Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d80ccb6-3f17-35bb-ada8-fc71c26c3805.roa
File:                     3d80ccb6-3f17-35bb-ada8-fc71c26c3805.roa (raw, json)
Hash identifier:          1twnNuZLUbhJQfnzk4Eglfxk1LpDCNrv5A123McPUas=
Subject key identifier:   58:DE:F0:8F:46:AC:69:82:3E:00:A5:F8:EE:33:F5:EA:69:D1:44:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848CC7BAC18827DE085EE08EC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d80ccb6-3f17-35bb-ada8-fc71c26c3805.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.222.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:ac:18:82:7d:e0:85:ee:08:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=82bba6f3-7f44-4a55-bd51-6ed844ac7775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:15:ad:f3:33:f5:bd:d5:97:b5:95:f0:e9:
                    86:3c:3f:f7:7a:2d:bd:d4:7a:e6:83:70:42:11:6b:
                    13:9a:e2:88:81:2d:c2:f7:cd:23:36:66:8b:e6:a0:
                    39:e3:e0:18:03:30:7b:ca:19:8a:7f:c9:5a:5d:e2:
                    15:1e:79:66:2a:de:e6:c0:5e:68:dd:d3:a2:ec:9f:
                    68:15:6b:23:51:34:79:44:03:30:de:08:1f:e4:fc:
                    96:30:3a:5e:fd:81:74:c0:08:8a:08:b7:69:9f:ee:
                    24:86:00:be:e4:b2:20:80:ae:1f:a8:39:f2:7e:b6:
                    c2:2c:c4:db:52:69:4d:7c:0c:a5:c3:9b:10:24:4f:
                    a3:49:3e:06:21:97:35:0b:ea:72:9a:27:17:e6:e7:
                    a3:e7:c0:7a:43:62:54:02:8c:80:f5:2f:e4:ed:e8:
                    a0:f9:ee:cf:f5:f1:b3:a3:a6:3b:8b:26:9a:05:f5:
                    41:f3:8d:5a:83:b0:17:39:91:b2:e4:14:3e:7b:aa:
                    37:a9:7d:79:95:c5:2f:05:77:dc:5b:42:0b:e9:e6:
                    12:f3:61:66:a9:4e:8c:13:11:8b:b5:86:85:12:02:
                    e9:b0:60:29:77:ed:2d:aa:27:6e:98:79:e8:54:23:
                    af:c3:06:1e:da:80:06:7d:90:70:6a:32:fe:aa:eb:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:F0:8F:46:AC:69:82:3E:00:A5:F8:EE:33:F5:EA:69:D1:44:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d80ccb6-3f17-35bb-ada8-fc71c26c3805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.222.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:13:92:58:1e:ec:d6:75:0b:51:99:cf:bb:84:18:ec:73:1d:
         16:b5:96:e9:74:4c:1b:df:37:04:ac:f5:d6:23:a8:4c:e5:96:
         3d:c6:cc:08:f4:82:65:67:fc:80:4e:d7:c0:65:a7:10:f7:eb:
         0e:40:33:51:82:df:74:cc:f6:9b:62:26:e4:87:19:f6:61:70:
         f2:e8:59:38:b4:92:7a:32:e0:14:ce:83:f2:7b:11:09:df:42:
         8a:20:ea:a5:b2:e2:b8:0b:b1:de:56:e2:61:5e:17:7d:23:4e:
         5e:9b:16:93:2d:a0:61:90:63:ba:af:25:ea:9d:1d:0e:26:d3:
         d5:4a:69:33:fc:04:85:d8:38:21:da:5d:04:bf:6e:85:90:ae:
         91:16:a7:4b:a3:37:59:56:ac:2d:d3:2c:10:1f:0a:83:d5:ff:
         63:65:d6:0a:6e:0d:9c:08:b4:d2:4a:58:03:10:69:ea:5a:c0:
         17:70:04:c3:21:ee:6b:53:04:43:67:c6:b6:b4:3c:78:7f:fa:
         b9:c2:cd:2a:4c:25:15:65:2f:89:03:39:0f:43:14:81:7f:61:
         7e:18:93:19:9e:47:f2:3f:07:2e:75:7d:b4:5d:9b:1d:4e:0f:
         83:cd:69:02:9d:17:13:4a:9a:be:1a:02:3c:ca:27:93:83:e9:
         5f:eb:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:40 2025 by rpki-client