Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa
File:                     4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa (raw, json)
Hash identifier:          dyEiStcKDTf2Zg+cYRryAlduEcMWrmoe8d2Js71wGfI=
Subject key identifier:   EF:AA:DC:BD:61:B6:12:69:28:1B:FA:79:19:EE:F5:DF:37:67:24:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584902EC0D04DE9F2A625C86B240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     35994
IP address blocks:        23.63.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:0d:04:de:9f:2a:62:5c:86:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=ed54d2c1-f039-484a-a1d0-f336b8baf69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:63:3b:37:1d:06:cc:a2:4b:28:a2:ce:e5:
                    06:e9:b6:e5:93:88:f1:db:a4:ed:6b:9e:7e:02:07:
                    8b:c3:5f:d8:18:dd:20:09:5b:07:a5:31:aa:04:8b:
                    79:1b:c9:bb:ee:be:6d:46:06:41:df:ce:e1:d6:13:
                    5f:15:81:4c:57:62:60:6d:e5:d1:b0:e8:31:1d:da:
                    d3:24:1f:5e:5a:4a:ca:85:89:19:e4:00:89:2c:25:
                    e7:28:ae:cf:71:2c:8f:9e:77:0f:42:5e:62:6c:fb:
                    51:7a:7d:bd:79:06:33:94:f4:dd:5c:fe:94:0a:ef:
                    d3:8d:4d:e2:a8:24:c3:89:b4:bd:d4:8e:3d:bd:2b:
                    cd:e5:a7:20:eb:f6:eb:26:3e:da:51:f7:a3:b8:0b:
                    29:58:d8:05:37:c3:db:27:23:36:7b:e3:48:65:d3:
                    1f:16:e0:cb:85:12:6d:65:3c:46:3a:f2:53:f4:c8:
                    46:5a:05:08:88:dc:84:6b:e0:70:68:ff:b9:ec:c0:
                    ef:b4:b0:e2:77:c3:fb:d9:a0:1c:04:50:72:fb:f4:
                    69:3d:f8:2a:e9:b7:3c:db:db:5e:1f:76:f4:3b:0e:
                    95:69:13:a2:35:ec:f4:c7:a0:30:5d:d7:62:c6:2c:
                    2f:89:86:37:3e:be:18:dc:04:88:92:74:69:53:0b:
                    43:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AA:DC:BD:61:B6:12:69:28:1B:FA:79:19:EE:F5:DF:37:67:24:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bd1a6b3-2111-3624-9eff-1165e7320c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1a:13:07:51:79:34:0f:8f:8a:56:e5:d6:74:f3:4f:a0:c0:
         de:13:42:a2:48:6e:78:4f:a5:f1:9c:1a:ee:b3:02:ff:cc:4d:
         10:62:15:28:12:2b:59:fe:39:13:0d:99:5a:12:c1:53:da:b1:
         f5:b9:89:6e:6c:5b:b6:81:10:ee:f3:af:70:eb:90:d1:5a:d4:
         6b:72:58:4d:e5:d2:61:25:7e:b1:03:56:bf:15:7e:18:02:f9:
         4f:0f:ac:95:db:f5:c9:32:50:8c:a2:df:23:1e:8c:38:03:10:
         db:66:67:54:47:99:74:33:9a:ac:40:7f:69:6c:f7:27:ba:74:
         06:31:bd:bb:2c:c9:b3:dc:42:82:ae:ae:cb:2f:df:18:de:c8:
         88:e1:ad:23:cd:7f:fb:b1:b2:43:fd:bf:13:4d:54:74:04:85:
         1c:ba:5b:e0:11:39:03:52:b3:5f:6f:8e:4c:43:0f:2b:cc:d7:
         f0:a6:3f:36:15:a5:6b:61:04:98:7a:55:61:a4:4f:e5:ca:19:
         ff:4d:3d:0e:13:f3:c5:a9:cb:f9:70:14:21:46:9d:2c:be:73:
         b6:4b:9b:f9:6b:ee:60:03:82:90:85:23:de:35:18:c4:90:4e:
         22:6a:d2:0b:6a:ab:3c:05:23:f2:47:53:52:04:e3:74:49:43:
         e0:10:4a:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7A0E3p8qYlyGskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ZWQ1NGQyYzEtZjAzOS00ODRhLWExZDAtZjMzNmI4YmFmNjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXZjOzcdBsyiSyiizuUG6bblk4jx26Tta55+
AgeLw1/YGN0gCVsHpTGqBIt5G8m77r5tRgZB387h1hNfFYFMV2JgbeXRsOgxHdrT
JB9eWkrKhYkZ5ACJLCXnKK7PcSyPnncPQl5ibPtRen29eQYzlPTdXP6UCu/TjU3i
qCTDibS91I49vSvN5acg6/brJj7aUfejuAspWNgFN8PbJyM2e+NIZdMfFuDLhRJt
ZTxGOvJT9MhGWgUIiNyEa+BwaP+57MDvtLDid8P72aAcBFBy+/RpPfgq6bc829te
H3b0Ow6VaROiNez0x6AwXddixiwviYY3Pr4Y3ASIknRpUwtDKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+q3L1hthJpKBv6eRnu9d83ZyTUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJkMWE2YjMtMjExMS0z
NjI0LTllZmYtMTE2NWU3MzIwYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFz/qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0aEwdReTQPj4pW5dZ080+gwN4TQqJIbnhPpfGcGu6zAv/MTRBiFSgS
K1n+ORMNmVoSwVPasfW5iW5sW7aBEO7zr3DrkNFa1GtyWE3l0mElfrEDVr8VfhgC
+U8PrJXb9ckyUIyi3yMejDgDENtmZ1RHmXQzmqxAf2ls9ye6dAYxvbssybPcQoKu
rssv3xjeyIjhrSPNf/uxskP9vxNNVHQEhRy6W+AROQNSs19vjkxDDyvM1/CmPzYV
pWthBJh6VWGkT+XKGf9NPQ4T88Wpy/lwFCFGnSy+c7ZLm/lr7mADgpCFI941GMSQ
TiJq0gtqqzwFI/JHU1IE43RJQ+AQSrU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:04 2025 by rpki-client