Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa
File:                     666a75d0-0f92-3eb4-86f6-a34bdb124993.roa (raw, json)
Hash identifier:          KASDmV+q9SZ9WZ/Dsd5B/uLT+UPNkU18GJax6DBa/SM=
Subject key identifier:   5D:68:FE:A7:B4:2A:4A:B5:76:2D:02:05:66:38:0F:D8:8A:E3:8D:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487B85C0209A50AC00CAC3F0A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     45758
IP address blocks:        23.42.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:c0:20:9a:50:ac:00:ca:c3:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=afc5a185-ffb1-4db4-8839-5412e25b337e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:d2:6a:46:32:28:93:0d:4d:b2:a8:1e:e7:
                    06:0b:74:3b:e1:b2:93:10:03:cb:45:f8:3f:38:22:
                    69:53:f1:0f:8e:af:8a:51:e6:8f:f3:27:cd:b1:24:
                    42:66:95:b8:9e:3c:66:ba:8f:8f:04:d4:c6:d0:ed:
                    85:52:bc:0c:65:bb:0f:13:d7:b2:cf:f1:21:58:ad:
                    a9:5e:46:ae:9a:66:e7:da:d3:3c:5c:f8:ff:19:1c:
                    eb:18:9a:1b:9c:e4:55:fd:91:ab:83:f5:8c:6c:5b:
                    27:78:07:29:e9:1c:c8:67:8d:ed:47:e3:3e:52:5c:
                    3b:80:07:de:3e:dc:ce:c5:72:08:4b:e9:8b:d2:8f:
                    a3:44:83:99:5d:7c:45:81:20:1f:f3:b1:37:93:ae:
                    9c:cd:47:93:0a:c3:cc:df:f1:51:07:e4:41:65:3c:
                    20:8a:22:39:99:1e:2a:11:da:6f:98:93:9d:ef:aa:
                    ba:69:e9:a9:6c:6b:a8:f6:31:9a:d3:40:6d:7c:7b:
                    18:b4:5e:34:9a:d0:5a:53:b8:e3:2f:1c:ca:a6:8d:
                    c3:1a:41:f9:e7:ee:1b:c6:54:34:d1:87:7a:eb:db:
                    7b:af:59:7e:26:95:fa:27:e4:9e:12:46:f7:3a:5b:
                    b6:c2:14:12:6d:94:7c:06:bc:6c:f6:0c:99:e9:b4:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:68:FE:A7:B4:2A:4A:B5:76:2D:02:05:66:38:0F:D8:8A:E3:8D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/666a75d0-0f92-3eb4-86f6-a34bdb124993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.42.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:f9:5e:dc:5f:ae:b0:cf:0b:1a:74:7a:24:2f:94:fc:73:
         d2:65:81:b3:13:aa:ec:69:1a:df:9b:49:8c:5b:01:86:b6:de:
         15:3a:4c:9b:34:6c:cf:c1:54:ad:93:3d:98:3d:cb:ba:11:9e:
         56:25:8b:49:5a:22:5b:c7:e6:15:e7:4c:ed:d7:01:7b:7c:d2:
         ab:c8:32:26:c7:56:8d:82:19:f9:a6:e3:05:16:10:1d:6a:6b:
         1e:55:01:87:e2:d8:5b:3e:5e:01:45:5f:58:66:ae:75:55:1f:
         48:be:70:46:35:b4:b2:4f:79:6f:f9:a0:8a:ec:e1:b7:f5:d1:
         80:9d:bf:8d:d0:40:f7:c2:13:fd:f1:55:ed:05:9f:6a:be:b2:
         29:0e:f9:ec:70:14:59:98:85:a2:72:15:b5:14:73:3a:36:e5:
         b7:09:bb:29:09:a9:1b:b5:fe:97:f9:f9:c5:58:f9:40:e6:96:
         23:22:e5:4a:55:e1:5e:33:3a:9c:36:6d:21:b8:8e:b0:23:c9:
         0b:19:80:63:cc:06:73:49:88:03:a8:6b:d4:7a:8a:e3:5a:69:
         e4:33:f5:48:4d:8f:00:71:8a:e9:cc:24:c3:81:8d:9a:f8:6a:
         62:7b:ad:36:6f:7e:0d:1d:19:d8:00:3b:23:7d:30:73:ff:7c:
         60:0b:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:08 2025 by rpki-client