Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52116182-f03c-341f-bd77-b6d0f7b20bf7.roa
File:                     52116182-f03c-341f-bd77-b6d0f7b20bf7.roa (raw, json)
Hash identifier:          uIbMfV/Sv3Z0x0iReSSLk2UHoZljjUfSNAGk2VyfTPI=
Subject key identifier:   B9:F3:75:9C:DD:36:5D:31:DC:F8:95:18:F7:46:26:63:44:9C:2A:5D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5AD07A1FEE9BBD829B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52116182-f03c-341f-bd77-b6d0f7b20bf7.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.214.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5a:d0:7a:1f:ee:9b:bd:82:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=f60c1916-4d2b-4feb-9faf-ffb0cfe5e475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:da:2e:45:bf:0e:20:7f:f6:9e:da:39:3f:
                    39:51:92:79:ca:24:2c:be:ad:fd:d9:a4:ea:8b:aa:
                    1c:49:75:c5:a0:91:81:c2:39:e9:e5:62:2b:80:9e:
                    1c:ce:43:be:b1:35:fd:21:46:8e:d7:8b:cb:63:56:
                    e2:d3:68:76:77:36:15:7a:3b:f9:b0:62:8a:b1:bc:
                    a7:25:1d:ba:ba:70:80:e6:14:9b:cc:84:a0:a5:a9:
                    d0:e8:41:0b:02:88:e7:39:86:2a:2c:47:a1:43:f3:
                    61:98:a5:eb:fe:8d:fa:f6:04:3a:65:c9:44:74:f8:
                    16:4b:7e:30:d3:09:d2:a4:56:68:e0:e7:eb:b4:1c:
                    38:b6:18:45:9b:9d:ed:20:2d:e1:5a:7b:ce:f0:62:
                    bd:9c:ae:d3:88:af:07:2f:e0:7f:eb:84:57:e5:ed:
                    a0:64:1e:e7:3f:28:3d:29:58:69:4a:c6:2e:30:9c:
                    a7:fd:0b:6e:7a:2e:23:af:6a:15:cd:d7:30:db:7e:
                    4d:8e:fc:67:77:ea:bf:01:79:08:a1:3f:f2:08:ac:
                    fe:40:ef:48:4e:50:96:c5:e4:3a:f5:8e:bf:d5:64:
                    ad:0c:10:59:57:b4:e3:ec:b3:e1:2c:2a:8b:d2:b9:
                    20:1a:e2:cc:72:53:27:07:83:fb:7b:bd:d0:1f:99:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:75:9C:DD:36:5D:31:DC:F8:95:18:F7:46:26:63:44:9C:2A:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52116182-f03c-341f-bd77-b6d0f7b20bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.214.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:76:ed:93:07:ed:76:09:37:8c:c4:78:64:4b:70:e1:c3:
         85:73:89:de:68:b5:a7:54:d3:17:df:12:60:10:29:a5:bd:eb:
         48:d3:25:7b:06:78:72:04:51:f6:ad:fe:1b:b7:5e:30:21:df:
         a0:dd:50:65:9b:b2:59:d3:24:36:9d:15:24:01:8b:15:56:dd:
         85:92:f5:f4:c9:e0:d7:88:24:d3:8b:fb:73:f1:77:a6:4f:28:
         f5:c1:23:6f:4d:40:f6:1e:fe:d2:a8:18:44:7d:c7:59:35:45:
         e2:b8:b7:ef:82:5f:ba:10:f0:44:8e:af:ff:a2:71:68:1f:62:
         80:2f:82:32:27:5f:f2:63:42:0f:5f:a1:fb:02:36:88:a3:4f:
         e9:2b:31:1d:3f:e1:9e:e4:fe:2e:da:f1:16:7c:34:91:f0:95:
         98:e2:5d:b4:51:e2:90:44:f1:e3:9e:5e:52:0c:a3:be:d0:b8:
         9d:8c:92:9e:f2:bb:af:cf:2a:3d:6c:7b:62:79:85:42:df:f2:
         0d:7b:55:69:1b:1c:73:71:b1:ca:86:fa:63:a2:a5:be:e8:d1:
         e0:31:c2:82:7f:4f:19:85:cb:b1:50:18:36:d8:9b:8d:15:d4:
         39:c5:e9:46:90:5d:3e:37:d0:8f:bf:ee:a4:3c:bd:69:64:eb:
         06:8e:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:15:34 2025 by rpki-client