Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d1db6e-6c63-3c72-b184-b4cca09b6104.roa
File:                     10d1db6e-6c63-3c72-b184-b4cca09b6104.roa (raw, json)
Hash identifier:          X3ohkItRtPcuUhQ2hcn2nM+7f2ZkQM3S3uUhw1qsEbo=
Subject key identifier:   79:38:4F:B5:4F:CA:29:86:B2:19:AF:B5:68:41:AE:CF:48:DC:E6:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584950F96F638B0CFE0D90AEF080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d1db6e-6c63-3c72-b184-b4cca09b6104.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     16625
IP address blocks:        23.192.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6f:63:8b:0c:fe:0d:90:ae:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=4f79942d-9457-407d-9308-af032007b0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:14:25:aa:62:9e:0e:97:a3:b6:7f:30:94:
                    50:4a:e0:40:eb:73:1e:22:d4:6d:e3:40:e7:95:c5:
                    12:1e:12:b9:a2:61:95:48:d7:dc:91:ac:24:53:c5:
                    a9:8c:3a:e9:32:53:00:fd:30:4a:04:88:67:b4:75:
                    c4:fd:b1:f4:8e:85:45:b6:dc:1b:01:42:1c:23:64:
                    99:73:56:30:ec:b2:57:da:13:17:35:a1:f4:f6:85:
                    bb:f1:04:d4:19:b1:fc:d6:34:24:90:40:62:bb:eb:
                    ff:96:1a:ce:ac:a9:fc:3a:c9:c0:d9:af:4f:aa:76:
                    74:79:ba:22:16:c5:40:64:29:07:fb:16:96:3f:02:
                    5c:7b:57:f7:c9:7e:73:25:ba:a4:4b:4e:61:04:55:
                    ca:25:f3:33:1b:09:61:e3:6d:7e:88:b5:ef:27:a2:
                    ae:91:0b:f8:0e:ac:ed:c3:c6:37:32:39:30:95:e3:
                    92:8c:e4:84:5a:f7:a5:11:e5:15:b3:d3:bc:98:31:
                    ef:54:8d:3e:eb:6a:ed:bd:85:58:29:d6:28:de:66:
                    5a:18:64:03:5b:76:c5:d2:9e:6a:10:da:bf:6a:15:
                    6e:95:e8:52:6e:8a:d7:4c:66:43:5a:c9:8a:ba:33:
                    33:e8:b7:91:68:99:0a:b2:7a:e5:1f:74:23:03:9e:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:4F:B5:4F:CA:29:86:B2:19:AF:B5:68:41:AE:CF:48:DC:E6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/10d1db6e-6c63-3c72-b184-b4cca09b6104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:20:f5:02:22:e2:d8:31:05:e5:b5:00:58:62:4c:8e:1d:4d:
         27:13:0b:58:06:37:cd:37:f3:d4:71:14:fc:d1:ad:b4:a3:c1:
         9d:36:dd:11:f0:15:7c:a5:83:af:dc:67:c0:a7:00:17:ac:a9:
         e5:c7:7e:e1:cb:67:8d:69:1a:6f:80:70:19:89:53:a7:b8:db:
         39:2f:9e:89:fc:d8:0d:c5:e6:f8:68:e1:37:8d:16:ce:2a:1a:
         2f:54:3a:ea:64:0f:3e:2d:e5:9d:bf:ce:25:74:4e:3e:e6:3f:
         21:c1:13:86:c6:8a:a0:05:05:ef:51:cf:62:2c:cc:20:1b:06:
         69:7b:94:59:8f:91:8c:01:6b:c7:68:86:16:c4:4f:58:44:92:
         b3:2b:5a:32:14:4f:a8:64:f4:9d:bb:63:3a:ba:41:dc:d7:fc:
         77:17:61:a8:71:9d:61:82:36:9d:7c:a3:6f:3b:9e:76:63:ba:
         96:5a:25:3e:89:1a:bf:10:e2:3e:e6:44:de:1e:a6:f2:a1:cf:
         26:1b:bb:38:e8:56:62:31:7f:15:e7:4e:ab:6e:1e:01:f2:0c:
         a2:ff:93:74:71:f6:f1:1a:73:47:7e:a0:53:3b:a1:ea:75:f6:
         bd:92:9f:04:b6:ab:64:1c:49:71:cb:41:4a:05:fa:67:a7:f4:
         85:f9:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:25 2025 by rpki-client