Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/b77f6253-748a-3ebe-9188-9f81a59f2a73.roa
File:                     b77f6253-748a-3ebe-9188-9f81a59f2a73.roa (raw, json)
Hash identifier:          GPEzt9p8kKpmeK6kRUUVvl01gAOIbmoMwH4CKsY9KL0=
Subject key identifier:   88:29:1C:B8:B9:E4:97:01:7D:A1:75:A6:34:B5:BC:85:4C:8B:1F:DB
Certificate issuer:       /CN=9caf23fc-9cbc-4f40-aea8-07653211f665
Certificate serial:       010D0C9F43285848EBA2B81AA41C053A013DF030
Authority key identifier: 4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/b77f6253-748a-3ebe-9188-9f81a59f2a73.roa
Signing time:             Tue 18 Feb 2025 05:49:42 +0000
ROA not before:           Tue 18 Feb 2025 05:49:42 +0000
ROA not after:            Mon 19 May 2025 04:49:42 +0000
asID:                     7018
IP address blocks:        23.134.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:a2:b8:1a:a4:1c:05:3a:01:3d:f0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9caf23fc-9cbc-4f40-aea8-07653211f665
        Validity
            Not Before: Feb 18 05:49:42 2025 GMT
            Not After : May 19 04:49:42 2025 GMT
        Subject: CN=d24d27da-9738-4434-be8d-7d55a8c34015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:21:4a:2f:61:10:f1:a2:f7:de:53:90:ac:
                    d8:80:fd:22:e2:f9:21:88:d9:0d:91:1f:10:88:7f:
                    a8:e5:19:76:6d:1a:3a:a0:30:f0:7b:86:b3:92:1d:
                    c8:5f:c8:b3:80:e8:9b:bd:53:e0:f3:71:cf:d3:fd:
                    65:b1:03:ba:71:f2:0e:b2:df:f8:c4:29:1a:db:3c:
                    64:89:b5:1d:1c:bd:bb:9f:9f:d0:5c:f6:22:be:51:
                    38:d7:46:74:2c:c4:93:c6:15:eb:4a:96:ba:69:1b:
                    8f:fb:81:04:0c:af:69:8d:2d:c8:08:c1:4a:6c:ac:
                    b6:08:7d:0c:07:d0:a1:8b:07:f8:40:f3:03:4b:18:
                    47:bc:a2:a4:c4:4c:c6:66:ec:43:9b:44:ed:c3:49:
                    e6:28:16:30:6e:28:7b:32:8a:c7:6b:41:95:ea:ac:
                    92:af:86:5a:bd:b8:c5:a9:0b:38:c8:48:1a:4b:28:
                    f3:1c:3e:f5:b1:ce:9b:7c:3a:0d:61:2e:c3:30:18:
                    54:74:b4:de:b0:48:1b:b8:16:39:e3:89:a5:b6:a7:
                    12:0e:1b:e0:9a:4c:47:bf:ef:64:cf:0b:e7:2b:14:
                    de:26:36:51:25:51:d1:49:17:3d:c2:22:bb:d5:45:
                    74:68:11:07:9d:f3:70:36:7d:ca:28:07:59:9c:c0:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:1C:B8:B9:E4:97:01:7D:A1:75:A6:34:B5:BC:85:4C:8B:1F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/b77f6253-748a-3ebe-9188-9f81a59f2a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.crl

            X509v3 Authority Key Identifier:
                keyid:4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:06:92:9d:48:19:29:79:5d:2a:33:ed:42:75:f5:bf:62:
         5e:54:b5:b6:c3:62:e7:96:cc:a3:ea:7c:4c:65:9b:8c:3b:a0:
         41:d4:14:5b:70:c1:4e:0e:84:b5:db:65:66:e6:f1:98:79:76:
         5f:2a:dd:68:49:45:99:a1:c5:d7:21:ff:98:a1:6f:db:8e:a4:
         8a:48:d0:76:3d:5a:b2:4f:32:a7:95:b2:3f:67:17:e9:ab:56:
         68:72:c7:a7:9e:04:30:d0:b4:4e:4d:1e:47:c5:64:23:c6:65:
         d5:ac:06:36:dc:39:b1:23:99:72:3b:54:57:a8:74:5e:4d:8b:
         e8:0b:44:52:04:ee:df:34:f1:0d:67:6f:a8:f3:13:e3:f7:d2:
         b2:af:37:43:08:aa:f5:fe:e8:83:aa:9d:25:0f:f9:f0:33:bc:
         0a:73:c9:92:4a:19:43:ad:f6:3c:41:e9:37:48:e7:bb:ed:85:
         69:bf:25:35:80:7d:6e:7e:c6:2a:21:77:dc:6c:15:af:3d:cf:
         bb:3c:16:71:98:ae:36:40:85:4e:07:63:54:5f:8e:7f:ab:17:
         39:7a:b2:3a:67:e3:dc:1e:49:57:4b:74:4e:28:75:04:4a:3b:
         12:ac:72:36:be:29:90:c7:c4:ee:a5:36:93:16:53:59:5f:1e:
         af:22:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:08 2025 by rpki-client