Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/127d7811-f565-30b9-b289-df37875421fb.roa
File:                     127d7811-f565-30b9-b289-df37875421fb.roa (raw, json)
Hash identifier:          FLofp+lAqCQuNQzPQvV7IUarysE59e6o50vA05LTp5U=
Subject key identifier:   A2:1D:3F:1C:44:56:6F:0D:3A:8D:D2:6E:48:F4:58:C2:CA:77:F4:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BE863E47D898E455FF1B3900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/127d7811-f565-30b9-b289-df37875421fb.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.215.16.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:3e:47:d8:98:e4:55:ff:1b:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=7cf49f36-8754-4e80-acbd-4fca28faabee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:6f:04:e5:4f:1a:bc:57:30:1f:1f:cc:6c:
                    99:ac:29:eb:52:07:fb:5e:69:8b:fc:f7:b5:15:00:
                    e8:91:4b:a7:83:0c:2e:e4:83:3e:38:28:0d:2f:d4:
                    e4:65:67:49:e8:d2:52:d5:c0:70:90:f7:9b:f4:34:
                    2c:f3:cd:42:ae:99:b0:b2:13:d1:20:e1:0e:d5:7e:
                    56:f9:1f:0a:00:24:ea:34:5e:49:03:d0:34:b6:dd:
                    1e:48:0a:48:89:fe:8c:75:7e:5d:b6:57:a5:3e:9e:
                    af:da:cc:04:7c:a8:64:cd:9a:d0:61:9c:6c:73:5e:
                    64:e3:47:4f:d4:b1:15:97:2a:19:94:d7:56:2e:4b:
                    58:5c:cf:35:97:0b:00:c1:3d:2a:86:74:81:1b:6c:
                    6a:cf:2e:04:5e:f0:d3:04:c8:e8:b1:6a:71:37:88:
                    c4:0d:88:b7:6d:31:65:4c:fe:2b:79:74:a2:b0:5f:
                    f2:3e:20:e8:4b:17:6a:4c:b9:f8:27:9b:8e:d0:ff:
                    57:62:9d:cf:ef:3a:79:95:67:b2:2d:2d:b0:3d:7a:
                    bc:c2:73:89:46:18:8e:2c:53:c1:17:c3:b4:05:76:
                    92:c5:be:32:55:99:56:41:4d:1a:56:44:06:d9:c5:
                    c2:92:a2:a8:22:ed:a3:bc:db:29:2b:c6:c4:81:75:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1D:3F:1C:44:56:6F:0D:3A:8D:D2:6E:48:F4:58:C2:CA:77:F4:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/127d7811-f565-30b9-b289-df37875421fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:dd:8d:d2:7a:be:f1:98:43:f9:90:fb:2d:1f:01:a1:2c:
         5f:8c:e4:ff:c6:2a:18:7e:cd:ca:d3:53:9d:ff:24:2f:e6:51:
         25:86:17:bd:3c:2e:f8:d8:23:88:70:d0:2b:9c:b2:b2:1c:d4:
         3f:61:4b:20:a8:15:5f:e2:ee:87:06:50:ce:30:8b:4e:69:e0:
         22:be:65:47:48:c3:b5:c7:a6:6a:34:85:a7:70:0e:4e:4a:d8:
         77:84:b0:05:c5:d1:3e:59:6c:b3:5d:aa:da:01:58:dd:47:b5:
         7c:2a:9a:75:8e:4e:f5:09:a8:df:51:ec:96:27:86:1b:df:c2:
         ed:12:26:88:62:22:6f:9b:35:07:ad:4d:93:8b:49:01:74:e6:
         d5:8c:fc:ed:24:d9:dc:3f:92:bc:3e:97:26:b1:9a:a2:6e:4f:
         6f:02:f2:88:1c:b4:d3:98:6f:f8:a2:64:cd:22:74:d9:3f:08:
         0d:23:df:40:05:9f:2e:a3:73:04:e1:39:75:56:2f:72:51:68:
         f0:96:57:b9:d2:77:df:69:ef:c6:b0:9b:e9:ff:1b:62:98:6a:
         ed:f5:a3:69:a4:d6:55:c9:fa:ea:61:d9:1c:00:69:76:c0:05:
         c1:03:72:c7:23:3b:30:80:05:28:bc:c7:0b:78:9f:1f:63:1f:
         2c:b7:0d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:07:19 2025 by rpki-client