Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa
File:                     4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa (raw, json)
Hash identifier:          vDmCjjrwmBVOSiIJf0pegplaJ+xdyhhzbFNK67Ob4+c=
Subject key identifier:   79:2A:98:9B:60:36:B9:DE:14:BA:92:F8:0E:5B:82:F5:4D:F6:5C:6C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858491ED6EF4A2D3CAA8F1F7FDC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.74.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:ef:4a:2d:3c:aa:8f:1f:7f:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=dc024b0b-408c-46ba-8ed3-970895569fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fd:26:97:31:c2:49:f5:53:ac:e1:38:81:e7:
                    ed:4d:c3:87:0d:b5:55:a4:e7:dc:3f:8a:5b:ef:4b:
                    dd:3b:09:67:10:ce:0a:0a:7c:74:7b:d0:2e:a8:80:
                    02:32:bd:06:5c:85:f4:fc:b7:19:b0:28:47:2d:0a:
                    18:1f:a1:0c:04:c4:dd:de:4f:1a:26:38:ef:76:74:
                    5c:f3:54:69:c5:71:bc:a4:b0:9d:95:5b:37:cb:fd:
                    ad:81:5b:82:c8:02:36:56:92:96:d1:ac:cf:8a:92:
                    83:aa:8f:f4:be:11:ae:c0:3f:a9:c4:5d:a7:2d:00:
                    ed:7d:1e:99:e5:18:2c:f8:4c:f4:da:df:cf:b0:d7:
                    34:ec:77:9e:10:5a:23:25:09:af:f2:0f:19:7b:d2:
                    ad:1d:89:e2:4c:de:f7:ee:95:95:95:9e:1f:1e:8f:
                    b9:cd:71:fd:e3:f1:de:59:40:b2:3d:e6:5c:9b:1d:
                    1f:f6:74:a4:d6:9a:75:59:a4:a1:76:95:26:d1:bd:
                    30:4f:8d:d3:f9:b2:52:d8:d7:b4:22:2a:fb:ba:81:
                    8c:80:73:b6:2d:79:a2:2c:c2:b9:db:70:01:ad:b5:
                    bf:42:5c:12:1a:fc:25:a5:17:81:96:64:80:1b:b9:
                    f2:a9:7e:1f:3c:88:a1:2f:3f:f2:33:9c:40:69:ac:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2A:98:9B:60:36:B9:DE:14:BA:92:F8:0E:5B:82:F5:4D:F6:5C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b8ba8e3-268e-3e21-8f25-cb4923987c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.74.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:68:91:fb:66:fd:f9:7d:25:be:61:41:39:95:82:c6:2f:
         cb:ef:06:f8:66:9e:8e:5c:e5:16:26:f5:03:3f:e7:c3:5e:f4:
         48:1d:f3:c6:8e:94:11:a9:32:21:bd:c0:ce:8f:5f:69:a0:68:
         b1:0f:26:5c:1c:00:c0:a5:94:d5:51:67:db:ed:86:f0:d3:b2:
         9f:44:b7:df:fb:8b:2b:01:d9:cd:ab:3c:fa:e7:d8:b8:c8:05:
         22:81:8d:ab:7c:bb:fd:c1:68:a9:43:55:75:19:3e:1e:f0:26:
         b6:56:3f:fe:0b:63:62:a8:1f:47:2d:1e:9e:40:bc:f3:1f:29:
         7f:dd:ae:ab:ab:84:f5:9e:a4:e4:b0:0c:d9:e4:ef:c2:eb:bc:
         ea:d6:85:95:df:3f:30:1b:cd:e1:94:bc:79:72:49:54:b7:d9:
         c6:60:d3:47:2a:cb:42:d7:6d:bf:58:e6:ce:9b:14:f1:54:6a:
         e6:3c:42:a9:16:1b:bf:fc:3b:d2:8b:a3:a6:16:63:18:e9:91:
         30:43:d3:b4:0d:83:7b:57:01:90:5b:60:fc:9c:7e:61:f9:6a:
         e7:f2:32:50:35:3e:03:9a:4c:e1:3e:98:51:0d:40:55:25:96:
         20:db:5c:0f:87:18:4b:92:a1:eb:71:18:d0:16:77:f6:e8:1e:
         91:d3:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:41 2025 by rpki-client