Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa
File:                     3c798600-596d-3e77-bb5e-d24d01e64ba3.roa (raw, json)
Hash identifier:          VmZxMPLq1yT/YyVK8sF43f9bPzCsjcPyajB497xwTno=
Subject key identifier:   E3:7F:35:BC:D8:61:CB:96:38:9B:2A:4B:58:DF:FB:69:08:CF:72:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB94E45BFF5223F76DAA96
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.211.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:94:e4:5b:ff:52:23:f7:6d:aa:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=51dd4743-c17f-44a2-9f45-83dd1cfeab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:96:78:85:d0:c1:c3:32:b0:96:90:09:21:
                    66:e6:c3:53:51:2e:3c:a7:47:96:e2:37:88:a5:4f:
                    7a:b1:54:9c:c2:7e:41:40:ab:14:10:14:58:7c:de:
                    5b:6e:ef:80:6b:6a:43:16:20:52:10:24:66:7e:59:
                    2e:96:d5:1e:b1:90:71:5c:35:87:1a:11:0a:60:3d:
                    aa:f9:48:cf:d2:96:0a:f2:5c:72:d7:8a:39:10:40:
                    cd:3d:a2:a8:c2:9b:9d:64:ac:71:29:d2:06:22:56:
                    22:77:bc:74:f7:c1:d9:b0:67:18:c2:fe:1a:e9:2d:
                    84:a0:bf:42:b8:c6:9c:b2:03:3a:b8:96:ce:4c:f6:
                    c8:91:fe:8f:d0:d9:44:42:01:bc:eb:54:e1:bf:f8:
                    6c:93:a9:b6:a5:3b:39:bd:58:e2:3c:77:b0:b7:90:
                    1a:3f:3b:ba:98:6c:af:07:db:a5:45:75:05:31:dd:
                    b8:31:af:da:72:cd:d2:1a:ba:32:57:60:5c:eb:f1:
                    c5:79:ab:b5:16:9e:85:8f:99:03:91:e8:28:60:36:
                    bb:07:f9:55:ba:7a:1b:d4:1c:88:e3:94:41:5c:54:
                    52:05:06:ec:d6:50:ff:cf:a0:4c:48:fb:94:5e:ae:
                    23:8e:b8:c6:d3:d6:23:3c:e9:c2:6c:df:2e:28:01:
                    ba:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7F:35:BC:D8:61:CB:96:38:9B:2A:4B:58:DF:FB:69:08:CF:72:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c798600-596d-3e77-bb5e-d24d01e64ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:16:72:41:bc:b0:4e:6e:7a:a4:f5:9f:9a:62:61:c0:71:6b:
         06:c4:fd:4e:e9:66:c2:d2:f3:e4:de:26:3d:4a:dd:a4:7e:6e:
         ba:7f:06:d5:e9:d7:ba:c7:9f:1a:ca:4d:81:54:0d:ac:73:de:
         44:ab:e7:c1:f5:cf:e9:e7:e8:40:71:fa:9f:f3:92:e4:41:fa:
         ab:35:2f:6c:1f:c9:de:8f:09:cf:f6:44:eb:ed:41:a3:61:0c:
         8a:5b:cf:d1:2a:0a:84:fc:70:7d:2b:42:9a:7f:7d:f1:b3:5e:
         f7:cb:6d:7b:a7:fe:50:f5:89:a2:34:ee:41:84:19:ad:fa:f3:
         35:2d:27:75:7c:48:d4:c1:32:99:80:a6:a9:91:24:3f:06:3e:
         f3:70:6a:e3:3a:5a:c2:61:74:48:e3:2a:8e:97:66:fe:ee:b6:
         10:14:25:f2:a3:1c:43:ed:21:b2:cd:6d:58:6f:69:76:16:ff:
         e9:86:2d:b9:60:7b:a4:07:e4:50:be:19:9f:53:1c:22:d4:03:
         48:ec:31:6a:50:ae:73:9c:fd:1a:5d:c6:79:bf:08:71:bf:df:
         f6:8f:68:d0:3f:91:aa:f7:06:ea:8f:5f:de:a5:f2:11:64:6d:
         da:5b:d9:25:84:31:61:99:c0:3e:a6:d0:70:aa:c9:60:d2:29:
         86:76:05:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:39 2025 by rpki-client