Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80e107d-fe0e-3239-86a4-c347f1cb0ccf.roa
File:                     c80e107d-fe0e-3239-86a4-c347f1cb0ccf.roa (raw, json)
Hash identifier:          4mqjIF6XpQrerDG+B3D2K8leGsqDuqLOaw9E1nSfe8k=
Subject key identifier:   21:6C:D1:FA:C6:66:E0:88:E7:8A:DD:C4:31:10:5E:C9:6E:9B:59:E8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584891DB331ED2A89980FF296CA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80e107d-fe0e-3239-86a4-c347f1cb0ccf.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     16625
IP address blocks:        23.196.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:33:1e:d2:a8:99:80:ff:29:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=d2ac2f8b-6450-43c3-b729-36b1c71dc487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:b2:14:00:ce:33:32:a1:25:d4:3c:7d:78:
                    9b:5d:ae:15:82:3c:cc:ce:b2:f5:ad:06:62:73:1a:
                    35:d9:01:5b:ca:bc:30:7e:9e:1e:6c:e0:ab:6f:70:
                    01:b9:b5:d5:45:c9:ac:c1:35:7f:5b:28:75:09:75:
                    31:8c:d9:ea:84:92:f6:57:a0:61:a0:5d:62:fa:20:
                    18:21:3a:e2:24:a7:84:ab:54:a2:90:3a:36:99:46:
                    cd:f2:f0:1c:56:dc:a7:f5:9d:d5:b0:01:3e:f0:8d:
                    c4:85:f8:3a:10:3d:e2:b2:de:52:bc:c6:ed:b1:61:
                    7b:3b:0d:c4:4f:37:2d:e6:85:34:08:ca:02:6b:a5:
                    58:d0:39:c3:98:04:32:9f:1e:b7:8c:73:37:c7:db:
                    16:5b:c9:f8:51:9b:5c:b0:a0:5c:22:db:f3:b2:e6:
                    95:10:ac:05:9b:46:72:e9:c1:21:2d:44:ac:4e:05:
                    9c:e9:9d:ba:83:6f:7d:9d:25:10:6c:a8:20:8f:ca:
                    24:16:e1:b8:41:99:56:c0:79:67:a4:39:66:47:a8:
                    11:c5:03:93:aa:9e:21:2b:eb:b8:4b:e2:af:1a:7f:
                    37:c4:ff:c3:08:c6:77:e3:13:90:b6:e5:50:3d:94:
                    80:70:2f:63:02:e4:82:36:1d:f7:0a:53:46:dc:81:
                    35:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6C:D1:FA:C6:66:E0:88:E7:8A:DD:C4:31:10:5E:C9:6E:9B:59:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c80e107d-fe0e-3239-86a4-c347f1cb0ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:42:b7:ce:6d:34:4e:43:19:5c:f8:7e:93:46:bd:15:07:
         d3:15:dd:89:9e:32:e5:54:5f:2f:b0:50:23:92:2a:5d:ae:4c:
         ce:a0:e8:0e:29:13:0b:4f:b2:bf:ba:ac:ec:02:e3:94:3b:2a:
         b3:19:ae:16:38:45:4a:1d:b4:56:86:4f:00:2d:da:3a:e6:7a:
         ec:53:cf:dd:51:60:b0:b5:e4:ac:41:f3:7c:30:ae:98:80:d7:
         88:ef:97:c3:17:83:2f:f6:40:d5:78:e2:b2:87:9c:04:60:77:
         fd:b6:60:b6:38:42:b1:9e:a3:5a:80:10:30:83:74:4a:ad:af:
         22:96:3b:1e:4e:4f:56:5d:28:86:10:b0:48:e8:f2:a2:ce:76:
         9d:45:fb:d5:b5:dc:19:6d:c8:a4:27:3f:d9:25:54:1e:8f:10:
         87:a3:05:40:03:d8:25:3f:6d:8f:9c:a2:ac:b6:4c:d5:aa:c9:
         56:e9:b0:e8:d1:5f:09:30:31:ae:d2:06:0d:09:17:82:03:70:
         e6:ab:0b:3f:97:f0:d0:e1:7d:fe:d8:f0:aa:7f:07:75:04:22:
         23:e1:f8:5e:4a:f1:95:f5:74:1e:d4:f7:8c:8d:8b:2a:ec:ff:
         65:bf:fa:60:ba:ca:88:66:d4:7a:0b:92:cf:38:ef:f7:32:57:
         17:a0:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:24 2025 by rpki-client