Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa
File:                     3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa (raw, json)
Hash identifier:          e7kM8vLgcRoFsu8zAf12PVS0Z9LzYyKTLj1XY4D3I0Y=
Subject key identifier:   5D:82:A7:54:F2:07:CF:E6:C6:8F:FB:68:2B:C5:AD:D6:BA:60:97:5E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858485CD037F05C2093032382BF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa
Signing time:             Sun 29 Dec 2024 02:00:39 +0000
ROA not before:           Sun 29 Dec 2024 02:00:39 +0000
ROA not after:            Sat 29 Mar 2025 01:00:39 +0000
asID:                     16625
IP address blocks:        23.48.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5c:d0:37:f0:5c:20:93:03:23:82:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 29 02:00:39 2024 GMT
            Not After : Mar 29 01:00:39 2025 GMT
        Subject: CN=73b1cb96-cf3e-455c-b0d6-517180e75d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6c:27:4f:a7:9f:78:cd:99:74:de:c7:c1:80:
                    cc:38:ef:c0:fb:a5:b7:19:ba:69:03:05:df:b1:8c:
                    11:1f:6b:f4:e6:6c:c0:84:45:9e:7f:1a:11:61:cc:
                    d7:08:74:21:3c:22:3a:7b:c3:1c:36:e3:a8:7e:ac:
                    3d:db:1e:81:58:76:aa:40:d8:06:4a:af:a3:f9:46:
                    16:16:3d:c3:5e:3c:48:b3:e7:fe:81:65:31:ed:bc:
                    d6:5a:0f:34:f4:23:c6:31:eb:24:7f:c7:0a:97:c6:
                    66:0b:f4:a9:7c:f8:1a:73:58:ac:e3:6c:4d:dd:18:
                    0b:47:3f:ce:cc:35:ff:a3:54:e4:44:85:0c:59:6d:
                    e2:d5:6d:f2:f7:87:e5:88:a6:61:94:00:ad:23:ec:
                    e3:91:91:45:b7:e7:5f:1c:f9:93:00:52:2c:bc:a5:
                    0a:d2:ee:98:f3:24:7b:19:dc:d0:57:7a:2a:78:a5:
                    30:a8:69:3b:9e:1d:9a:89:fb:2d:b6:b3:26:18:da:
                    04:3e:2c:dd:63:88:39:ee:c4:1f:77:9f:13:0e:3f:
                    13:41:9b:87:43:92:fd:d0:52:c9:e3:20:f2:2c:09:
                    d3:63:cc:e5:0e:dc:c4:8f:79:62:55:42:28:e8:13:
                    1a:da:f3:43:99:a3:15:d7:f1:03:0e:fc:9c:30:b1:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:A7:54:F2:07:CF:E6:C6:8F:FB:68:2B:C5:AD:D6:BA:60:97:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e8914d3-5b3d-3b3d-8867-09211ff51bf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:09:98:1c:0b:5d:1c:c6:f0:a5:41:c0:c8:f7:b3:cb:c4:51:
         e5:bb:0b:ca:fe:4d:5e:3a:ee:fa:9f:cc:36:0c:01:ab:58:85:
         c2:81:13:93:a6:78:60:2f:46:59:09:aa:1b:ef:d1:ac:8f:f5:
         1d:3c:c8:ed:8e:2f:4a:0b:da:e4:56:18:ff:2c:5a:9d:a6:f9:
         bd:38:40:62:da:e8:a1:0c:d6:5c:47:52:76:f8:ee:47:b4:31:
         e7:ba:38:e0:08:ab:fa:19:fc:e7:fc:ca:e0:c2:c9:14:45:85:
         38:47:00:a3:23:89:84:c1:25:59:47:bc:1b:c8:6b:c0:13:59:
         30:91:d0:37:90:5e:7c:7a:12:0e:c2:b1:82:e1:f7:ac:a2:9c:
         eb:7f:ba:1e:d6:c2:9e:21:f2:57:d9:37:57:9f:d9:dd:97:45:
         9b:96:2f:c0:76:4c:7c:5d:a7:e9:92:5e:88:db:9f:a5:29:4a:
         dd:95:a7:14:dd:dd:a1:f4:1c:82:fa:51:58:6b:dc:4b:e6:99:
         2f:79:b0:dd:e0:81:6e:0f:76:64:97:2d:ac:ec:64:be:3e:89:
         bd:12:97:0a:15:65:bd:06:a7:38:aa:07:43:e3:bf:10:e4:9f:
         71:cc:dc:80:0e:85:a7:6b:ec:81:58:1d:67:33:8b:0d:91:f2:
         e1:11:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:11 2025 by rpki-client