Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa
File:                     db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (raw, json)
Hash identifier:          J0fvi9dLuzCjezXq8kU4JBGtNr+RlILJVhooT3pLcoc=
Subject key identifier:   69:6D:FD:98:56:FE:33:30:1D:C2:62:EF:52:31:F8:45:18:6C:BB:8F
Certificate issuer:       /CN=38ec4694-a70f-4329-b713-f4da59e49973
Certificate serial:       010D0C9F432858484515838060D00E297661F440
Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        23.247.184.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:83:80:60:d0:0e:29:76:61:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=43403dd0-3ea2-4daa-971c-4c96f5a6063a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:68:7d:ed:9d:fe:ed:c4:60:da:7b:60:a1:
                    27:51:d5:88:66:f3:65:5a:63:68:72:70:5e:86:ba:
                    47:30:74:15:91:13:db:f4:e0:32:7e:a3:98:1c:3a:
                    46:59:dc:ad:6a:d8:4a:8b:bf:48:e8:97:cf:1f:9d:
                    2d:49:40:40:b5:95:a3:1b:37:15:f8:15:13:05:59:
                    5b:1e:8a:02:dd:4a:21:6b:0d:3a:cb:82:e1:f4:5d:
                    d8:79:e5:23:4a:98:df:6a:a0:59:27:f1:c6:63:48:
                    19:3a:f3:d7:ef:7d:cb:8d:f5:08:97:97:ff:b4:aa:
                    23:7a:bd:d9:88:e3:38:99:b3:9d:b8:e3:30:49:ed:
                    e8:1a:cf:85:b9:50:db:7d:29:85:53:4b:cf:9e:9e:
                    a4:db:44:c0:27:0d:29:7f:f3:f2:ab:f6:f9:d6:28:
                    69:37:dd:a4:06:0b:04:10:99:f4:de:19:7d:47:cf:
                    8b:93:38:2b:00:45:06:80:bf:df:b3:fd:76:5d:06:
                    ad:2e:0e:56:42:9c:2a:81:ad:57:42:73:48:36:8e:
                    38:c0:40:3c:7f:21:59:ef:68:4b:f0:f4:d0:ea:04:
                    77:e0:b6:6e:0b:2a:db:92:9d:c6:e0:65:79:a3:cb:
                    50:2c:5b:fc:ba:a3:a0:2e:a6:6b:18:ef:57:82:1c:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:FD:98:56:FE:33:30:1D:C2:62:EF:52:31:F8:45:18:6C:BB:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl

            X509v3 Authority Key Identifier:
                keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:8b:ea:d8:54:82:fa:2d:4e:10:e7:3d:94:15:ba:d4:6c:
         11:4b:9c:27:6c:f1:b8:28:9c:c7:a6:f6:b5:91:84:38:5d:46:
         8d:c1:88:03:07:b8:8a:83:5d:4e:67:0a:1e:fb:2c:93:15:6c:
         92:50:2a:0c:d2:49:1e:e9:25:a5:a5:fe:4c:29:46:f4:09:b4:
         37:8b:2c:24:eb:38:c8:56:2e:3f:2e:d5:27:ce:60:6d:df:13:
         46:0b:0c:17:52:ce:7a:39:35:59:1a:c6:79:b6:ac:56:e6:13:
         73:92:8b:ca:ea:77:6e:46:33:45:d8:26:bc:06:10:25:59:81:
         a2:a7:41:60:e1:17:72:e0:ae:fe:a5:33:a1:b0:ae:a1:83:aa:
         f3:5e:e3:3d:10:e0:dd:ee:a8:26:40:0a:41:80:ef:74:11:b6:
         e2:25:a6:f4:1e:6c:f2:2f:f8:be:1a:85:ec:ac:f5:af:70:7f:
         74:f8:c6:bb:fd:a4:62:78:04:6e:16:9f:a6:e0:d9:0e:ac:d0:
         3b:41:6f:50:4a:37:a8:65:91:b9:f9:98:9a:1a:fe:ed:04:aa:
         f7:40:6d:53:68:19:d1:25:bd:26:fd:d9:12:57:76:e1:8d:13:
         80:36:fc:f0:7e:da:c3:78:ad:88:05:87:31:da:cb:01:b3:27:
         b6:02:a4:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYOAYNAOKXZh9EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5
OTczMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
NDM0MDNkZDAtM2VhMi00ZGFhLTk3MWMtNGM5NmY1YTYwNjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjitofe2d/u3EYNp7YKEnUdWIZvNlWmNocnBe
hrpHMHQVkRPb9OAyfqOYHDpGWdytathKi79I6JfPH50tSUBAtZWjGzcV+BUTBVlb
HooC3Uohaw06y4Lh9F3YeeUjSpjfaqBZJ/HGY0gZOvPX733LjfUIl5f/tKojer3Z
iOM4mbOduOMwSe3oGs+FuVDbfSmFU0vPnp6k20TAJw0pf/Pyq/b51ihpN92kBgsE
EJn03hl9R8+LkzgrAEUGgL/fs/12XQatLg5WQpwqga1XQnNINo44wEA8fyFZ72hL
8PTQ6gR34LZuCyrbkp3G4GV5o8tQLFv8uqOgLqZrGO9Xghy4EQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlt/ZhW/jMwHcJi71Ix+EUYbLuPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj
NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvZGI2OGVmODYtOTQ3NS0z
Y2IwLWI1NGUtZGU2N2M1MWExZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3
MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0
OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh
NTllNDk5NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF/e4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5Xi+rYVIL6LU4Q5z2UFbrUbBFLnCds8bgonMem9rWRhDhdRo3BiAMH
uIqDXU5nCh77LJMVbJJQKgzSSR7pJaWl/kwpRvQJtDeLLCTrOMhWLj8u1SfOYG3f
E0YLDBdSzno5NVkaxnm2rFbmE3OSi8rqd25GM0XYJrwGECVZgaKnQWDhF3Lgrv6l
M6GwrqGDqvNe4z0Q4N3uqCZACkGA73QRtuIlpvQebPIv+L4aheys9a9wf3T4xrv9
pGJ4BG4Wn6bg2Q6s0DtBb1BKN6hlkbn5mJoa/u0EqvdAbVNoGdElvSb92RJXduGN
E4A2/PB+2sN4rYgFhzHaywGzJ7YCpJ8=
-----END CERTIFICATE-----