Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
File:                     b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa (raw, json)
Hash identifier:          g7E+7CtYd1jZt/OT6c/9VW0xo67kx+hbDgYWP9IJ560=
Subject key identifier:   CF:8D:7A:07:07:BE:35:3C:CF:44:1D:53:D8:1F:3D:EE:78:FC:71:0F
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848D7A6480B60B4FF01211D5F00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        23.239.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:48:0b:60:b4:ff:01:21:1d:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=a5be6724-ae2e-455a-849b-a35356e39447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:d6:b8:df:60:87:44:60:05:bc:63:c9:61:
                    7f:6e:c2:b6:86:8c:f7:6a:44:e3:9d:89:87:09:85:
                    24:89:b7:13:94:5f:81:33:2a:b4:1a:95:e0:0a:20:
                    c4:14:c3:87:fe:e1:c3:18:d0:0e:e0:e6:5f:fe:0f:
                    5a:77:f1:bf:d0:3f:c1:d0:0f:05:0c:20:86:ca:34:
                    81:60:34:39:d1:c0:47:05:19:12:ec:68:0a:53:10:
                    05:0e:89:47:0e:f3:92:53:2c:f6:50:2d:8f:23:8c:
                    df:5d:37:6d:dc:d1:fe:6e:73:d2:7e:b5:72:67:f5:
                    ec:fd:a4:19:69:09:f4:8d:9d:64:50:7f:17:aa:70:
                    86:fb:59:c0:d7:76:cb:db:9f:48:02:6f:0e:65:ae:
                    d0:07:ad:8b:76:8f:c0:c2:d9:e2:95:21:19:e9:3d:
                    64:4c:13:e9:26:a8:79:f3:74:6d:d8:86:69:e0:df:
                    bf:8c:7a:b8:61:bb:60:fe:e2:d3:ad:70:03:c5:ef:
                    b4:74:f7:b0:de:68:14:17:64:29:b3:1c:ee:fd:d7:
                    19:44:e8:3b:2e:5d:4a:30:31:30:dc:67:5c:4f:16:
                    9c:a5:5a:c5:a6:20:d7:b3:ad:a5:59:8c:18:f7:3c:
                    9f:6d:c5:a3:3c:99:33:cb:c6:21:61:1d:b8:ba:de:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8D:7A:07:07:BE:35:3C:CF:44:1D:53:D8:1F:3D:EE:78:FC:71:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/b57c5fe9-e985-38b2-9cc2-c4dfc07bcf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:ea:4a:79:f4:af:ab:1e:9b:8a:c4:fd:35:7b:4e:7f:54:
         77:ae:be:a7:1e:b6:b8:1c:d5:0e:fb:8a:d7:cc:1e:c1:23:99:
         ee:8e:62:e5:e4:2e:34:32:47:55:c1:78:08:c9:c7:41:4e:83:
         3a:94:76:66:9c:a3:d2:73:c2:a9:42:98:64:d4:f1:b5:e0:d7:
         ea:a6:b3:59:ef:01:90:b4:e6:93:dd:0f:e1:fd:81:ef:06:85:
         78:e2:0e:a9:4f:ca:4d:31:1c:72:18:ed:e9:4b:9d:5d:05:1a:
         68:4f:e0:9c:83:1a:bb:36:28:b5:1d:9b:af:84:8f:bc:87:66:
         20:63:2b:48:b4:9b:5f:36:0b:85:aa:99:39:e1:a2:7f:df:28:
         6a:8a:c7:c5:92:f0:a8:a3:df:1d:46:ea:df:ea:9f:4d:39:4f:
         10:52:75:ee:82:2d:a0:00:87:3c:56:30:69:7b:03:65:6f:24:
         e2:4c:8b:b3:55:91:b3:33:16:71:30:48:f5:f4:23:06:19:ca:
         d4:b2:e7:53:1f:1d:82:f0:b8:54:05:91:1c:ac:49:51:f4:ff:
         01:95:67:7c:18:a1:e9:61:16:c8:4c:31:e9:98:04:3f:fc:e2:
         9a:96:f9:36:c3:f9:db:48:cc:b6:a7:a1:34:0e:fd:f2:fa:0d:
         c0:e0:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----