Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac74d6e-9fea-39b3-b83f-74290baa63bc.roa
File:                     cac74d6e-9fea-39b3-b83f-74290baa63bc.roa (raw, json)
Hash identifier:          eNy5hmWoDahOTleN18D2UspN0bwtUO5v6EUwzIUowrQ=
Subject key identifier:   88:51:14:B8:7A:79:1C:EE:D7:40:E4:6C:D4:90:49:A2:69:B3:F2:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584898D61572F5B89B5E145B4D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac74d6e-9fea-39b3-b83f-74290baa63bc.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.192.190.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:15:72:f5:b8:9b:5e:14:5b:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=b9cf72fb-77c4-4800-9477-3bca405dd512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:a0:cc:35:d3:7a:32:d9:3e:10:ec:53:c4:
                    a7:f2:c9:67:86:45:5e:e8:88:33:4b:12:27:77:2c:
                    5e:b9:74:60:fc:e3:8a:25:7b:38:bb:62:81:19:19:
                    69:c9:66:00:44:f0:37:dc:ae:83:2f:d3:5d:d2:46:
                    1e:c1:19:41:c7:42:5d:91:41:49:1d:93:aa:58:1c:
                    ad:c5:ee:85:5f:87:ab:6b:e6:27:ce:9e:75:ca:33:
                    ba:64:cb:77:3f:bc:a4:ff:e5:d5:a6:33:b1:62:6c:
                    3b:6a:e3:24:6b:ca:fc:3a:78:4d:fa:1e:9b:97:d9:
                    97:c8:32:9e:0e:7c:7f:27:6f:ec:5d:50:65:90:24:
                    c3:b4:05:d7:54:c3:6d:fe:29:b2:67:fb:f2:07:5c:
                    0f:63:b0:37:12:55:0d:ae:f0:b2:d9:b9:90:33:cf:
                    32:df:3e:8e:1c:0d:f1:4a:84:bb:3a:8d:eb:0b:5f:
                    bf:77:28:7a:84:ac:f2:35:22:58:2f:ad:73:88:e8:
                    ca:4f:f3:e1:19:84:bd:e5:04:36:91:eb:9e:19:bd:
                    6a:89:c0:c1:47:c0:fe:7b:60:ca:f4:41:5d:40:19:
                    97:f5:cc:8a:66:c2:86:b7:08:62:85:1a:1c:9e:2c:
                    53:4b:a3:ac:13:55:c4:c2:09:41:a8:b0:16:d4:b9:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:51:14:B8:7A:79:1C:EE:D7:40:E4:6C:D4:90:49:A2:69:B3:F2:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cac74d6e-9fea-39b3-b83f-74290baa63bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:aa:db:d8:e1:26:d1:3d:40:e2:4a:01:23:f5:2d:e3:ba:e6:
         b1:33:ac:bb:da:32:a3:30:15:e8:ad:b4:4e:21:e5:78:fc:9b:
         7a:83:96:07:19:1c:36:cd:15:ba:93:cc:e0:5f:3e:79:0c:8a:
         b1:5d:0d:78:84:1d:d8:e5:68:ad:29:48:ca:e4:2a:db:7c:03:
         58:b8:c4:d2:fb:bc:ef:20:06:dd:39:a4:ea:7f:66:5a:3e:5c:
         79:bc:74:a2:10:f2:7b:62:b7:df:ab:0d:93:bf:ab:c6:56:3e:
         32:e4:fb:e7:d7:e1:56:6f:c9:a8:aa:91:d7:bc:db:77:a4:94:
         d6:84:bd:32:b8:c0:35:3a:5d:0c:38:f9:d0:ab:75:f9:f0:66:
         6f:40:ec:85:e9:8e:d2:58:75:69:e2:3d:81:00:2b:8b:9c:af:
         df:39:1d:05:12:f8:67:1e:c6:ba:31:c8:60:bb:a5:c0:da:d3:
         02:08:a9:47:92:58:3f:9c:f9:f6:f5:82:bb:9f:09:a9:45:a1:
         ea:70:f6:ca:ef:97:f1:1d:3d:bd:c7:67:7e:f7:ef:73:a1:d0:
         29:bc:01:ba:b4:08:34:1f:8f:33:96:7e:eb:25:40:6c:c3:69:
         7a:59:4c:72:fe:ab:33:00:a0:86:96:86:d8:7f:b7:e7:39:9d:
         b5:60:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----