Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa
File:                     52314d9a-3693-3646-8e84-02d485f09e09.roa (raw, json)
Hash identifier:          k1IvMbMJzFQsjIVyg2MghOQm1fkdtzm0NkxZPa6EcSQ=
Subject key identifier:   9B:15:C7:FD:AE:0B:3D:84:B1:C4:49:65:2C:E3:82:01:9D:89:62:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5EA13B4186D04A3F89E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.48.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:ea:13:b4:18:6d:04:a3:f8:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=95fdd0fe-6f05-429c-b8df-3d5b01ebbc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:6c:76:69:58:d4:b2:ef:80:27:af:ae:4c:
                    95:1e:b6:74:d0:1d:37:53:5e:ae:4d:5f:9b:a4:40:
                    5b:d5:2a:55:06:1b:52:53:43:12:28:be:40:45:bc:
                    e9:94:39:db:a3:8d:ee:9e:6c:4e:e2:39:3f:d5:59:
                    a6:9a:ed:33:c6:27:bc:75:65:26:c9:d4:7e:bb:15:
                    c9:6d:e1:f3:24:e7:ce:fb:84:09:d0:d0:f7:49:de:
                    45:9b:9b:d2:10:75:71:18:29:a5:86:d6:fd:8c:0e:
                    5f:ef:24:4a:69:b1:e3:e7:8c:f3:5a:60:30:f4:fb:
                    12:b9:53:24:df:e7:33:83:40:a7:e3:79:e6:fb:91:
                    5f:02:a2:57:cf:9c:2e:80:7a:35:ee:38:3f:c6:bb:
                    61:21:2b:61:71:a1:79:01:12:75:81:b6:f6:04:40:
                    01:ad:e4:38:e0:50:97:10:9a:90:29:1a:ab:66:c1:
                    7c:66:1e:f9:7f:81:b3:fb:22:12:77:b2:d9:dc:a4:
                    dc:b8:df:71:01:15:5c:17:18:bb:18:90:e7:32:98:
                    1c:1e:93:2f:d2:a5:ae:65:54:74:b7:bb:a5:24:9f:
                    93:72:28:1a:f8:fc:42:64:bd:fe:bd:e2:dc:4e:b6:
                    15:a5:f8:2b:b7:f5:74:18:7d:3a:1a:08:71:c0:28:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:15:C7:FD:AE:0B:3D:84:B1:C4:49:65:2C:E3:82:01:9D:89:62:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52314d9a-3693-3646-8e84-02d485f09e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:f6:83:bc:b0:35:ee:ce:52:fa:09:91:cd:f2:45:7b:74:
         97:23:dd:47:86:68:4a:2b:2c:6d:cf:00:76:c1:6a:8a:69:05:
         a1:e9:38:1f:b8:82:cb:b4:b0:d3:8c:15:78:01:36:16:8a:d5:
         58:77:eb:90:9c:fe:41:77:e2:f1:b5:6b:f3:6d:29:13:b1:fc:
         e5:57:42:03:8c:0f:d5:5c:0e:35:f8:43:c5:8b:34:cd:e4:90:
         7c:35:df:18:34:96:47:a8:94:b6:45:68:14:0c:69:d8:e3:f2:
         64:22:3d:a5:cd:5f:7e:d5:5f:ea:34:dc:88:9f:60:d1:e5:a4:
         87:96:b3:54:b1:40:9a:b6:d5:00:5e:37:f2:f4:ba:ec:f1:f7:
         cf:e7:6b:6e:e0:31:36:44:18:43:b5:6b:9e:b5:16:ac:30:53:
         8f:69:46:c3:67:35:2f:e8:e6:42:de:35:1e:da:f5:e7:9d:dc:
         74:bf:74:47:00:c4:4b:6a:f5:fc:ce:39:cf:45:76:71:2f:f6:
         48:a1:4c:f0:b7:a2:e4:96:12:f3:3b:fa:e8:8b:c2:8d:a7:26:
         4b:d7:a5:dc:24:68:89:81:d8:f2:7e:8a:82:b0:95:ae:3f:96:
         7e:fd:ee:07:06:aa:01:e4:a8:1e:70:fd:e2:61:31:76:77:92:
         e1:e6:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:13 2025 by rpki-client