Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa
File:                     7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa (raw, json)
Hash identifier:          QpM6LLdJEMaenHsK01YQgMYJUSZJlP1VEcq9aNzmJ/k=
Subject key identifier:   5D:5F:C6:6C:36:4E:21:9C:A2:23:16:D4:78:8E:5B:A5:F7:87:A2:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848D211446E598EA0FCAE8A1700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.38.168.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:44:6e:59:8e:a0:fc:ae:8a:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=73fa0d87-f5d4-45d3-a043-d1eda38f783a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:b5:fb:67:8b:0a:ec:6d:42:6c:2d:4a:90:
                    2e:52:72:7e:cb:86:f0:6e:ce:6c:9c:5f:aa:f2:b1:
                    cf:fd:cb:82:84:ed:62:dc:79:b3:32:a4:14:f0:64:
                    60:1d:cf:3a:e3:46:ea:36:3b:92:99:e7:13:18:45:
                    68:91:50:9e:99:6d:5f:dc:fc:e2:98:4f:48:64:f5:
                    1a:76:38:77:5d:80:bd:c7:93:f2:e4:3a:9f:cf:e2:
                    88:48:0f:95:2e:19:57:49:ee:6e:f8:de:4f:cf:2d:
                    9c:75:4c:b0:28:f2:72:56:87:b3:c9:26:8c:3b:48:
                    19:14:4a:3d:93:09:bd:2d:af:9f:86:4f:22:1b:7a:
                    a5:36:a3:79:27:b6:c8:2a:f8:f5:1e:6e:8e:e9:fd:
                    c7:df:2e:cc:87:1a:fc:77:22:b2:78:99:fc:b4:a8:
                    19:27:e2:ea:a6:ff:55:9c:2d:d3:a5:1f:61:5f:da:
                    f7:c0:2b:03:c2:ab:d3:80:dd:e4:54:dc:7a:28:d4:
                    fb:75:a0:06:32:a1:72:fa:4d:88:b3:6d:91:4c:8b:
                    84:05:57:95:74:ab:a6:4e:31:2c:63:fe:da:37:34:
                    78:5b:93:e1:fa:2c:79:f6:c1:c5:b5:08:e0:5a:98:
                    23:f9:fd:71:d5:43:c1:70:92:1c:02:92:99:8d:22:
                    94:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5F:C6:6C:36:4E:21:9C:A2:23:16:D4:78:8E:5B:A5:F7:87:A2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ebc6bdc-2e57-3471-a2c3-7f711815fe93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:36:f9:db:c7:18:b0:f7:bf:7e:03:98:92:29:26:55:ee:
         cf:c0:d8:b1:9a:3e:1c:e1:ca:d7:93:ac:34:5f:c6:ab:bb:70:
         4d:9d:fc:bc:73:79:5d:27:d8:61:a6:05:19:65:fe:35:75:37:
         54:81:b1:28:ae:8f:78:e7:86:16:23:3e:fa:b3:04:34:fa:e6:
         73:ff:ff:de:cc:09:c9:f1:78:05:d6:d3:4e:f5:5b:9a:7d:9f:
         36:86:45:c5:59:1d:74:7f:9b:3f:45:ee:63:da:96:b6:41:e4:
         04:e5:85:d6:b4:aa:80:9f:3a:ea:32:f9:75:46:3d:b9:ec:a4:
         8e:16:c1:39:e0:8e:19:bf:71:bb:4b:d4:77:f2:32:73:b2:ec:
         e1:c1:99:e0:21:b8:b3:d6:b5:46:7c:bd:fd:9c:68:67:1d:2b:
         54:cc:8e:19:33:c9:90:cb:8e:7b:77:d5:46:01:4e:54:a2:13:
         67:85:ad:52:8b:0f:ee:9d:58:fb:bc:da:87:c9:3b:77:4b:85:
         73:60:a5:7d:69:68:2e:cd:b3:2d:98:94:88:0e:6c:92:b0:d6:
         2b:1e:a9:45:d2:cd:f8:24:ec:6b:9c:a3:f3:2c:4d:e1:f8:b6:
         ba:8b:c3:c1:66:4a:79:88:d0:95:ec:53:bc:a1:c4:ca:09:39:
         44:61:63:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEURuWY6g/K6KFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NzNmYTBkODctZjVkNC00NWQzLWEwNDMtZDFlZGEzOGY3ODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9K1+2eLCuxtQmwtSpAuUnJ+y4bwbs5snF+q
8rHP/cuChO1i3HmzMqQU8GRgHc8640bqNjuSmecTGEVokVCemW1f3PzimE9IZPUa
djh3XYC9x5Py5Dqfz+KISA+VLhlXSe5u+N5Pzy2cdUywKPJyVoezySaMO0gZFEo9
kwm9La+fhk8iG3qlNqN5J7bIKvj1Hm6O6f3H3y7Mhxr8dyKyeJn8tKgZJ+Lqpv9V
nC3TpR9hX9r3wCsDwqvTgN3kVNx6KNT7daAGMqFy+k2Is22RTIuEBVeVdKumTjEs
Y/7aNzR4W5Ph+ix59sHFtQjgWpgj+f1x1UPBcJIcApKZjSKU5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF1fxmw2TiGcoiMW1HiOW6X3h6KFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ViYzZiZGMtMmU1Ny0z
NDcxLWEyYzMtN2Y3MTE4MTVmZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAoQNvnbxxiw979+A5iSKSZV7s/A2LGaPhzhyteTrDRfxqu7cE2d/Lxz
eV0n2GGmBRll/jV1N1SBsSiuj3jnhhYjPvqzBDT65nP//97MCcnxeAXW0071W5p9
nzaGRcVZHXR/mz9F7mPalrZB5ATlhda0qoCfOuoy+XVGPbnspI4WwTngjhm/cbtL
1HfyMnOy7OHBmeAhuLPWtUZ8vf2caGcdK1TMjhkzyZDLjnt31UYBTlSiE2eFrVKL
D+6dWPu82ofJO3dLhXNgpX1paC7Nsy2YlIgObJKw1iseqUXSzfgk7Guco/MsTeH4
trqLw8FmSnmI0JXsU7yhxMoJOURhYwA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:17 2025 by rpki-client