Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8363e6-fed3-381c-8249-e27176382054.roa
File:                     dd8363e6-fed3-381c-8249-e27176382054.roa (raw, json)
Hash identifier:          5mbwGRm284QRRUVxpmBARcWxqXJlR+xIAv14tesrNv4=
Subject key identifier:   E3:B4:F8:C1:C2:91:5D:2D:04:42:4F:B1:0C:33:30:81:9D:3E:8E:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848C9B0E0BE3EEDDA936BB2ABE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8363e6-fed3-381c-8249-e27176382054.roa
Signing time:             Thu 06 Feb 2025 02:00:39 +0000
ROA not before:           Thu 06 Feb 2025 02:00:39 +0000
ROA not after:            Wed 07 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.218.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:b0:e0:be:3e:ed:da:93:6b:b2:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  6 02:00:39 2025 GMT
            Not After : May  7 01:00:39 2025 GMT
        Subject: CN=83abe5a4-50c6-4113-88f3-6fc24209a537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:a7:7f:3c:f3:d9:b2:f6:10:7d:77:16:49:
                    38:c0:af:71:f5:1e:e3:3c:0c:e9:50:d0:50:f8:ee:
                    61:82:8d:de:4a:7d:4e:c3:4d:f8:f9:3b:c7:06:03:
                    16:40:42:44:7d:6a:51:25:a0:6a:ab:b4:6a:38:6d:
                    68:41:5e:2c:08:5c:68:3a:3a:1d:a1:25:6c:69:da:
                    53:93:40:99:5f:53:6f:ca:c2:2a:36:11:4c:c2:4f:
                    27:1c:f8:9b:09:09:e8:ca:ab:03:5c:68:36:1d:68:
                    af:83:6b:40:62:cf:13:62:09:25:35:46:a4:80:12:
                    05:d9:92:12:e1:35:90:c2:78:ea:ee:93:88:cf:65:
                    99:9f:eb:6f:1d:23:0b:68:64:da:ca:ae:87:3e:35:
                    14:af:8a:e2:b8:7f:54:b9:65:af:ba:eb:7e:b8:c3:
                    f5:35:6e:23:91:47:69:85:71:b2:73:0f:cd:f4:10:
                    1c:20:99:a2:20:d9:0d:fa:0f:07:44:35:f1:0e:a6:
                    10:3a:78:de:e2:18:45:7e:60:5a:d9:0a:63:3a:3b:
                    4c:8b:f6:a2:19:6c:ea:68:7f:04:10:00:69:cd:5b:
                    eb:f6:75:39:ee:04:18:c9:2b:e4:dc:94:53:42:1d:
                    ab:a1:6f:ae:78:7e:0e:b4:55:71:0d:56:75:b1:7c:
                    bd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B4:F8:C1:C2:91:5D:2D:04:42:4F:B1:0C:33:30:81:9D:3E:8E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8363e6-fed3-381c-8249-e27176382054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:4b:ef:76:0b:1f:fa:12:39:cd:70:aa:26:d8:48:e4:e4:
         7c:f2:47:4f:45:d6:e2:15:e9:4b:7f:1e:f0:cc:2d:8b:f6:af:
         8f:cd:67:e0:e3:4f:c6:08:f8:c7:b3:be:ec:a6:11:b5:68:a4:
         22:0f:83:bd:41:6f:72:92:02:36:04:12:51:84:9d:70:33:8d:
         14:0b:ac:fa:c7:0c:25:04:de:ac:3b:ad:bd:7d:9a:93:27:44:
         b5:3e:c5:b7:39:e7:df:88:ea:18:3e:f8:55:88:9f:89:f7:a8:
         5d:4a:fc:84:e3:90:29:3e:35:25:73:15:1d:0e:fd:d6:f4:da:
         fb:08:82:a4:cf:89:2e:3e:03:ad:d8:e6:ad:02:04:7e:4e:3c:
         ca:bf:91:7c:d5:2b:39:1d:8f:34:ee:9e:3f:09:3f:b9:dd:b5:
         64:24:6b:54:1e:50:ba:59:10:87:28:de:01:ce:af:7d:e5:09:
         e1:69:fc:c4:8b:8c:20:18:97:24:c1:6c:1d:dc:09:f6:44:bc:
         19:80:bc:f9:00:b1:61:f4:17:8e:a6:e4:69:e0:36:5d:08:14:
         96:41:cd:01:8b:d3:9e:49:0f:8f:93:d9:0e:0c:cc:69:27:cc:
         db:27:e2:0e:21:ba:35:93:78:40:52:22:50:57:40:a7:02:bf:
         10:0e:69:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsOC+Pu3ak2uyq+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ODNhYmU1YTQtNTBjNi00MTEzLTg4ZjMtNmZjMjQyMDlhNTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE+nfzzz2bL2EH13Fkk4wK9x9R7jPAzpUNBQ
+O5hgo3eSn1Ow034+TvHBgMWQEJEfWpRJaBqq7RqOG1oQV4sCFxoOjodoSVsadpT
k0CZX1NvysIqNhFMwk8nHPibCQnoyqsDXGg2HWivg2tAYs8TYgklNUakgBIF2ZIS
4TWQwnjq7pOIz2WZn+tvHSMLaGTayq6HPjUUr4riuH9UuWWvuut+uMP1NW4jkUdp
hXGycw/N9BAcIJmiINkN+g8HRDXxDqYQOnje4hhFfmBa2QpjOjtMi/aiGWzqaH8E
EABpzVvr9nU57gQYySvk3JRTQh2roW+ueH4OtFVxDVZ1sXy9OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOO0+MHCkV0tBEJPsQwzMIGdPo4VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ4MzYzZTYtZmVkMy0z
ODFjLTgyNDktZTI3MTc2MzgyMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9raMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKgS+92Cx/6EjnNcKom2Ejk5HzyR09F1uIV6Ut/HvDMLYv2r4/NZ+Dj
T8YI+MezvuymEbVopCIPg71Bb3KSAjYEElGEnXAzjRQLrPrHDCUE3qw7rb19mpMn
RLU+xbc559+I6hg++FWIn4n3qF1K/ITjkCk+NSVzFR0O/db02vsIgqTPiS4+A63Y
5q0CBH5OPMq/kXzVKzkdjzTunj8JP7ndtWQka1QeULpZEIco3gHOr33lCeFp/MSL
jCAYlyTBbB3cCfZEvBmAvPkAsWH0F46m5GngNl0IFJZBzQGL055JD4+T2Q4MzGkn
zNsn4g4hujWTeEBSIlBXQKcCvxAOab0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:30 2025 by rpki-client