Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ec94e3-ba3d-31ab-828d-ad983cf075e5.roa
File:                     02ec94e3-ba3d-31ab-828d-ad983cf075e5.roa (raw, json)
Hash identifier:          fHclN+HzzQMrrkpbRKjWp7kj816dUMma27cMq/ji1/A=
Subject key identifier:   C1:F6:60:EF:CA:10:E5:68:0C:B2:DD:6A:F5:CA:A3:1A:8A:2B:E7:F9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584845159BE198A7A18B65ACFA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ec94e3-ba3d-31ab-828d-ad983cf075e5.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.15.242.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:9b:e1:98:a7:a1:8b:65:ac:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=cb5569c1-95ef-4ca2-9a1c-bd4050b202c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:74:88:dc:be:d1:68:3d:4e:9b:b9:be:9a:
                    25:3e:dc:c6:e7:cc:a5:3f:47:56:fb:a0:76:d0:a5:
                    f2:30:a6:bc:87:14:90:66:37:95:0d:0c:ee:aa:9a:
                    74:4d:8b:6e:77:08:cd:e4:10:54:10:a4:b3:c9:19:
                    0e:0d:49:6b:f2:14:80:98:62:46:c3:6e:54:80:c4:
                    df:d4:7d:df:57:86:c7:57:21:f7:6d:3c:ea:7f:c0:
                    98:61:b8:54:93:ad:9b:1f:af:3b:1d:5e:f8:11:d0:
                    d3:5a:06:5d:1b:b8:0d:75:4e:63:c7:83:00:a1:c8:
                    4f:b3:85:06:bb:0c:c6:74:b0:01:79:6f:50:90:65:
                    08:e4:fa:59:07:21:74:0e:4a:e4:4d:f7:10:34:64:
                    b2:6f:0a:a8:e3:6f:34:38:01:68:9f:0c:1a:65:10:
                    89:df:76:b0:d7:a9:9f:3a:0c:76:a2:2f:08:cd:98:
                    11:8e:ac:3e:31:cb:7f:33:35:bc:e2:cb:74:17:0d:
                    3b:d2:9e:1b:f9:ab:be:e8:f1:9c:c4:fd:d8:4c:a7:
                    99:d6:58:65:5f:a3:e3:8e:12:bd:e0:45:1e:de:68:
                    f4:ab:ac:b6:97:e6:39:76:b3:2e:3c:50:64:2b:2f:
                    b5:3b:ab:25:87:68:58:78:44:93:71:c1:56:6f:a7:
                    09:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:60:EF:CA:10:E5:68:0C:B2:DD:6A:F5:CA:A3:1A:8A:2B:E7:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02ec94e3-ba3d-31ab-828d-ad983cf075e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:1d:ee:2a:0d:9a:86:91:0c:76:a8:77:5b:8f:47:d3:28:
         02:a2:c0:f4:3a:fc:5b:a6:50:6a:9a:a6:5f:51:5b:20:a4:03:
         78:66:f2:fb:1c:09:26:64:43:da:05:52:69:a4:68:95:6d:ab:
         64:49:fa:49:fa:80:3d:76:17:3d:86:86:68:d2:aa:f1:9d:f2:
         dd:48:2b:2a:bd:7e:20:97:6a:2e:b8:9a:f8:9b:05:ba:ac:d1:
         25:b6:ec:9d:d0:18:d1:b3:6a:8c:d4:68:41:af:76:31:06:e3:
         fc:74:d8:75:86:0b:02:b5:b2:b2:75:02:f5:2e:db:c2:4e:b1:
         a6:ce:77:d1:c9:79:26:39:af:f7:bf:16:45:4e:78:f8:eb:0a:
         16:62:41:85:3b:48:ad:d9:69:a8:6b:fa:cf:f9:25:45:69:23:
         8a:4d:2a:d7:88:56:30:ce:a3:38:3c:ef:ca:e2:bc:6b:3d:b8:
         44:71:36:38:0f:de:30:6b:1a:22:63:eb:17:8e:28:1f:8d:d0:
         a8:12:08:6a:08:2a:8a:bd:62:c6:1a:79:3b:96:1a:16:42:c4:
         55:1d:d0:95:6d:d7:7d:f2:64:f1:b8:77:05:7b:2c:80:93:a4:
         d4:c2:32:39:b4:5d:1e:2e:e1:ab:20:51:a7:1c:27:7a:bc:4f:
         2e:92:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:23:56 2025 by rpki-client