Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa
File:                     03d43504-6de6-33b2-a607-18ad4ab1c63a.roa (raw, json)
Hash identifier:          tKT1d8/9w6GsO3dEhwQ+7WKu5D5apWVYGubcHS6CyJQ=
Subject key identifier:   76:18:AA:B8:35:34:05:F9:3D:AA:20:53:EC:EC:29:9D:9B:2C:2B:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487A20937936BFF3E15AC3FB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.38.252.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:93:79:36:bf:f3:e1:5a:c3:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=32a10382-58fc-4209-8dc7-cc28a20ae3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:d2:13:4c:e4:5d:de:3a:9b:37:75:e7:fe:
                    cc:7c:00:2a:b7:b9:50:81:4e:42:bb:b5:dd:d4:7f:
                    b2:5a:e5:d5:2a:46:38:6d:e4:dc:91:5a:70:6b:34:
                    68:05:a9:9a:53:5c:1a:9b:38:30:9d:98:a6:fc:62:
                    84:de:61:be:ee:52:bf:05:97:cd:77:90:2f:cb:41:
                    e4:b3:52:8e:ca:ca:39:a5:5a:0a:3b:40:bc:8f:76:
                    0f:3d:d6:5e:42:32:d6:f5:e1:31:73:b1:3b:8b:f9:
                    b7:21:07:d8:5d:a1:97:3f:20:85:0f:54:b7:4f:ab:
                    5f:9a:be:9f:2e:06:37:e8:0a:e0:8d:8b:cb:31:b5:
                    41:c2:64:03:37:11:2b:06:48:5b:a7:da:24:22:a9:
                    2d:7d:71:7d:1b:d3:4f:f8:f7:72:e5:7a:0d:6c:28:
                    e1:f7:d3:0b:28:0f:af:17:c7:69:07:80:3d:8a:4d:
                    73:c2:82:a5:f3:0b:03:73:d6:9b:fb:d2:d1:fa:8b:
                    00:bc:29:e3:82:1d:35:8d:e8:84:de:75:d5:26:5c:
                    2f:ca:ff:28:79:0c:08:a3:97:e4:d1:34:44:b7:71:
                    c3:ff:5f:1c:d4:69:45:7a:2f:04:10:13:52:06:00:
                    36:07:9d:0d:42:9f:47:61:c4:46:93:4d:a8:ef:fd:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:AA:B8:35:34:05:F9:3D:AA:20:53:EC:EC:29:9D:9B:2C:2B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d43504-6de6-33b2-a607-18ad4ab1c63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:3c:8a:ec:27:7a:44:6d:80:d7:69:22:b7:c9:4f:90:5f:3b:
         b4:e9:6f:63:7e:d2:a9:91:71:99:4c:83:3b:e3:29:75:a6:40:
         69:b7:cd:14:bd:09:e6:89:cd:51:b7:04:07:88:35:82:58:6a:
         c6:7b:7b:b1:b3:cd:36:6f:46:f4:24:d1:f1:95:2f:d6:f3:cf:
         fb:ed:69:d3:1e:83:c1:c1:6f:5a:aa:9d:cb:8a:bd:ac:e0:1d:
         a5:bb:f7:d9:8f:d2:e7:e4:5e:85:84:02:fe:cc:3b:a7:ab:51:
         00:c0:46:e8:75:d1:aa:3c:bf:3f:c0:1f:5c:c1:fb:35:3f:5d:
         d4:89:c6:d6:c3:18:38:b7:f9:13:f0:7c:d9:36:b2:38:dc:0f:
         07:17:a7:1a:6f:99:26:e8:fc:21:41:6d:c4:fe:fd:62:0c:e6:
         7a:7b:0c:62:49:bd:96:4a:a3:02:d4:37:14:92:80:a2:e7:87:
         17:72:82:8b:ad:af:67:b5:12:78:2d:b9:1b:ae:33:75:d2:a1:
         d7:52:3b:bf:8b:54:05:b7:03:4b:2e:49:88:e4:14:6c:e2:83:
         42:a5:05:8f:44:60:b2:92:ce:14:94:ce:80:20:ff:5c:67:8c:
         80:2b:b5:e0:04:af:84:61:00:cc:72:e8:0e:2c:44:e2:29:d6:
         c0:12:94:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IJN5Nr/z4VrD+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk
MzJhMTAzODItNThmYy00MjA5LThkYzctY2MyOGEyMGFlM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCfSE0zkXd46mzd15/7MfAAqt7lQgU5Cu7Xd
1H+yWuXVKkY4beTckVpwazRoBamaU1wamzgwnZim/GKE3mG+7lK/BZfNd5Avy0Hk
s1KOyso5pVoKO0C8j3YPPdZeQjLW9eExc7E7i/m3IQfYXaGXPyCFD1S3T6tfmr6f
LgY36ArgjYvLMbVBwmQDNxErBkhbp9okIqktfXF9G9NP+Pdy5XoNbCjh99MLKA+v
F8dpB4A9ik1zwoKl8wsDc9ab+9LR+osAvCnjgh01jeiE3nXVJlwvyv8oeQwIo5fk
0TREt3HD/18c1GlFei8EEBNSBgA2B50NQp9HYcRGk02o7/0LZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYYqrg1NAX5PaogU+zsKZ2bLCuVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkNDM1MDQtNmRlNi0z
M2IyLWE2MDctMThhZDRhYjFjNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyb8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB88iuwnekRtgNdpIrfJT5BfO7Tpb2N+0qmRcZlMgzvjKXWmQGm3zRS9
CeaJzVG3BAeINYJYasZ7e7GzzTZvRvQk0fGVL9bzz/vtadMeg8HBb1qqncuKvazg
HaW799mP0ufkXoWEAv7MO6erUQDARuh10ao8vz/AH1zB+zU/XdSJxtbDGDi3+RPw
fNk2sjjcDwcXpxpvmSbo/CFBbcT+/WIM5np7DGJJvZZKowLUNxSSgKLnhxdygout
r2e1EngtuRuuM3XSoddSO7+LVAW3A0suSYjkFGzig0KlBY9EYLKSzhSUzoAg/1xn
jIArteAEr4RhAMxy6A4sROIp1sASlP8=
-----END CERTIFICATE-----
Generated at Thu May 8 06:16:17 2025 by rpki-client