Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa
File:                     eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa (raw, json)
Hash identifier:          LS2OAwIsMldr7zi7/ykPuEE6PUf/6gJkgzAcm05LqcU=
Subject key identifier:   8C:D6:E7:8D:55:4C:CB:BD:F0:5A:C8:02:BC:3A:FB:78:B1:3F:C6:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848BBBB95785F5F7B57F7000540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        23.211.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:95:78:5f:5f:7b:57:f7:00:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=9212dcfe-d379-4cf3-8306-2d50e431b633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:4f:2f:17:14:de:32:36:37:7c:1d:76:eb:
                    7c:86:da:6f:3b:14:58:5b:55:15:97:27:55:5d:33:
                    f4:94:ba:db:17:96:e5:a2:ef:8b:c5:ce:b0:c6:53:
                    8d:10:59:5c:37:eb:d8:82:8b:51:09:34:f6:ec:31:
                    88:7a:a7:fe:fd:09:29:61:0a:bb:8d:4c:f9:ff:92:
                    a0:df:bb:ff:b2:ea:7e:65:17:14:20:3c:dd:07:29:
                    bc:e4:ca:cf:44:c0:05:17:e1:02:4f:05:e9:b5:8e:
                    f9:94:d4:f1:98:bc:fa:8d:da:70:c3:c1:4a:28:4f:
                    10:32:0d:9c:2f:56:01:a8:8c:56:92:69:fc:29:d1:
                    96:24:22:de:05:bd:70:37:90:e1:bf:3a:e6:4f:ab:
                    e9:36:42:aa:bb:7c:dd:95:ae:91:30:58:9e:a9:cf:
                    a9:8b:3d:da:5c:7a:0d:b9:7e:cf:c7:75:ba:71:e8:
                    08:67:bc:de:a8:1e:33:1e:8d:ab:db:21:0a:88:b2:
                    13:7b:df:fd:0e:65:ab:ae:c6:bb:2c:33:9a:cd:d3:
                    e5:6e:71:46:05:43:4a:34:7b:3f:3b:f6:83:f9:34:
                    3c:e3:04:32:9e:00:f8:64:fc:b9:8c:d5:6b:db:30:
                    35:24:b3:b2:4c:af:78:29:82:a8:d1:11:48:70:d9:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:E7:8D:55:4C:CB:BD:F0:5A:C8:02:BC:3A:FB:78:B1:3F:C6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff13c5d-c2f9-347f-92f6-8fd33a98f7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:94:b1:55:33:c6:57:c5:51:c0:ef:7b:1c:58:63:1d:54:
         ca:71:3b:30:55:78:f7:9c:6d:bd:b7:00:c8:34:72:b8:1b:75:
         a9:2a:cd:27:82:71:69:ba:6a:a8:7b:7b:6c:9b:c0:4b:6d:c8:
         f7:93:dc:a1:ba:28:c2:9c:d8:23:12:f6:14:1f:7d:7e:14:ee:
         11:b3:ab:4d:26:8d:c3:94:56:58:c0:59:ca:6b:33:80:f2:25:
         dc:fc:22:0b:0b:ba:8e:31:84:dd:a5:c1:6c:db:28:5f:45:23:
         09:00:41:0f:18:9c:d7:f6:4a:6e:15:b3:44:7d:60:32:20:4b:
         df:6e:04:ed:55:d0:21:ad:b9:64:54:38:d2:ac:f9:0f:ed:74:
         4e:51:0f:17:3e:3e:fd:92:f1:73:da:6d:7c:f0:4e:93:90:9a:
         d2:6f:cc:26:61:b7:95:84:1f:5b:06:5d:8d:c8:82:4e:3a:e9:
         fa:33:c1:bf:cb:ec:72:3f:ec:58:33:79:4b:ca:2f:29:e2:54:
         f4:44:18:fe:ad:f5:25:ef:8e:a1:34:17:9d:99:27:e6:e0:3c:
         8e:9e:4a:74:c3:6d:3b:be:8d:98:ff:1e:a6:9e:68:e0:54:94:
         09:4b:67:a0:e9:20:13:22:b3:76:4b:57:14:b2:20:e8:27:3a:
         2f:4f:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:04 2025 by rpki-client