Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be5f304-57d0-34a3-8260-6d910427908d.roa
File:                     1be5f304-57d0-34a3-8260-6d910427908d.roa (raw, json)
Hash identifier:          GeGrAl8A0M/jGT61WcwH9Gd2uvYUlphBARuTDEK+JL8=
Subject key identifier:   7B:0A:ED:D6:17:3E:44:74:FA:71:F2:B5:1F:8C:A3:C0:6B:8C:7D:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB6B1B5DA162DEA6EF9480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be5f304-57d0-34a3-8260-6d910427908d.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.57.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:6b:1b:5d:a1:62:de:a6:ef:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=c80620e5-4871-4548-997e-94c7522be962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7e:ce:ac:6e:5f:24:35:a5:31:5e:e1:14:c1:
                    b2:22:69:de:f4:e2:f5:19:ae:b6:92:b8:c2:07:3f:
                    1a:a3:e2:df:c3:06:f6:f6:a7:e1:b7:18:71:4c:fb:
                    b4:13:12:a4:91:5a:33:26:f9:e8:50:b9:03:4f:b3:
                    50:41:f6:d1:bd:83:d8:35:28:2c:93:c5:2e:4f:8d:
                    e8:dc:aa:28:c0:fd:8f:7b:1a:f5:f8:d2:62:fc:a7:
                    b6:bd:57:1c:f4:aa:ea:c2:9f:c7:a1:7d:fb:4a:51:
                    a0:4b:e4:86:e6:e2:12:96:9e:26:89:9d:7e:5b:ee:
                    9c:1b:4f:0e:b3:ed:e7:2a:45:fd:d4:13:88:1f:24:
                    bb:0f:b2:14:19:29:c7:66:4a:00:ff:60:2b:1e:fb:
                    f6:50:0c:52:e1:cd:c7:03:23:9f:90:d0:4a:cd:1e:
                    24:d4:05:c2:5f:b0:34:b5:1b:6c:93:4c:fd:60:b7:
                    2b:1b:fd:71:7d:d5:c3:41:7a:fb:4c:42:13:92:ec:
                    d6:d8:2a:bc:e7:75:b7:1c:2f:91:47:99:7f:89:3e:
                    2f:07:26:0f:f9:8c:cb:aa:32:33:ec:ba:ba:84:ee:
                    d9:35:e7:e1:37:a9:b9:1c:e1:d2:5a:b9:6f:55:6a:
                    97:a2:ba:b5:e7:2c:15:19:1c:48:16:7b:d1:fd:24:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:ED:D6:17:3E:44:74:FA:71:F2:B5:1F:8C:A3:C0:6B:8C:7D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be5f304-57d0-34a3-8260-6d910427908d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:63:54:06:a8:d4:92:d0:21:dd:1d:3a:f1:f4:5c:78:92:ca:
         38:52:a9:a1:50:2f:c0:e2:cb:95:ce:3e:09:88:3b:19:98:cc:
         4c:26:94:aa:34:ee:60:ea:20:8b:2d:be:2c:aa:6c:da:cc:14:
         77:76:38:99:f1:24:ba:0f:72:40:b9:be:39:16:20:60:08:84:
         c0:e9:a6:f5:26:91:aa:5f:f9:da:ba:1b:97:ad:3c:88:c6:3f:
         8d:52:e8:06:b3:67:5a:30:6e:d8:c8:f2:5d:94:27:cc:a0:48:
         64:ff:10:65:d9:b7:da:f9:e8:6b:72:70:15:31:9e:9b:83:28:
         2f:f2:6e:25:72:3e:10:69:66:f4:06:8b:64:34:72:15:a1:72:
         47:ab:94:13:04:d3:ed:fb:89:66:17:5d:b2:0d:49:a2:05:13:
         e6:a8:2e:68:ce:db:60:68:c9:68:09:61:22:57:1b:56:d0:6e:
         5e:d6:e1:01:9f:9c:83:90:7e:7d:93:bb:ff:84:ff:0e:e9:f4:
         58:df:f3:56:27:d2:7c:92:01:73:1e:37:b3:23:0b:87:bc:21:
         37:1d:bf:09:98:60:a5:54:ab:e3:0a:d7:e7:77:de:62:07:bd:
         b4:f4:5f:d1:fb:9e:90:d3:58:c7:2c:a0:8f:1f:b2:b3:00:69:
         97:ee:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:13 2025 by rpki-client