Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/368f6183-e2c1-34dc-a06b-03edb4387dd3.roa
File:                     368f6183-e2c1-34dc-a06b-03edb4387dd3.roa (raw, json)
Hash identifier:          2o1LmS7tzIvRVoYZGlE8JI2CmsczZiJ+w19XpvGEvbw=
Subject key identifier:   0C:CD:FB:9D:A2:9A:B6:5D:92:48:BC:B8:2E:F5:37:01:1A:D2:46:7D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487CEB4C858181A36B500E5980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/368f6183-e2c1-34dc-a06b-03edb4387dd3.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.45.200.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:4c:85:81:81:a3:6b:50:0e:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=4b85808c-972e-448c-af3e-82facbeabed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:91:38:46:9f:8a:1a:d5:8a:7c:a9:a4:c8:
                    47:a0:fb:33:c8:a4:fb:22:fe:e5:26:64:4d:db:28:
                    2a:fe:53:9d:6f:29:55:8c:47:91:23:64:72:87:e8:
                    dc:51:ba:80:f1:f4:60:5c:39:6f:91:f9:c5:be:3d:
                    3c:13:88:e7:7b:cb:99:b0:0e:41:4b:b3:01:1a:da:
                    65:e4:54:43:9d:71:3c:b9:3b:bf:ae:4e:2c:6e:8c:
                    81:e5:dd:aa:08:7b:28:03:f3:a0:2a:87:5c:77:dd:
                    42:3f:32:63:5b:c8:a7:d9:57:8b:f0:b2:47:b7:0e:
                    f2:55:1b:8c:92:97:33:99:ce:33:81:25:a1:b7:83:
                    00:4b:05:aa:cb:b0:69:ca:c5:09:08:4c:29:b4:b0:
                    98:ad:65:83:83:e7:2a:eb:a2:ad:54:8c:5c:1f:35:
                    21:13:a1:52:4b:55:ea:cd:bf:b2:20:42:3d:be:f1:
                    ca:69:f5:42:fe:ec:ad:ca:5f:20:8c:af:ad:34:1e:
                    16:a9:4c:a4:5f:14:e0:10:c6:b7:80:3e:7d:e0:51:
                    b8:2b:e3:7e:81:28:24:e2:6e:58:32:39:52:d2:e5:
                    b0:bf:4c:aa:b1:55:f8:d6:5d:0e:3a:a6:45:cc:aa:
                    54:39:65:d9:eb:4c:8f:16:4e:89:ee:b3:5c:26:ab:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CD:FB:9D:A2:9A:B6:5D:92:48:BC:B8:2E:F5:37:01:1A:D2:46:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/368f6183-e2c1-34dc-a06b-03edb4387dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8b:16:10:dc:1c:65:f0:6b:fc:c4:a7:c3:a8:5c:af:19:d8:
         a5:7e:b9:2b:f9:aa:ac:87:9c:e0:b9:c2:88:3d:b2:0f:0e:bb:
         3d:6f:82:11:7b:b8:26:3a:e3:65:08:54:cd:52:05:a9:eb:69:
         cc:6c:e6:45:27:be:5c:8d:99:35:0a:98:7b:1c:e8:e5:28:d9:
         70:73:e0:1c:ec:77:7f:aa:4b:b9:22:07:80:4f:9b:57:02:ee:
         f9:98:3e:2d:cf:fd:c8:09:6f:17:74:d3:e4:a9:ea:43:20:e9:
         e6:e9:a5:71:61:2b:f5:d6:5e:5d:c0:08:6e:35:47:b5:72:09:
         8d:00:42:49:d5:15:5a:d8:70:e8:5d:34:88:87:26:40:fd:d6:
         a7:3d:37:2b:23:94:4e:9f:f6:1d:14:fb:73:2e:7a:c3:3a:e5:
         82:97:25:6f:05:d3:fd:08:3e:49:ee:2b:08:a0:aa:11:d0:21:
         46:1b:63:8e:0f:5c:d1:73:b1:91:30:fb:84:a4:44:3b:22:f8:
         ab:aa:49:3d:50:35:9b:ea:09:0c:3c:28:94:fc:7a:b3:d9:53:
         0d:06:a9:76:19:c9:57:8f:92:2e:1f:2d:e0:31:e3:bb:8f:87:
         21:cf:fb:c1:7c:68:17:28:33:bd:10:b1:f4:1d:ed:d0:8e:68:
         a7:1c:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:00 2025 by rpki-client