Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012bd02d-b7c3-3609-a096-30353881e428.roa
File:                     012bd02d-b7c3-3609-a096-30353881e428.roa (raw, json)
Hash identifier:          nO8gXuS1JNIBHf7NYJT2Lgg+ChuQUic9QtAXbrumxVM=
Subject key identifier:   DA:61:30:53:72:0F:A4:D1:C6:04:DA:A4:93:31:A7:41:13:8A:85:EB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858483F803F978716552FECCBD300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012bd02d-b7c3-3609-a096-30353881e428.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.76.96.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:3f:97:87:16:55:2f:ec:cb:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=fab5294b-fd41-4ce6-bf5f-f57c210b92fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:d1:9c:95:d1:a5:f8:04:7f:c8:57:54:48:
                    73:44:ff:b2:62:b1:74:0d:ac:5a:43:34:0b:6a:00:
                    07:6a:5f:c0:cd:6d:68:99:b2:9d:92:fb:25:6e:83:
                    2c:64:e2:e0:e7:38:ff:66:36:33:52:f9:62:8b:ef:
                    fe:b8:96:07:ff:b7:bf:c7:b9:5b:6a:d0:55:1d:9e:
                    67:7a:8d:85:83:03:7c:69:4f:f6:20:87:16:d5:e9:
                    20:89:ff:a4:8e:7c:b1:4f:6c:35:56:8b:39:f6:65:
                    43:d5:ee:6c:ec:e1:7d:0b:19:cd:08:4e:44:94:ec:
                    39:ba:de:a1:46:b3:09:78:3b:34:a4:b6:b1:6f:17:
                    be:1f:56:19:7c:ad:56:e8:94:3e:24:66:7b:34:7c:
                    61:e4:b6:d1:ed:46:2b:76:e1:13:f7:21:cb:3e:ee:
                    88:24:9e:e6:43:ed:88:85:ee:7c:ff:f4:10:cf:ca:
                    a3:f7:d7:fd:bd:01:a1:13:58:05:16:4b:3a:b0:d1:
                    40:56:d9:ee:38:b9:56:26:9a:2e:31:03:30:55:4a:
                    e7:a4:fd:ce:44:eb:3b:15:4b:cd:04:db:c8:43:aa:
                    f5:b5:73:f3:9a:aa:25:6c:ee:76:66:9a:9c:5b:b5:
                    1a:b1:ca:1f:6f:6b:fb:db:fd:22:90:2d:1b:8d:81:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:61:30:53:72:0F:A4:D1:C6:04:DA:A4:93:31:A7:41:13:8A:85:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/012bd02d-b7c3-3609-a096-30353881e428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.76.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:39:da:13:b7:5f:2b:a6:40:2d:f0:8f:0c:3f:3f:ad:de:
         c5:9c:d2:42:ac:79:b0:ac:70:cd:a5:61:fe:e3:1f:fe:7c:c3:
         8f:be:b6:97:4a:e2:0c:16:5e:ba:99:83:13:fb:8f:f8:8e:2e:
         78:25:f2:40:f4:15:dc:fd:f0:eb:f3:65:ec:e2:aa:ae:d2:56:
         78:42:d5:3d:ff:6f:60:6d:d9:d3:dc:86:bf:da:40:3a:03:72:
         e1:20:26:e4:f2:11:54:52:2b:e9:c2:3c:9a:2f:da:24:a2:ef:
         c2:c0:33:67:f1:40:a3:0d:b3:e9:91:7b:55:75:44:40:61:39:
         91:75:28:e3:af:dd:54:c1:db:46:82:83:1f:6b:c1:07:d8:f4:
         c6:f8:de:97:6a:5d:e0:5d:02:6a:9f:8e:2a:de:c8:a8:0e:f6:
         f0:ad:44:f8:ae:3a:b4:f2:f8:7e:61:05:b8:cf:5f:ba:b9:b7:
         b3:4c:c6:73:b6:b6:f3:06:dd:86:45:a9:ca:60:fa:36:74:12:
         b9:8f:07:2d:86:d9:89:f9:c7:b5:d3:42:02:a3:4a:67:35:42:
         3c:48:42:16:49:d0:e1:98:78:9e:0d:b3:2c:e6:38:5a:85:4c:
         46:93:49:6c:c0:97:7d:22:15:67:a4:c8:b2:94:1c:24:38:29:
         ae:87:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:31:49 2025 by rpki-client