Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa
File:                     41605246-27b6-346d-9d13-056a05d2ecb6.roa (raw, json)
Hash identifier:          nm1gacMk31snNGgliXM/4QLG/XnDbcL2ZRzE2Z83prA=
Subject key identifier:   A4:B7:19:D7:99:79:AE:F5:1C:EA:5F:E0:D8:52:56:7F:BC:9A:8D:87
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848CC7BA69F2AA248B7394EE800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.223.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:a6:9f:2a:a2:48:b7:39:4e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=37445235-6b64-42ec-bd16-5771ac7d4b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:72:8a:86:dd:0e:0d:aa:6b:9f:db:57:63:
                    84:f7:10:30:c6:91:e3:64:40:28:1d:8f:2b:dc:1e:
                    28:52:22:20:e0:1e:19:cc:d5:d5:27:4f:5f:b9:9d:
                    48:47:1d:1d:e8:f8:d2:28:a1:7d:47:ff:31:38:dd:
                    b7:11:42:8d:6d:30:0b:c3:02:2f:01:aa:22:58:1d:
                    05:93:7d:14:50:aa:22:10:61:64:fb:59:ee:19:12:
                    08:18:ae:26:33:dc:1f:c9:2f:5f:05:f7:14:89:53:
                    56:1d:84:9f:98:17:de:3d:17:90:7b:1d:34:22:8c:
                    89:ae:e0:76:f5:f4:d2:96:ed:a7:56:58:70:11:3f:
                    c7:b3:29:8d:4d:8b:1c:eb:91:0f:f2:db:8d:a0:e2:
                    82:6a:c2:1c:23:31:17:67:37:71:57:b0:28:1c:ea:
                    90:1e:d7:4d:a2:15:a0:6e:56:aa:75:d6:25:d2:53:
                    c8:85:97:86:84:ab:5a:78:13:aa:7d:7f:2e:aa:30:
                    3f:bc:61:b9:70:5b:be:7f:fa:40:1f:c6:df:d2:eb:
                    c6:db:da:a8:31:b3:2a:fd:22:26:17:17:ea:18:2a:
                    1b:63:69:86:73:d0:c8:42:b4:df:20:cf:41:c2:84:
                    55:94:53:f0:6e:56:70:cd:3f:4b:06:4e:5e:1d:69:
                    d2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:19:D7:99:79:AE:F5:1C:EA:5F:E0:D8:52:56:7F:BC:9A:8D:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41605246-27b6-346d-9d13-056a05d2ecb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:47:77:5f:36:ab:65:d3:61:5d:17:15:35:d6:a1:91:85:82:
         e5:f7:20:f0:41:4d:92:4b:f3:d5:07:d3:6e:50:19:36:a9:2a:
         d4:c4:d5:34:bd:0e:83:c4:69:60:98:66:e6:b1:59:c0:14:53:
         70:55:fc:02:20:ef:d8:49:ed:db:b8:66:4c:fb:e4:23:67:94:
         57:da:d2:6e:a8:3d:b4:a0:28:61:6b:d4:52:19:80:3e:ca:96:
         3a:0b:7b:15:15:b4:4e:2f:65:03:01:cc:7b:25:5b:4c:76:25:
         08:87:80:1e:84:82:e3:08:a6:65:c1:5f:0a:9a:2e:a1:e9:9d:
         7b:e7:16:af:a7:42:27:72:e7:a3:0f:1d:5d:3b:30:78:fc:79:
         aa:65:08:af:07:be:fa:ca:84:2e:9f:7d:61:2f:7f:85:92:b8:
         af:87:aa:87:91:e6:13:eb:ff:e4:f7:d3:33:de:c9:64:2d:d1:
         f4:11:3b:30:ea:7c:12:51:c2:ca:f0:67:7d:2f:bf:47:2c:20:
         d6:ac:c8:8a:b6:67:48:db:91:38:5c:a0:1f:2b:0e:a6:53:96:
         ba:a7:37:80:ef:e1:61:7a:c9:89:df:f3:08:88:f3:46:2b:fb:
         b0:34:96:c6:81:58:86:f0:09:27:67:da:b7:9d:ea:cc:d0:44:
         ab:ed:e2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:50 2025 by rpki-client