Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8b24f82-1c13-3489-886a-1aa36ee59451.roa
File:                     c8b24f82-1c13-3489-886a-1aa36ee59451.roa (raw, json)
Hash identifier:          s3di+uqvQ8j5J9Cb76QVAx2EgperzjWsLIClx92ARfw=
Subject key identifier:   C9:4C:F4:DE:F7:58:CA:1D:BC:38:51:C6:C5:7F:77:0C:7D:98:43:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487A20982259B2BB716649C1A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8b24f82-1c13-3489-886a-1aa36ee59451.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.36.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:98:22:59:b2:bb:71:66:49:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=f48170bd-f4f0-4e8b-9b10-b9b0f41b03fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:8f:76:1b:ff:e8:c1:2a:b3:0c:2e:1c:c7:
                    c5:2c:14:9f:0a:e9:79:9c:df:1a:9a:68:58:32:26:
                    ff:60:64:46:37:88:ed:26:45:cd:fe:93:bc:5d:7d:
                    4e:7e:13:6a:f2:ae:9e:01:07:82:be:6e:ab:de:ce:
                    10:19:cc:34:45:0c:4e:5c:8a:ff:61:e9:aa:c8:25:
                    45:43:89:4c:56:c4:d3:a2:e0:b5:b0:00:63:7b:e9:
                    78:58:c7:2d:0f:a3:1f:a3:c0:92:ff:e2:7e:53:cd:
                    66:5c:ff:c0:d2:85:a1:19:58:e5:d4:f9:01:6b:24:
                    d0:18:2c:4d:16:7b:b1:2d:7e:74:ec:ae:01:f0:08:
                    bf:9e:8b:01:c6:01:30:4f:d5:93:4a:68:a4:98:c3:
                    58:6a:b9:25:54:13:a3:ea:b9:d2:55:d5:e5:67:3a:
                    71:53:83:70:1f:ad:de:fa:36:dc:1f:57:94:7b:a5:
                    14:24:68:ca:28:8d:2a:8c:d4:ee:57:06:60:32:ec:
                    1f:66:65:03:78:5d:e8:40:5b:47:7b:db:8f:b4:c2:
                    76:fb:96:da:da:49:7a:1a:df:7f:a8:c9:51:4d:5c:
                    0b:cf:1a:d6:df:25:20:1c:88:97:78:87:42:b1:20:
                    52:3b:33:57:c4:a5:71:53:59:40:92:3d:29:87:e4:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:F4:DE:F7:58:CA:1D:BC:38:51:C6:C5:7F:77:0C:7D:98:43:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8b24f82-1c13-3489-886a-1aa36ee59451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:52:6a:5f:40:52:19:4d:e3:d3:22:77:09:07:3a:94:c2:ac:
         07:09:d5:a3:dd:15:32:cd:f0:03:86:1c:09:cf:05:27:97:04:
         28:8b:e3:ca:1a:18:92:80:f2:b2:2e:b2:5f:af:33:a4:ff:65:
         b8:c5:f7:38:3f:c6:c3:e9:04:d9:17:a0:96:a6:e9:aa:c4:25:
         a9:0c:20:01:5b:35:b6:0b:ab:99:63:9d:3a:fb:a5:9a:5f:80:
         3b:12:c8:71:aa:28:96:b8:c4:4f:fd:cd:05:4d:d7:f5:09:ee:
         4f:ab:18:d1:4b:71:78:50:fd:5e:34:b9:a5:6b:35:11:8d:f4:
         3e:4b:40:3d:89:9e:17:68:9d:ef:f1:5f:48:14:dd:46:a6:e7:
         fa:fb:aa:08:24:56:90:d0:33:cd:55:44:5c:31:fb:b1:2d:ae:
         ac:ec:59:63:df:d4:37:b6:7a:5e:39:0a:23:2b:30:38:e8:b5:
         1b:b0:c2:12:5e:0c:37:0a:dc:65:33:30:c8:4b:a0:d6:5b:c1:
         2d:3e:7f:c8:f9:41:99:c3:c4:a3:47:dc:56:14:28:62:78:93:
         98:c2:b6:71:85:53:7b:cb:be:87:a5:d2:11:20:e8:2f:6e:8e:
         95:b7:9f:2e:e2:b9:2c:cb:2c:ef:1d:4a:94:94:cf:e5:8a:d8:
         54:7d:d8:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJgiWbK7cWZJwaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
ZjQ4MTcwYmQtZjRmMC00ZThiLTliMTAtYjliMGY0MWIwM2ZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM6Pdhv/6MEqswwuHMfFLBSfCul5nN8ammhY
Mib/YGRGN4jtJkXN/pO8XX1OfhNq8q6eAQeCvm6r3s4QGcw0RQxOXIr/YemqyCVF
Q4lMVsTTouC1sABje+l4WMctD6Mfo8CS/+J+U81mXP/A0oWhGVjl1PkBayTQGCxN
FnuxLX507K4B8Ai/nosBxgEwT9WTSmikmMNYarklVBOj6rnSVdXlZzpxU4NwH63e
+jbcH1eUe6UUJGjKKI0qjNTuVwZgMuwfZmUDeF3oQFtHe9uPtMJ2+5ba2kl6Gt9/
qMlRTVwLzxrW3yUgHIiXeIdCsSBSOzNXxKVxU1lAkj0ph+RqRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMlM9N73WModvDhRxsV/dwx9mENcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzhiMjRmODItMWMxMy0z
NDg5LTg4NmEtMWFhMzZlZTU5NDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyShMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIBSal9AUhlN49MidwkHOpTCrAcJ1aPdFTLN8AOGHAnPBSeXBCiL48oa
GJKA8rIusl+vM6T/ZbjF9zg/xsPpBNkXoJam6arEJakMIAFbNbYLq5ljnTr7pZpf
gDsSyHGqKJa4xE/9zQVN1/UJ7k+rGNFLcXhQ/V40uaVrNRGN9D5LQD2Jnhdone/x
X0gU3Uam5/r7qggkVpDQM81VRFwx+7EtrqzsWWPf1De2el45CiMrMDjotRuwwhJe
DDcK3GUzMMhLoNZbwS0+f8j5QZnDxKNH3FYUKGJ4k5jCtnGFU3vLvoel0hEg6C9u
jpW3ny7iuSzLLO8dSpSUz+WK2FR92HQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:48 2025 by rpki-client