Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa
File:                     059dc03b-6945-3293-aa1e-2445812e0890.roa (raw, json)
Hash identifier:          XOmSTA+AGFCyibClXFNDyDKS22KXQxXc4lIFdiLdwZM=
Subject key identifier:   35:0A:2C:52:60:AD:A2:DC:A2:D2:D1:A0:03:D8:3D:6A:AA:06:0C:A1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858482A8FDDCBD38C8EC7065AC018
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     12222
IP address blocks:        23.79.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:dd:cb:d3:8c:8e:c7:06:5a:c0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=463640bf-5263-45f7-b529-f02ee4577431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:2a:e6:32:e3:b9:6b:9e:8c:d9:4e:12:6e:
                    41:17:3e:0f:2c:9d:8b:13:bf:01:ea:8b:8d:dc:a0:
                    7f:79:8c:31:ba:dd:66:5e:fe:f2:37:7d:fc:fd:87:
                    b5:c5:fa:cd:61:ad:67:6d:fe:cc:fb:93:d5:46:24:
                    ce:e0:80:b6:6a:0c:37:32:5d:04:ac:75:38:a8:43:
                    e2:2a:14:60:ad:f7:d9:df:f8:7a:a9:af:6a:4b:df:
                    39:96:30:47:84:d6:08:73:51:c5:ad:02:85:e0:e1:
                    90:27:bb:88:61:24:f0:96:82:8f:6a:f3:19:04:d5:
                    0c:a8:87:c8:b4:4c:17:8f:67:7f:96:56:9f:4e:be:
                    13:a8:1b:e0:26:2d:9e:97:f5:7c:04:46:23:46:e1:
                    a3:1d:c2:d6:84:33:ab:90:87:f1:50:c2:d8:6b:2e:
                    76:4c:c9:ed:a9:9d:3b:7f:2c:3f:17:6f:56:10:ee:
                    d1:b9:c3:fd:9d:50:f2:84:a1:79:ee:c1:e9:4e:a4:
                    b2:15:a0:7c:2d:42:c3:68:9b:49:54:78:e5:2e:e0:
                    2f:8f:af:2b:4b:f6:17:01:e2:01:94:49:ed:28:5b:
                    e1:b0:3a:80:cf:17:41:79:1f:08:7a:f6:91:bb:68:
                    a2:86:51:c7:35:8c:0f:8c:88:10:b9:ea:b2:f5:0d:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:0A:2C:52:60:AD:A2:DC:A2:D2:D1:A0:03:D8:3D:6A:AA:06:0C:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/059dc03b-6945-3293-aa1e-2445812e0890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.79.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:3a:bc:5e:ed:9e:ee:68:03:64:56:7a:57:7c:3a:4e:e0:
         cf:5a:b6:13:84:cd:06:a0:ec:eb:47:90:28:dd:45:48:a4:4c:
         f7:8b:65:73:d3:f9:3f:7f:c7:0d:12:2b:d8:cd:a2:27:ee:f0:
         68:33:73:88:ad:2e:3a:bf:9d:4c:9b:20:2f:44:7f:79:c3:55:
         7f:13:e2:93:98:ae:98:ac:a4:f9:f0:68:c6:8d:b1:e7:2b:03:
         0d:f1:47:7f:35:40:1a:31:fd:8a:e6:34:6d:bd:3c:7e:08:83:
         00:12:7e:91:94:ec:d9:15:9a:8c:11:3c:97:a4:be:19:d0:09:
         f1:3f:30:db:62:3a:38:42:d2:f6:46:43:0f:6e:64:67:e9:0d:
         38:5d:aa:7d:7d:5a:b4:85:15:22:35:9c:33:e2:14:ad:a8:36:
         1d:4b:26:78:dd:ea:1d:af:8e:c5:58:6b:0b:fe:c1:2b:45:51:
         5b:72:db:a8:6f:85:84:79:91:60:53:12:16:74:eb:2e:32:9b:
         95:0f:4c:94:d6:a9:be:38:38:4f:5c:1e:62:a1:98:44:8e:41:
         03:04:fd:6c:a1:45:2a:ba:cf:50:db:c5:58:bd:3d:6e:19:22:
         24:10:32:84:51:dc:f4:18:4d:b7:66:34:c8:4d:72:ee:ec:a0:
         f2:24:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:10 2025 by rpki-client