Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4284af-16f1-30bb-9295-dafbd448d477.roa
File:                     4d4284af-16f1-30bb-9295-dafbd448d477.roa (raw, json)
Hash identifier:          qMvC4zlma2O1rB1Pj2cQX7mt4680cR6OFReQP4IiT/0=
Subject key identifier:   1F:AB:01:13:D4:2E:AF:36:9E:10:3A:D0:73:D9:D1:4F:1A:C4:A5:83
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5EF9E6A30642F2377D500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4284af-16f1-30bb-9295-dafbd448d477.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.48.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:ef:9e:6a:30:64:2f:23:77:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=33f048b9-1c01-4619-a959-78d05d0d121b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:33:8f:31:3b:b1:30:c7:b7:e6:d7:44:ee:
                    e4:0b:08:5e:8e:1d:6f:57:93:ee:2f:28:0e:f9:65:
                    07:f5:09:b1:ad:af:b3:c6:46:73:86:f1:56:e5:d7:
                    78:fd:e7:ba:ab:5d:d9:f4:d9:92:84:9f:b1:3f:87:
                    f7:1d:05:72:a0:b7:46:c3:0e:0d:52:52:2e:d1:d2:
                    6d:4e:09:1a:9f:01:50:7f:8e:60:b6:a1:c9:11:83:
                    54:74:7b:5e:82:4d:1e:c3:da:86:62:02:04:2c:f2:
                    e6:66:51:90:18:33:11:7b:c7:39:80:f4:dc:f6:4e:
                    ed:b5:85:ef:f5:1a:a2:26:08:a4:e1:36:7b:9c:f8:
                    a1:f4:aa:4f:be:a9:7a:49:3c:b7:b8:63:42:ff:11:
                    3e:ef:00:6b:64:fa:f6:d6:8a:d9:94:f5:86:f2:6a:
                    89:22:5c:b0:7d:ed:48:1d:3d:f4:54:cb:a3:a1:0e:
                    b8:8a:bc:88:c2:5c:82:e8:33:b6:94:61:8d:09:dd:
                    91:17:df:5c:23:e0:18:a0:f7:7c:7d:4d:5c:0b:8f:
                    4a:9f:19:60:21:3e:76:f8:a3:97:1c:02:12:aa:89:
                    50:24:c4:05:9f:4a:7f:e0:ad:ea:be:c9:fd:44:8c:
                    e9:41:8c:7f:36:2a:8d:3a:46:22:62:5e:5d:66:5d:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:01:13:D4:2E:AF:36:9E:10:3A:D0:73:D9:D1:4F:1A:C4:A5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4d4284af-16f1-30bb-9295-dafbd448d477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:62:63:97:b9:13:3b:15:26:48:4e:07:55:95:3d:56:19:
         3b:98:73:7c:90:ab:59:98:4b:da:e0:9e:70:8c:3d:93:f7:8a:
         04:28:20:81:e2:89:67:58:f4:bc:9f:3f:c8:a1:ac:ef:be:4b:
         06:40:9f:8d:b4:d1:48:2a:dc:96:93:3e:de:91:ed:b8:84:ca:
         12:12:41:18:1a:b7:6d:9d:9f:99:a8:c9:01:b5:b5:0d:04:22:
         79:1c:fe:72:a7:69:5b:08:a5:cf:8f:f3:5d:2e:d4:22:88:45:
         78:c9:96:fc:b2:eb:a2:77:c8:57:85:d2:2e:f2:ce:2a:c7:06:
         be:46:6a:2f:75:e7:30:e1:cd:7a:5b:aa:bd:51:43:78:f4:2c:
         24:e8:a0:bc:c3:b2:aa:24:18:05:38:be:96:d5:de:23:75:3e:
         fd:b1:64:85:48:1a:7d:a5:06:31:8e:b2:2c:fb:d1:3a:e0:04:
         3f:89:8a:9c:59:b8:eb:9e:43:65:bf:e0:da:f2:7c:87:88:6a:
         50:44:80:ee:df:1e:1d:f5:2b:5e:a6:17:6e:50:f3:3e:d3:e5:
         d6:c0:2b:4f:ff:d8:55:95:1f:54:d0:4f:df:ca:4c:40:59:a0:
         2a:d1:ea:93:54:93:8d:13:54:5f:9c:4a:97:ac:ce:d1:be:7a:
         e8:2c:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:12 2025 by rpki-client