Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39ef0703-cd9e-3b61-8674-dc85d38abe43.roa
File:                     39ef0703-cd9e-3b61-8674-dc85d38abe43.roa (raw, json)
Hash identifier:          UfHLlFRe1EU/bBulTCCwyblaMbR0a8qPTINZzFMqa/8=
Subject key identifier:   03:6D:91:40:0C:8A:80:17:DF:E6:B7:E6:7C:A2:46:55:5D:74:35:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB983BCD98087F900B9460
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39ef0703-cd9e-3b61-8674-dc85d38abe43.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.212.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:98:3b:cd:98:08:7f:90:0b:94:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=82aeb79b-5ea7-41a8-8f0f-6112e804a9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:a7:50:60:cc:8c:11:ab:cf:86:c4:6a:d1:
                    4e:40:33:37:f8:d8:e1:d8:8a:59:de:c9:28:a5:a6:
                    17:a0:97:f0:ef:ca:5d:43:29:11:4b:70:a6:39:e6:
                    ae:70:02:3a:79:85:d5:d1:50:f0:cf:11:6d:7d:90:
                    7d:05:1a:c3:2f:67:04:d4:52:ee:ec:99:ec:9d:89:
                    63:6c:49:d5:7b:8f:7d:a1:9e:a5:f4:c2:39:24:c1:
                    af:f7:16:b4:31:ad:48:29:d5:f0:1d:60:8d:2e:45:
                    cd:80:3f:b8:aa:78:12:1b:57:f9:b1:8f:9b:10:3a:
                    26:dc:4c:fb:d1:20:d3:1b:fb:69:d9:42:8a:f8:30:
                    13:9b:cf:af:ef:15:d4:83:0f:9d:3b:57:94:d6:67:
                    23:6b:cf:9c:85:38:e5:4c:d2:fb:8a:52:13:e1:ec:
                    4c:04:8a:5f:a6:ec:98:6f:ee:91:07:b2:a1:61:50:
                    f5:bc:71:71:4b:fc:3a:a4:9f:f3:0e:5a:eb:f9:78:
                    37:e0:34:75:c7:00:32:81:96:be:61:29:24:c1:81:
                    11:b2:af:9f:23:f6:8a:c5:36:a9:cf:bb:29:fd:5b:
                    51:b7:c8:f3:38:91:d6:65:b7:76:e5:74:4c:04:e8:
                    d9:12:16:6b:21:a9:73:85:75:1e:49:76:b1:5c:ff:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6D:91:40:0C:8A:80:17:DF:E6:B7:E6:7C:A2:46:55:5D:74:35:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39ef0703-cd9e-3b61-8674-dc85d38abe43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:59:17:a9:1a:b0:7a:a1:8c:6b:30:bd:7d:39:40:af:cd:3c:
         18:52:5a:71:df:59:a3:6c:fe:7f:09:36:de:a1:e4:48:d2:b2:
         9b:44:ea:40:a6:99:e5:b2:6c:03:fd:69:2e:4d:5b:ae:34:05:
         c3:c0:8c:93:aa:d4:0e:2d:59:6f:e9:27:2a:3c:5c:11:df:6c:
         f1:53:ca:bd:49:d2:72:90:1d:f0:44:87:f4:03:36:72:f8:44:
         4e:ba:ee:94:72:02:1e:c6:d3:79:ff:f3:93:80:42:fa:53:d9:
         bc:e6:4b:c1:ec:cb:54:d7:aa:e7:ce:bf:4b:3f:00:db:ee:49:
         6d:12:61:4e:0e:6e:f9:05:0b:c5:e3:26:d6:9a:12:8e:69:ff:
         c5:9e:12:c4:cf:a2:16:96:41:36:60:3b:a7:e2:53:df:a4:bd:
         85:d7:22:15:1c:2b:62:a6:28:cf:44:09:f5:f6:91:7f:5d:87:
         c8:77:9e:c4:7c:66:44:0e:7d:1e:41:1b:78:09:f5:8b:3e:20:
         49:0e:fa:71:6f:7c:cb:04:c0:b0:4e:e1:2f:8f:cf:03:15:9d:
         b4:a9:f1:1a:e1:53:51:05:95:04:43:00:4f:62:07:bc:c4:81:
         59:dd:bb:ab:61:a4:06:ee:55:22:e1:d7:e5:0f:6e:fa:26:1e:
         89:14:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:44 2025 by rpki-client