Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa
File:                     f1533c87-7d67-3280-8df4-89a705447f84.roa (raw, json)
Hash identifier:          gZ8GoEy3hIRXwwk8p5wL8r+9vqQP0xZU2++YR862EEs=
Subject key identifier:   4E:57:64:B5:E2:A0:C9:3C:4E:7E:16:91:F9:93:E0:1A:A9:30:61:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849244E7333B5EDAE9893B7FF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.5.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:73:33:b5:ed:ae:98:93:b7:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=8c15617a-2163-4715-b733-b32c4eb3a054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:fd:2a:89:eb:e6:4a:fb:bb:ad:94:16:24:
                    bb:09:a1:a3:ea:cd:49:42:a1:bd:be:28:a4:d9:ec:
                    70:56:ca:63:70:bd:52:25:ed:cd:f3:e2:f6:6c:34:
                    98:ae:6d:bc:59:2f:c0:ea:78:db:ac:56:ce:80:f7:
                    d2:2e:69:fb:a8:28:49:18:7a:4b:9d:4a:4f:b0:b9:
                    ba:57:d8:40:ce:01:ad:19:ca:70:1e:7a:c1:bf:32:
                    43:27:10:f0:af:38:13:a1:df:46:13:73:f8:4b:d7:
                    49:69:92:5d:6d:d7:e3:cb:00:2f:63:fb:45:89:ee:
                    cc:20:50:f1:b5:77:c3:5f:4f:0f:d2:3c:c9:e8:ab:
                    de:8a:a3:b2:05:03:c9:0c:9e:0b:85:ec:bc:ab:5f:
                    9c:db:0d:68:45:c3:9b:2c:2f:10:c0:79:e8:ce:6d:
                    fd:85:31:8a:b8:95:f2:b8:46:98:22:65:f5:62:00:
                    3f:f4:35:e3:7d:2f:ed:55:1c:a1:0e:6f:72:83:cc:
                    99:68:d7:56:b2:cf:49:33:25:35:cd:a4:06:dd:b2:
                    32:ea:d9:ef:fd:d0:29:7e:c0:96:f7:17:2f:b4:20:
                    45:93:77:bc:d1:47:9c:2e:1c:fe:b5:3c:e0:a9:85:
                    84:83:8a:3a:dc:cc:30:ff:e4:23:29:eb:e5:ea:da:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:57:64:B5:E2:A0:C9:3C:4E:7E:16:91:F9:93:E0:1A:A9:30:61:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.5.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:05:ab:13:ee:e3:54:26:b1:6c:2d:33:d6:a0:4f:bc:65:
         09:09:0f:65:0d:92:cf:36:b7:d6:55:59:6e:68:44:6a:44:1d:
         c0:28:13:ca:38:ad:cd:0f:19:79:f5:d4:ba:f0:6e:a0:8d:53:
         cd:e6:a7:ab:e9:97:96:fa:a1:fe:95:b1:9a:c5:e5:31:c5:c5:
         cc:ac:2f:60:88:98:55:4b:c3:0e:6c:90:64:c0:41:95:de:88:
         2c:5f:f8:ad:a3:bd:54:1e:f0:e3:93:7a:be:bc:c3:a5:3e:14:
         ef:38:b1:be:06:b0:ef:16:0f:76:6a:e4:12:c2:50:f3:0e:85:
         5f:17:8d:bc:60:31:86:b1:62:61:e4:72:de:fe:98:d2:69:e4:
         89:3c:37:97:d2:21:10:90:c5:2b:fd:87:50:47:11:bc:c0:5d:
         37:4b:2f:c5:a0:f5:ff:b2:03:98:1f:d9:31:7e:0b:4d:6d:bd:
         0a:76:8b:9a:bf:ce:ec:67:7b:41:2a:ea:5e:e9:9c:f4:74:61:
         eb:61:8e:9c:85:35:dc:4a:14:77:82:19:6f:db:7c:b5:53:d7:
         05:ef:a3:33:3e:b6:15:6a:69:e4:13:54:7d:78:fe:52:f7:f4:
         a0:8f:84:6b:c1:57:c7:b6:18:bc:68:d5:93:47:c4:59:b9:63:
         43:68:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:52 2025 by rpki-client