Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a59ba2-fb1b-3324-bf4a-93477a7b9f97.roa
File:                     00a59ba2-fb1b-3324-bf4a-93477a7b9f97.roa (raw, json)
Hash identifier:          HfBt0rhfd/GYcoi3h2SSvOqiLvE2vUxNqpTqVZ+630g=
Subject key identifier:   4B:E6:00:D5:60:37:E3:4F:40:B2:4F:7E:3B:B9:90:D3:E5:A9:86:87
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285848897B22970CD1ACCF88A39F00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a59ba2-fb1b-3324-bf4a-93477a7b9f97.roa
Signing time:             Tue 14 Jan 2025 02:00:39 +0000
ROA not before:           Tue 14 Jan 2025 02:00:39 +0000
ROA not after:            Mon 14 Apr 2025 01:00:39 +0000
asID:                     40264
IP address blocks:        23.26.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:7b:22:97:0c:d1:ac:cf:88:a3:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan 14 02:00:39 2025 GMT
            Not After : Apr 14 01:00:39 2025 GMT
        Subject: CN=da1f65f1-6169-4b9c-a8cb-d9851102b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e0:46:12:cd:40:69:37:e7:bb:1d:58:27:d6:
                    b6:b8:7e:5d:29:0f:c2:9a:b1:4c:a4:6f:32:87:5e:
                    82:aa:68:6f:9c:86:0c:7d:d5:98:e1:a5:73:b8:5f:
                    f4:0f:60:14:6c:74:2a:d4:ca:ae:f2:2d:9c:d7:7d:
                    9b:03:c3:11:fa:a3:93:73:87:05:43:34:6b:de:33:
                    5e:0c:1e:ad:75:d2:75:68:c3:8d:7c:a3:c4:55:b7:
                    18:00:e8:3c:ed:72:a8:e6:c9:ce:71:f8:81:84:42:
                    72:c5:d9:4a:89:24:66:a1:aa:3e:06:d7:22:cc:39:
                    d2:9d:f1:4e:93:db:c4:e2:1e:0c:db:f1:73:0d:49:
                    e3:19:af:01:a0:e3:d8:4d:1b:1e:db:c1:16:b3:c3:
                    7c:a5:b9:df:b2:0e:3b:38:22:76:ca:95:79:6e:5b:
                    11:a4:2b:d1:42:d7:a5:85:24:e3:63:b1:a7:51:27:
                    dc:7a:cc:02:cd:22:58:21:56:56:24:de:f2:27:ff:
                    08:1f:4f:26:9d:61:80:13:9e:83:b1:79:cb:ea:00:
                    38:7b:9d:03:31:bd:5b:60:74:9e:0e:e4:44:c3:7e:
                    54:70:1b:fc:21:c9:e0:3e:d8:cd:93:31:2c:9d:fe:
                    61:7e:f5:fe:23:b4:5d:3e:1f:68:69:63:e8:8f:72:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:00:D5:60:37:E3:4F:40:B2:4F:7E:3B:B9:90:D3:E5:A9:86:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/00a59ba2-fb1b-3324-bf4a-93477a7b9f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:76:85:8e:a9:84:97:ca:41:ab:65:3b:f0:a9:f8:ae:75:
         40:eb:ed:b8:e6:cc:e3:c5:d4:e5:08:4b:a5:13:eb:18:b0:26:
         60:0b:fa:33:3d:3d:3b:78:2b:04:2f:8b:05:0b:54:ba:85:b5:
         b9:87:7d:c9:ba:b1:e1:db:89:d3:87:6d:94:f3:8f:2b:4a:c9:
         fa:78:b5:18:f1:c4:c1:ea:2f:63:95:ea:91:a6:10:7a:50:fc:
         82:02:f8:b7:95:b4:64:61:38:51:75:ed:b1:72:2b:db:87:34:
         5b:45:69:a8:8d:ba:6c:a7:09:7e:68:32:b4:ce:d5:0f:aa:8a:
         bc:a6:60:cc:c9:5f:f7:ef:5c:ff:66:63:4d:bf:44:25:f6:09:
         f1:3c:b1:79:72:bc:b1:6c:07:3a:ca:cc:79:97:d1:1d:f7:e3:
         66:11:b4:07:15:df:b3:8e:ce:7a:c0:e9:12:4b:db:73:e7:07:
         c0:2c:b8:84:06:ff:93:0b:76:9d:a9:ee:4e:6e:4d:82:3c:21:
         c1:3f:9e:7b:64:5e:c5:8a:12:0b:4c:e0:1c:5f:e1:e0:74:eb:
         3f:71:69:63:73:db:f9:e5:52:94:64:25:8f:46:3f:4a:df:fd:
         0a:40:b2:11:4e:5d:31:fa:16:51:1f:e4:6d:30:87:8c:58:c0:
         7c:50:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:11:01 2025 by rpki-client