Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3326bc76-55ab-3b67-aa03-7972bb7b3ac1.roa
File:                     3326bc76-55ab-3b67-aa03-7972bb7b3ac1.roa (raw, json)
Hash identifier:          xv4UOWXHBnrhO2E7w8yoshd8Ix3oP/cgAx7VcLpEZSg=
Subject key identifier:   24:73:C2:2A:C7:E9:3D:AA:D5:33:FC:DE:D6:E0:DE:07:08:3E:D0:35
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488DAB6935145A5141765C074E
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3326bc76-55ab-3b67-aa03-7972bb7b3ac1.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.55.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:69:35:14:5a:51:41:76:5c:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=610da05f-a7ff-461e-92fe-a042e8e2eba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:0a:86:35:f4:6c:a2:e6:e2:8e:87:c7:13:
                    63:ac:1b:ec:94:fb:19:2e:38:db:95:b8:fd:57:e9:
                    f4:85:d2:3f:87:7c:02:6f:f1:30:a2:2c:25:c0:37:
                    a8:81:b8:0a:86:72:b5:95:53:15:02:d5:da:f1:1d:
                    fc:39:63:ee:3b:c6:ca:84:dd:63:c3:f1:20:76:d1:
                    79:b0:d5:7e:83:94:5e:c0:92:2e:d5:67:de:ac:43:
                    b2:a3:f3:cd:88:0d:a1:31:3b:3a:dc:74:51:ef:7e:
                    f3:3d:e3:17:2e:3b:74:90:95:59:14:e9:4e:a6:82:
                    f5:a4:4b:c8:7a:37:42:b8:7a:9b:45:d9:33:68:38:
                    a5:52:cb:24:e5:13:e7:37:4a:be:0f:60:7b:78:ad:
                    db:35:2b:13:84:3a:d9:c3:09:53:d7:68:03:84:3e:
                    5d:a8:0f:53:b2:9a:7d:7d:0c:5d:20:55:6e:4c:5b:
                    87:79:b1:7a:5f:4f:70:f4:5a:2c:96:e5:1d:e8:99:
                    7f:a2:e1:b1:18:66:f2:cb:01:08:e6:df:0a:25:b2:
                    97:fa:f4:b8:b6:49:c5:b9:2a:52:e4:39:f4:51:dc:
                    88:bc:63:6b:8a:bc:9d:0b:15:0a:6e:95:e5:f3:75:
                    d3:b5:65:a0:cb:7b:b3:9c:c2:53:35:9c:69:c3:b8:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:C2:2A:C7:E9:3D:AA:D5:33:FC:DE:D6:E0:DE:07:08:3E:D0:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3326bc76-55ab-3b67-aa03-7972bb7b3ac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:87:6d:18:13:d8:90:d4:59:8c:10:f6:43:56:52:ce:39:27:
         a9:2f:6b:de:a9:b2:ed:de:cb:03:18:eb:26:34:46:da:74:1f:
         4e:41:d5:21:e3:d7:ef:07:ca:f3:a9:9c:3d:0d:52:dc:37:b8:
         70:54:75:20:df:cc:0e:0e:b6:ff:42:9f:1f:e8:a7:56:2e:00:
         2a:71:68:f3:37:2c:ba:cb:b8:bf:0e:40:a5:26:cc:95:81:6c:
         e6:1e:cc:b4:77:46:39:07:07:fc:ac:58:1c:59:7b:31:55:c0:
         f9:dc:04:be:ef:41:25:69:16:b9:35:30:b2:81:8f:10:df:7c:
         16:b4:c4:0d:fb:cf:65:86:85:60:f3:be:97:8f:6e:d5:c0:d5:
         67:2d:25:3a:bb:f7:3c:3e:32:68:d1:47:35:48:5b:38:a6:8c:
         f7:f7:7d:ef:b3:85:fc:b2:01:a9:ab:03:bf:ab:8a:02:c8:cf:
         e8:c8:ff:15:68:6d:69:34:59:37:3b:81:d7:a5:c6:08:74:4a:
         35:f1:e5:d2:f9:9c:bd:55:fe:f4:8e:16:d3:cb:88:21:d4:fc:
         9d:e0:d9:fe:4b:86:da:ea:66:d0:0f:9a:22:1f:9d:e3:63:cf:
         0f:d9:86:5f:18:b9:0c:03:dd:64:bf:14:9c:7e:92:fb:77:4e:
         6f:14:db:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq2k1FFpRQXZcB04wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
NjEwZGEwNWYtYTdmZi00NjFlLTkyZmUtYTA0MmU4ZTJlYmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy4KhjX0bKLm4o6HxxNjrBvslPsZLjjblbj9
V+n0hdI/h3wCb/EwoiwlwDeogbgKhnK1lVMVAtXa8R38OWPuO8bKhN1jw/EgdtF5
sNV+g5RewJIu1WferEOyo/PNiA2hMTs63HRR737zPeMXLjt0kJVZFOlOpoL1pEvI
ejdCuHqbRdkzaDilUssk5RPnN0q+D2B7eK3bNSsThDrZwwlT12gDhD5dqA9Tspp9
fQxdIFVuTFuHebF6X09w9FosluUd6Jl/ouGxGGbyywEI5t8KJbKX+vS4tknFuSpS
5Dn0UdyIvGNrirydCxUKbpXl83XTtWWgy3uznMJTNZxpw7gp3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRzwirH6T2q1TP83tbg3gcIPtA1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzMyNmJjNzYtNTVhYi0z
YjY3LWFhMDMtNzk3MmJiN2IzYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFze4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJKHbRgT2JDUWYwQ9kNWUs45J6kva96psu3eywMY6yY0Rtp0H05B1SHj
1+8HyvOpnD0NUtw3uHBUdSDfzA4Otv9Cnx/op1YuACpxaPM3LLrLuL8OQKUmzJWB
bOYezLR3RjkHB/ysWBxZezFVwPncBL7vQSVpFrk1MLKBjxDffBa0xA37z2WGhWDz
vpePbtXA1WctJTq79zw+MmjRRzVIWzimjPf3fe+zhfyyAamrA7+rigLIz+jI/xVo
bWk0WTc7gdelxgh0SjXx5dL5nL1V/vSOFtPLiCHU/J3g2f5LhtrqZtAPmiIfneNj
zw/Zhl8YuQwD3WS/FJx+kvt3Tm8U23A=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:37 2025 by rpki-client