Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa
File:                     f4cfa2db-592b-3f23-ba92-d879586a13bc.roa (raw, json)
Hash identifier:          kFqQupyeMSMqlr3GoRpOxQSPSSOfFj9qg9jdJ9fbXLE=
Subject key identifier:   5D:22:23:CA:16:A7:16:DD:D1:57:49:F7:A9:23:67:F2:EE:E9:B3:42
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858494E2EB947A80324F2F3517490
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.34.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b9:47:a8:03:24:f2:f3:51:74:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=fea3cd68-c516-46b5-8ab7-3030440e9852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:70:92:4b:90:92:d2:59:9d:d7:ef:e2:02:
                    05:f9:76:e6:3a:27:62:5d:6a:73:7e:b0:f9:26:2f:
                    10:64:73:5e:99:63:ba:92:fc:b1:86:b4:77:69:1e:
                    0e:30:98:88:f7:e7:2c:54:3d:8a:1c:1d:72:78:7f:
                    80:42:2b:06:6d:01:a9:6f:ee:a9:e7:68:c4:4d:de:
                    54:17:a5:a2:a4:3a:32:1f:13:56:79:07:ab:2f:c7:
                    5a:aa:ab:32:55:4e:04:55:6f:f1:f1:61:4a:ca:6e:
                    cd:c2:c9:83:4a:87:f8:b7:14:d4:14:e6:64:1d:57:
                    7f:a8:17:1c:76:c4:0a:29:ea:f4:a5:07:24:fa:61:
                    7d:74:c9:90:fa:fe:7c:91:f7:e1:6b:7e:10:1d:e2:
                    ec:8c:b5:b4:b5:df:1d:c6:ec:c3:73:f6:07:a7:ed:
                    f8:c6:49:70:4b:fa:d7:42:70:56:42:51:1c:95:22:
                    c5:32:7c:4c:37:94:43:0a:4a:2f:35:c8:c7:f4:b6:
                    23:ce:65:4c:d2:e6:df:06:f2:a8:52:93:a5:c0:46:
                    d6:11:ba:7b:46:25:f9:cb:4e:fd:73:e6:03:6b:50:
                    80:96:49:70:59:e3:b2:8e:86:2f:dd:29:85:d8:65:
                    6c:dd:99:d2:b5:33:21:9f:18:8f:2b:7a:42:4e:03:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:22:23:CA:16:A7:16:DD:D1:57:49:F7:A9:23:67:F2:EE:E9:B3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4cfa2db-592b-3f23-ba92-d879586a13bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4c:a6:d3:af:92:35:7d:7e:7a:fa:a9:fc:4c:d5:08:ef:60:
         bb:a9:3b:f1:c9:f9:97:43:99:e8:f8:ae:0c:e4:84:a4:ee:7b:
         4a:36:55:44:58:28:b1:ff:5c:d7:ac:f5:93:e1:bd:62:f8:6e:
         d6:9e:e0:81:b6:01:73:3e:f4:02:e6:a7:58:c4:46:f1:86:78:
         b2:d6:ac:f5:90:7a:c6:4c:40:0e:fb:56:ab:d3:e7:07:07:f4:
         57:c6:8c:85:b2:53:d8:e9:a2:68:10:95:5f:5f:9e:6f:12:61:
         9d:4a:c0:74:57:21:a3:41:f3:0f:ad:4e:ac:21:df:2b:37:22:
         38:f2:2d:a5:92:9d:a5:eb:8b:2f:2d:70:88:d0:7c:dd:70:35:
         39:61:57:cd:63:5a:a1:de:99:28:18:42:6f:d6:86:71:45:8c:
         a7:37:66:43:75:4b:3f:ef:8d:ab:bc:f0:c3:47:9d:ac:6d:48:
         b2:ed:ae:ec:35:ed:75:30:49:74:0c:bf:69:da:04:4a:d7:ef:
         42:b4:b6:28:62:f5:ef:79:54:da:be:8b:66:9e:1e:20:6d:bf:
         32:97:f6:1d:ae:81:12:29:56:4e:72:3f:60:70:aa:06:9b:f1:
         20:56:12:be:ec:5f:40:8b:d3:13:b7:99:ab:60:d8:8b:85:c3:
         8a:d7:53:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:20 2025 by rpki-client