ef7-d18b-4bf7-a6a9-d8959334423b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:c3:f1:98:4b:da:c6:31:2c:14:3b:1b:cd:d2:7c:a9:be:
         2d:59:e3:d6:2a:b0:5d:62:cb:87:d2:e8:82:1d:93:d5:dd:25:
         b5:8e:45:18:4e:44:a5:62:4f:8d:d8:b0:ab:de:95:d3:d1:c5:
         a4:2d:f4:07:f9:6e:9f:e6:2c:1f:9b:bc:00:6f:ac:01:ce:0e:
         2c:b0:b7:01:dc:6c:5b:6d:c1:55:06:84:08:48:6c:8c:ce:a8:
         ca:57:27:75:67:65:01:03:aa:7a:af:d6:b9:54:23:8c:3b:68:
         b6:60:de:59:8a:5b:47:60:1b:11:4b:48:82:0b:0a:05:ca:23:
         d6:e1:0b:40:3d:ef:f3:cb:c9:8a:b2:67:ac:b5:c8:2a:72:2b:
         50:66:3a:cc:5a:c1:e9:e3:4d:46:9e:b2:54:0c:cc:7f:40:c0:
         85:5e:2f:e5:f4:b5:9b:87:9d:c1:85:c5:34:5a:50:dd:5b:19:
         69:96:b1:9e:f3:8b:97:af:90:3f:3e:c5:a3:81:cd:3d:4d:c0:
         57:97:e5:d2:8d:0e:17:87:ed:66:15:56:a9:75:43:cc:1f:50:
         f2:a6:7b:8d:f9:59:7c:fb:0c:4d:89:5a:32:04:74:8e:06:77:
         d8:93:3a:63:e4:41:8f:47:bb:7e:40:b1:8c:d4:ce:33:e4:22:
         0e:18:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----