Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ef0787-2a6a-3373-8903-39638662e0c3.roa
File:                     70ef0787-2a6a-3373-8903-39638662e0c3.roa (raw, json)
Hash identifier:          1ctofUXwpX7HhMajQoktPRkXTykE7i9FVqdudhPDSpc=
Subject key identifier:   C2:B1:7D:E2:DC:2A:42:63:9D:94:9B:02:22:97:AA:92:B8:4C:86:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858488F1088CDF2CC6BADEF4DDE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ef0787-2a6a-3373-8903-39638662e0c3.roa
Signing time:             Thu 16 Jan 2025 02:00:39 +0000
ROA not before:           Thu 16 Jan 2025 02:00:39 +0000
ROA not after:            Wed 16 Apr 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.63.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8f:10:88:cd:f2:cc:6b:ad:ef:4d:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 16 02:00:39 2025 GMT
            Not After : Apr 16 01:00:39 2025 GMT
        Subject: CN=70188322-54df-4072-85f7-99699bc8d0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:ed:7a:51:c3:a9:5e:e1:64:9e:65:29:f4:
                    51:60:5e:9a:98:38:d6:6f:5f:b9:2c:d9:17:aa:69:
                    3a:7a:69:23:a2:ba:a1:9d:56:41:81:6b:f0:15:55:
                    74:2d:aa:eb:fc:36:10:f6:b1:d6:ec:1d:07:38:21:
                    a4:78:68:18:39:aa:32:8c:09:87:01:4b:9d:ef:46:
                    6a:78:c5:18:ae:81:27:b2:fc:95:ad:29:c4:25:dc:
                    81:55:1d:bb:84:92:21:cd:70:e6:8d:e6:05:ae:41:
                    36:89:68:1d:dd:4d:fa:1d:db:d5:2c:5e:8c:e0:13:
                    6a:65:2c:bb:b3:90:cc:01:15:2b:06:43:11:ba:c6:
                    2d:0d:f8:7b:da:4e:db:ff:3d:a8:61:ee:31:85:4e:
                    3d:05:e8:bd:20:71:0a:30:5f:1a:af:2d:c1:34:3d:
                    be:55:4c:e1:2b:04:39:b3:21:c1:24:30:72:f4:1a:
                    84:b6:49:f2:29:fe:02:cb:f0:22:57:4a:31:e0:55:
                    ee:dc:b9:9c:81:d4:94:36:cb:d7:66:62:d8:e2:0e:
                    f7:d0:6a:f7:3c:78:cc:94:9d:1a:7b:cb:f6:fc:d7:
                    c2:f4:05:37:5e:8b:c3:37:13:0b:3b:56:92:f6:be:
                    88:a3:72:a9:d2:ae:22:f5:b3:ed:3e:7a:e2:45:f9:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B1:7D:E2:DC:2A:42:63:9D:94:9B:02:22:97:AA:92:B8:4C:86:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70ef0787-2a6a-3373-8903-39638662e0c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:46:ea:c0:d4:9a:b9:c9:9f:51:0b:d5:e7:d2:0c:26:63:0c:
         df:db:6e:15:97:e8:dd:12:e9:c7:1a:1b:af:f9:83:17:ae:b1:
         58:f8:8f:ae:03:aa:49:39:ed:f5:c8:b4:2e:46:f5:28:92:9b:
         bc:e6:c4:5f:b0:5c:f1:81:7e:a1:74:08:e7:54:7a:3b:17:78:
         33:46:43:77:73:eb:47:28:50:0c:66:85:84:89:9c:37:78:36:
         72:ba:8c:9f:d6:c1:ce:13:47:bf:6b:a0:1d:59:49:49:4f:cb:
         1a:48:5f:6b:f0:84:92:13:0c:89:8e:db:a3:b7:59:4c:19:92:
         f2:d1:89:12:75:64:99:af:9f:92:6b:01:02:9f:4b:cc:f0:38:
         90:69:4d:4e:df:47:20:fb:d2:bd:ce:96:34:a9:12:31:8c:ea:
         3b:f1:45:6c:68:2e:42:8f:36:df:2f:c1:c7:76:24:03:a6:51:
         b0:30:35:e5:71:da:a4:97:59:f0:58:ce:07:3c:80:62:f5:53:
         23:ca:cc:8c:6f:fa:e0:3c:7a:ee:00:8e:68:9a:49:1a:67:d4:
         ed:0c:0c:84:c9:21:21:73:11:62:cb:53:d9:97:ba:80:b9:28:
         af:f6:b3:fb:81:54:86:34:34:97:03:92:89:9f:12:b6:9a:31:
         03:0a:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:35 2025 by rpki-client