Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa
File:                     0d02db7d-7b00-39dd-80c9-0a52725245ae.roa (raw, json)
Hash identifier:          QKR4c2mAENKivxZfGSPjZzbmjDPEWIzUNkGJbIIyVKg=
Subject key identifier:   87:7C:A6:9A:6A:DC:D7:2C:22:24:61:9B:8B:CB:A7:84:A3:F5:A6:14
Certificate issuer:       /CN=2085ad50-174f-4646-80aa-6de9c61a11a4
Certificate serial:       010D0C9F4328584812D5331EF0546CB68E740F60
Authority key identifier: 37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     208188
IP address blocks:        23.142.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:33:1e:f0:54:6c:b6:8e:74:0f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085ad50-174f-4646-80aa-6de9c61a11a4
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=83d2ad87-f9d0-46cc-88fe-1bbab0b17220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:6c:29:b0:1a:f8:71:f4:73:62:df:d4:2e:
                    97:21:8c:75:6e:2f:0a:78:ac:bd:eb:ae:d6:48:52:
                    7f:9f:e1:8f:fc:49:88:2f:58:ee:7f:85:ba:cc:39:
                    a1:ad:46:44:e4:43:b8:1c:ab:b7:27:44:ab:85:6b:
                    c6:6b:7b:73:40:43:ba:39:3b:e1:73:6d:db:07:67:
                    b0:c0:ab:ed:c6:0f:c5:0b:3c:ef:6a:49:a6:0d:21:
                    6e:a3:96:b6:17:1f:77:84:f6:0f:e2:78:2c:c2:88:
                    56:fb:8a:26:44:aa:0c:45:cc:d0:e7:75:01:43:b0:
                    74:00:39:18:21:e0:b9:e8:af:d2:1f:80:0a:fb:34:
                    3b:11:4b:32:69:6c:a1:a9:25:09:70:10:00:06:7f:
                    11:46:e5:11:91:2b:67:32:c7:c8:d8:af:05:5d:e4:
                    56:75:24:71:78:bd:42:ab:88:02:e0:2d:e7:e2:29:
                    15:52:70:83:19:ae:45:bd:40:b1:73:ec:22:13:05:
                    c1:61:d3:1f:fa:63:f9:f3:ff:e5:29:08:4c:78:72:
                    9b:cf:07:df:8e:fc:dd:b5:59:03:fa:68:3c:ed:b7:
                    26:86:75:65:65:70:02:24:dc:90:d9:e5:52:bf:4d:
                    d9:16:1a:fa:a8:2c:d9:87:25:9d:ca:48:6a:40:00:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:A6:9A:6A:DC:D7:2C:22:24:61:9B:8B:CB:A7:84:A3:F5:A6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/0d02db7d-7b00-39dd-80c9-0a52725245ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4/2085ad50-174f-4646-80aa-6de9c61a11a4.crl

            X509v3 Authority Key Identifier:
                keyid:37:86:19:60:3B:61:D3:A2:F3:43:DA:42:0F:B3:32:2E:8E:29:2F:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2085ad50-174f-4646-80aa-6de9c61a11a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:87:a1:41:7a:9e:de:24:fa:b1:5a:60:a7:d1:ae:4d:47:74:
         b0:7e:e8:f8:08:b5:f2:af:64:22:f6:e8:46:91:fa:1a:fa:ce:
         68:6b:34:0a:12:86:a3:59:43:24:ef:0d:19:68:a3:8f:48:d6:
         fc:f3:0f:2b:9c:f9:e3:aa:3c:ac:2d:1d:c5:1f:e3:6b:68:91:
         ed:b3:e7:b9:13:7d:84:ab:aa:1c:77:7e:53:4d:79:dc:55:21:
         cf:47:32:a6:2f:6a:55:b8:2d:52:5d:61:c9:23:65:82:a5:23:
         30:d9:fe:fb:d0:04:29:79:82:8f:b8:a6:9b:46:77:3d:5b:85:
         10:c7:74:89:67:9a:4c:bb:2f:bd:fd:f4:be:65:d7:64:da:14:
         2d:7e:aa:62:10:16:31:04:6e:56:ba:42:a2:01:cb:fd:b6:b6:
         95:22:3f:d9:fe:00:00:f9:b3:48:32:fd:0c:e5:c8:95:88:26:
         03:95:56:e3:02:b6:3d:21:58:18:34:88:51:ab:a7:09:96:3f:
         b4:7c:a1:24:83:fd:8b:e7:4c:10:26:30:ff:63:2c:f7:5b:41:
         38:a8:32:b9:50:7e:c3:09:96:7f:c8:49:5f:cc:9c:33:d2:d0:
         64:8a:0f:60:94:01:71:92:11:2e:3f:9b:2b:30:d9:74:e3:82:
         5c:b0:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:29 2025 by rpki-client