Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/276a0bbd-ae05-3d42-b132-a659eb11ea8f.roa
File:                     276a0bbd-ae05-3d42-b132-a659eb11ea8f.roa (raw, json)
Hash identifier:          fvZWr7y2DOuVBNdXSKdTvdwMu/bQRIztztgCeAugzwk=
Subject key identifier:   AB:5E:80:17:4B:DB:58:86:FB:5A:E4:44:EF:EE:65:1F:EB:1B:BF:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848D0ABC3C882129B7C85EF3D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/276a0bbd-ae05-3d42-b132-a659eb11ea8f.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.205.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:c3:c8:82:12:9b:7c:85:ef:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=2366921b-3019-4d6d-8c12-b7abebe2c3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:d4:76:d3:bc:57:9a:0b:71:bb:20:32:cd:
                    05:c7:63:4f:ed:6e:98:b2:41:53:05:ea:93:45:d9:
                    77:f3:7e:6b:ca:7f:9c:ec:3a:97:b9:60:84:e8:86:
                    58:52:65:9b:25:b4:93:2d:f1:47:a7:3d:37:c7:81:
                    66:ac:95:12:11:d6:33:eb:a3:be:e2:95:26:84:b9:
                    59:f8:63:7f:ae:61:d7:8d:60:ef:e6:e2:f4:ab:1b:
                    f9:0d:e8:ac:7c:f6:6c:00:7b:1f:3d:0a:28:aa:9f:
                    1a:4b:e2:a2:be:23:19:ac:f0:6a:40:39:da:c3:d1:
                    f1:4f:19:96:fe:a8:b6:c9:c4:4e:9d:f9:91:59:c0:
                    84:c7:b2:f9:e9:5c:85:42:7f:e0:c1:9c:85:b9:c2:
                    7a:53:5d:d2:46:22:99:a9:1f:ee:01:b4:b6:53:00:
                    08:2f:f2:5c:10:fb:09:cb:55:a2:b3:5e:30:d2:34:
                    82:14:d4:6f:53:3a:97:da:51:0b:eb:c3:29:b2:aa:
                    41:ab:b3:64:14:b6:bd:38:9e:bd:0c:15:54:93:14:
                    59:ad:96:a0:85:d9:da:05:7c:91:20:0b:f3:c3:73:
                    ae:7c:f5:ea:09:0a:53:35:02:ca:e6:fb:f7:c1:4c:
                    67:c4:7e:e6:b6:13:df:fa:81:6f:0a:a6:fb:eb:0b:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5E:80:17:4B:DB:58:86:FB:5A:E4:44:EF:EE:65:1F:EB:1B:BF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/276a0bbd-ae05-3d42-b132-a659eb11ea8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:99:bd:81:de:cc:ed:06:ef:b2:a4:f7:e5:78:db:d4:52:80:
         7b:20:ea:76:dd:11:3a:5f:29:35:1b:09:76:f3:14:d6:36:a4:
         37:d5:e1:1b:1e:2a:29:53:43:7f:5d:1a:fd:84:40:fe:4d:1c:
         5e:27:b8:f9:98:6e:4b:57:36:38:6e:56:b9:c7:15:38:42:b8:
         92:5c:9b:e7:85:cb:c5:ef:f2:ab:33:5c:54:06:db:87:b0:c7:
         49:ae:d2:6b:cb:5f:f7:7d:79:aa:8a:ed:7c:94:98:5a:da:ff:
         db:8c:76:27:33:65:68:68:a2:50:0d:bb:3b:55:5a:9b:b6:d3:
         3e:b0:2a:1d:52:20:89:a6:ef:08:81:c5:6c:5b:3e:c1:5c:af:
         70:33:4e:d9:21:63:14:24:80:9f:f0:f8:0e:a3:fa:88:c9:5e:
         92:cc:24:ac:d0:77:51:b3:d0:76:5a:f7:d6:6c:be:0f:be:32:
         40:de:3f:ba:c8:53:a4:d8:5b:0e:f0:a1:92:8b:9f:f1:52:5a:
         6e:ab:2f:18:9f:27:97:ba:11:f4:8f:67:fe:8a:ba:35:01:c0:
         7c:7f:49:ab:8f:e8:52:92:c7:b1:04:c5:11:35:ab:b3:71:ab:
         63:ef:bd:80:49:08:a0:31:89:74:01:9b:3c:67:55:25:e9:47:
         b0:d2:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:52 2025 by rpki-client