Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05c56803-e860-3d09-92d7-4851f0d3235b.roa
File:                     05c56803-e860-3d09-92d7-4851f0d3235b.roa (raw, json)
Hash identifier:          Dezsa/PxVNCB1jIs+rNEa8SIQSrB2xZ77Kjzpm95D14=
Subject key identifier:   9F:A5:ED:14:60:4A:FD:15:D9:8F:49:0C:7B:79:D9:74:46:35:3A:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584815A00074081C7C96FDCC91E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05c56803-e860-3d09-92d7-4851f0d3235b.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     33905
IP address blocks:        23.40.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:a0:00:74:08:1c:7c:96:fd:cc:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=084fdadf-868f-4d13-abf5-027243ffd1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:81:8c:33:bb:ea:2b:53:7b:a8:9c:e4:99:
                    b4:04:06:5b:f9:38:01:ce:cf:a5:b3:07:fe:2b:fd:
                    da:86:12:d5:24:3e:f8:4f:9e:40:9c:a3:e0:6a:bd:
                    3e:61:ac:91:20:7e:f2:ef:49:f2:e7:b4:b1:12:ce:
                    a0:6f:be:98:58:af:23:cc:ad:49:3b:0b:a0:d0:81:
                    d5:25:1f:0c:0d:95:94:b8:2d:2f:d9:f4:00:e8:f3:
                    8f:9e:61:34:69:7d:3f:47:35:a1:a9:21:9e:20:1f:
                    0a:c7:5b:a3:89:c4:94:66:c8:38:f3:db:cd:aa:47:
                    bf:5d:3e:17:a9:94:de:9b:73:b9:7b:f8:9f:db:fa:
                    d3:31:29:e5:8b:79:85:cd:0e:a8:a4:f8:28:5a:69:
                    a3:5a:bb:02:8b:77:21:42:50:1a:88:fa:20:e3:95:
                    63:99:94:ea:88:8f:41:cd:cf:6c:49:2e:b5:7c:26:
                    29:00:df:2c:37:c4:0b:c3:11:32:bb:d7:32:bf:11:
                    05:38:7a:4a:26:99:a5:7d:4d:fa:91:75:f7:30:89:
                    29:28:7e:99:a9:41:5c:2a:d2:e8:a6:ad:d0:b6:5a:
                    e1:df:a8:4e:73:2a:96:07:87:aa:6b:20:c6:a2:ef:
                    b4:e6:78:6a:ce:2c:cc:80:4e:3e:0c:1a:94:25:30:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:ED:14:60:4A:FD:15:D9:8F:49:0C:7B:79:D9:74:46:35:3A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05c56803-e860-3d09-92d7-4851f0d3235b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:23:71:03:79:37:98:93:38:15:1c:5f:d6:25:f4:c8:cc:2a:
         7f:46:3d:0a:bb:9a:b3:1d:d1:d8:81:77:8c:f0:c6:cf:e9:2f:
         35:49:8d:f5:1d:43:9f:a4:5d:f7:ce:03:37:8d:7a:d7:9c:95:
         8b:f4:9b:18:fb:c6:9f:af:e2:11:1e:2d:f2:fd:66:46:da:f1:
         66:32:b2:21:bf:99:c2:5c:3b:6a:ce:0b:e5:ee:77:4d:71:07:
         56:7d:1c:81:02:a7:b2:4f:dd:6b:c2:96:8d:8e:c7:20:a1:b0:
         d0:74:f7:e2:df:53:2c:83:ac:c1:bb:3e:2a:7b:76:2e:ab:05:
         b8:55:4b:4d:e5:83:8e:5a:47:b3:51:7f:a6:85:35:7c:c8:da:
         8c:0e:e1:e0:2c:96:70:01:26:a5:ba:52:39:0e:d1:50:15:55:
         bc:cf:11:2d:01:ff:a0:49:c7:b2:4c:3a:f9:5a:89:0a:b0:e2:
         39:9e:51:2b:bd:11:e8:2e:d2:b4:9e:f9:4c:df:bb:94:f2:40:
         ca:27:5c:f5:df:e5:21:d6:cc:49:7a:fe:5a:f3:5e:98:07:81:
         c2:e5:e9:e1:1b:d5:d7:4e:0f:40:47:d7:85:7e:b2:8c:13:53:
         52:51:da:fb:fd:3c:71:03:a2:d3:e4:0f:c1:42:f7:81:2d:01:
         55:1c:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:13 2025 by rpki-client