Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5a56b65-f834-34d7-bc6d-4ea2d4c04ef7.roa
File:                     e5a56b65-f834-34d7-bc6d-4ea2d4c04ef7.roa (raw, json)
Hash identifier:          1TQIo09kdvTmMOlmCD6AFCzZp+sznitL21s0/KOzd8I=
Subject key identifier:   D5:65:65:03:33:2A:70:81:27:36:EC:44:BD:AC:81:FA:5C:C4:12:53
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F432858487CEB3BA724D0C03725568D00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5a56b65-f834-34d7-bc6d-4ea2d4c04ef7.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     393249
IP address blocks:        207.23.94.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:3b:a7:24:d0:c0:37:25:56:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=7593df4a-3b2a-4e9a-a350-0672da099f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:c4:3f:b0:96:b0:f5:40:fe:3c:b5:81:76:
                    46:e1:6e:bf:19:44:44:22:fd:0b:0e:aa:1f:55:46:
                    87:a5:24:30:f6:7f:fa:5a:0d:ed:fd:ec:72:e8:87:
                    4b:6b:07:05:7a:a2:84:0c:05:06:c9:28:8e:6b:fc:
                    5d:72:c2:38:7c:1b:e6:4a:74:b7:20:5c:c9:a8:d4:
                    4a:49:5d:82:f2:cc:3b:8c:42:89:d9:22:f9:37:6d:
                    7c:f5:f7:22:70:25:dd:1b:9f:c9:6c:2e:74:2a:2a:
                    e6:3e:ca:bd:6a:78:4c:c3:6c:dc:8c:3d:93:8f:7d:
                    73:6b:cf:c4:8f:96:0b:6d:63:4b:df:c2:b9:a3:ec:
                    ad:f9:31:33:5c:54:fc:8b:5b:e3:37:7d:ef:c7:d3:
                    9f:4a:af:5a:58:2c:f3:a1:6d:22:86:ad:84:8e:42:
                    95:75:aa:8d:ed:be:5b:18:89:0c:9c:00:87:07:f9:
                    58:6a:74:04:ce:82:29:0e:29:68:35:4c:8c:4c:b7:
                    c9:6d:93:cb:49:5e:f3:25:3f:1a:8d:b8:2c:3c:5f:
                    e6:b2:0d:62:93:5a:1e:bc:c4:09:d4:81:0b:74:c8:
                    ae:cd:c0:2a:d4:34:58:9f:df:19:6f:75:d1:63:a2:
                    15:79:b7:68:72:23:80:b0:aa:8f:b8:48:57:03:1a:
                    38:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:65:03:33:2A:70:81:27:36:EC:44:BD:AC:81:FA:5C:C4:12:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e5a56b65-f834-34d7-bc6d-4ea2d4c04ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:ba:2b:29:1f:76:1c:c6:72:4e:5d:3e:04:46:17:7b:25:
         7b:7c:4b:4a:c3:ba:65:db:4c:72:28:0c:c4:c2:24:d9:10:c4:
         20:cd:3a:7c:7c:25:a9:33:fc:c4:ec:14:a2:df:a4:66:8e:f9:
         55:ef:5a:b3:71:2e:f2:bb:0c:3b:c1:80:84:2c:21:5f:19:31:
         13:8b:9a:01:51:d6:fb:98:1f:1a:42:2a:6f:20:2a:c0:50:1c:
         0d:11:8b:28:50:6a:fc:5b:f6:a4:14:50:32:f8:07:f0:95:8c:
         f3:ef:ea:88:cd:e3:52:a2:14:fd:c2:53:d7:e4:89:0b:84:eb:
         ed:b0:8d:05:e8:af:8e:e2:45:6a:25:e2:9c:26:07:a5:5e:6e:
         2d:8d:37:89:77:79:a8:32:a3:79:6f:7d:ae:a5:4b:68:46:27:
         b1:e3:83:2d:cf:c6:aa:24:e5:87:07:5e:b9:ef:2c:26:18:4f:
         fd:27:45:77:6c:2e:c8:5c:47:43:8f:de:13:6e:ed:09:1c:43:
         93:26:7b:a6:30:0e:39:00:23:f0:0b:87:b6:e2:2d:75:cc:e5:
         7a:b3:33:48:dc:9f:a8:58:27:48:32:a4:3e:35:e6:4d:09:09:
         29:01:bb:6b:75:b0:d7:1f:63:c0:ac:fc:e4:51:60:a8:d3:eb:
         07:95:5a:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zunJNDANyVWjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzU5M2RmNGEtM2IyYS00ZTlhLWEzNTAtMDY3MmRhMDk5ZjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc/EP7CWsPVA/jy1gXZG4W6/GUREIv0LDqof
VUaHpSQw9n/6Wg3t/exy6IdLawcFeqKEDAUGySiOa/xdcsI4fBvmSnS3IFzJqNRK
SV2C8sw7jEKJ2SL5N2189fcicCXdG5/JbC50KirmPsq9anhMw2zcjD2Tj31za8/E
j5YLbWNL38K5o+yt+TEzXFT8i1vjN33vx9OfSq9aWCzzoW0ihq2EjkKVdaqN7b5b
GIkMnACHB/lYanQEzoIpDiloNUyMTLfJbZPLSV7zJT8ajbgsPF/msg1ik1oevMQJ
1IELdMiuzcAq1DRYn98Zb3XRY6IVebdociOAsKqPuEhXAxo4KQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVlZQMzKnCBJzbsRL2sgfpcxBJTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZTVhNTZiNjUtZjgzNC0z
NGQ3LWJjNmQtNGVhMmQ0YzA0ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzxdeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMOuispH3YcxnJOXT4ERhd7JXt8S0rDumXbTHIoDMTCJNkQxCDNOnx8
Jakz/MTsFKLfpGaO+VXvWrNxLvK7DDvBgIQsIV8ZMROLmgFR1vuYHxpCKm8gKsBQ
HA0RiyhQavxb9qQUUDL4B/CVjPPv6ojN41KiFP3CU9fkiQuE6+2wjQXor47iRWol
4pwmB6Vebi2NN4l3eagyo3lvfa6lS2hGJ7Hjgy3Pxqok5YcHXrnvLCYYT/0nRXds
LshcR0OP3hNu7QkcQ5Mme6YwDjkAI/ALh7biLXXM5XqzM0jcn6hYJ0gypD415k0J
CSkBu2t1sNcfY8Cs/ORRYKjT6weVWjE=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:01:19 2025 by rpki-client