Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6e0e11e-c568-3e96-81d4-7b5528cb0724.roa
File:                     c6e0e11e-c568-3e96-81d4-7b5528cb0724.roa (raw, json)
Hash identifier:          OWgQjyK3Fx4xbTYcIGDf2vxgzG4D5Km2cpfqNh3JfPU=
Subject key identifier:   EF:69:E4:B8:FD:B5:CE:1B:77:B0:9E:42:91:FB:23:6A:88:AA:37:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848B8F0D7FBD6B5F299526CF480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6e0e11e-c568-3e96-81d4-7b5528cb0724.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.206.234.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:d7:fb:d6:b5:f2:99:52:6c:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=42b5705a-3e5f-48c2-94e1-66fb52bedfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:ae:7f:12:92:b2:2a:dd:92:c8:f3:ca:ce:
                    5f:a7:19:6a:41:d3:da:09:92:0d:6c:b5:4e:f5:af:
                    ad:7f:f3:6f:bb:f7:ec:86:0b:47:5e:31:de:ee:db:
                    e9:48:1e:e3:b7:f4:2c:d1:20:71:eb:cc:8a:dd:a5:
                    82:2c:5c:77:19:b8:20:c5:ba:8a:b4:88:51:79:42:
                    cf:0d:e7:aa:36:e1:97:22:bd:a9:ce:93:2b:73:4e:
                    a6:48:de:98:4e:37:5e:4e:46:70:de:db:22:1c:9f:
                    ca:21:e6:c7:9c:47:06:90:75:7e:e1:e0:eb:99:a6:
                    b9:45:53:5e:94:79:7e:0a:b5:20:fc:82:f8:2b:fe:
                    8d:40:24:ea:53:6a:1f:ee:06:73:97:96:08:54:2e:
                    6e:b2:45:44:05:ad:fc:cd:5b:f1:26:73:11:a1:14:
                    c5:15:d6:0a:a8:02:d0:a1:09:36:56:50:39:b1:75:
                    d3:23:2c:96:ec:94:3e:a4:b9:98:c9:4d:36:06:20:
                    62:a8:dc:ee:15:ac:51:cb:35:65:b5:3e:cc:5f:59:
                    71:dc:05:fb:7d:d8:cd:4d:ba:93:e7:e7:eb:14:c3:
                    7c:dc:87:d2:66:99:cf:b0:b2:7a:57:37:dc:c0:6e:
                    5d:fe:95:24:7e:44:15:83:fb:c8:cb:92:1e:0d:f6:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:69:E4:B8:FD:B5:CE:1B:77:B0:9E:42:91:FB:23:6A:88:AA:37:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c6e0e11e-c568-3e96-81d4-7b5528cb0724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:df:98:59:99:fb:9a:e0:f4:f1:2c:13:51:58:47:91:6f:ab:
         6a:44:5e:10:02:62:5a:10:5b:6b:af:d1:5c:32:05:63:d1:1d:
         ac:9b:f1:bf:47:11:44:a4:c4:3d:50:b3:f8:bf:48:68:4f:2c:
         7f:56:59:1c:92:f7:64:b3:7e:dc:3a:2e:04:dd:57:fc:6a:a7:
         e3:17:40:4d:5c:69:b1:ea:42:96:2c:d7:e1:6a:27:f9:91:2f:
         c2:ff:d6:d2:46:9a:ae:44:4b:46:bd:18:30:03:e8:20:d3:c9:
         63:04:36:0d:44:75:22:d5:76:0e:b1:f6:66:19:1a:a9:fb:09:
         0e:4b:48:92:c9:51:6e:a2:16:14:63:ce:eb:86:53:a2:24:e3:
         7a:59:cb:89:6a:f6:bc:95:e3:95:62:e9:2f:71:1f:77:b3:9a:
         f9:2f:18:95:ec:36:f4:45:51:30:ae:7c:7e:8f:b1:d7:98:6d:
         94:7a:21:9b:8b:8c:ac:e8:80:f1:74:f8:05:4e:1b:f8:6c:86:
         82:31:6a:6b:25:22:f1:ac:19:01:1a:6a:41:21:e3:d0:19:7c:
         8b:d9:b8:bb:e5:f3:64:6e:14:87:97:f7:c1:67:9e:09:af:cf:
         80:21:39:15:c7:74:18:d2:ff:dc:9c:5d:7b:49:db:dd:cf:07:
         7e:52:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:56 2025 by rpki-client