Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57df91d3-e070-3c62-8234-e5db5774baad.roa
File:                     57df91d3-e070-3c62-8234-e5db5774baad.roa (raw, json)
Hash identifier:          GYf2nsIoem0K+lCFE8BJ93PVCkNDP6Np6Jd9Sqw/If0=
Subject key identifier:   95:CA:06:FE:89:8D:C4:26:32:C7:C8:64:8F:E6:7E:40:B1:F7:F9:C6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858486EF5CB941097ADE8A30BE280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57df91d3-e070-3c62-8234-e5db5774baad.roa
Signing time:             Sat 04 Jan 2025 14:00:51 +0000
ROA not before:           Sat 04 Jan 2025 14:00:51 +0000
ROA not after:            Fri 04 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.34.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6e:f5:cb:94:10:97:ad:e8:a3:0b:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  4 14:00:51 2025 GMT
            Not After : Apr  4 13:00:51 2025 GMT
        Subject: CN=fcf2c32f-ebaa-4985-a385-e3cb2341b5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ef:e2:04:4d:5e:4f:98:3c:7c:7b:f2:5e:20:
                    84:6b:52:fb:f6:9f:e1:6e:fd:b2:5c:a0:09:6e:5b:
                    bd:7c:4d:a3:9d:85:ce:36:3a:1b:9e:d2:da:92:3b:
                    37:e6:4c:08:03:05:fb:94:cd:ac:b2:f2:04:9b:a4:
                    93:91:55:82:9a:18:c4:d6:09:d1:23:b5:c3:f5:dc:
                    ef:b4:40:19:29:e7:42:d8:5b:de:f9:78:a2:35:72:
                    bc:4a:7e:1e:87:ab:a4:92:6b:8a:e6:ea:08:85:60:
                    5f:db:db:f6:d9:bd:fb:01:31:b9:3e:7a:33:0b:fb:
                    f8:58:49:00:57:cb:db:2f:6b:b5:16:3d:c4:cc:a4:
                    36:ef:b3:21:0a:e4:39:54:9a:b0:8d:35:fb:f9:e5:
                    3d:68:83:c2:a0:da:6a:b7:bb:2e:5a:03:05:c6:1d:
                    ac:fd:dd:eb:35:49:8f:4e:54:ec:88:34:f1:d6:82:
                    6e:c7:fd:d8:b7:e0:01:3f:b2:8d:ca:e6:cc:65:07:
                    dd:c8:c7:c9:47:a1:2b:bb:da:10:a6:e5:36:68:69:
                    e1:cf:40:57:a2:57:6b:4e:ca:46:45:f5:cc:f6:ee:
                    1a:ad:f0:17:ef:bb:cc:2c:25:b6:3a:15:26:a9:e8:
                    2f:8d:d4:6f:a1:dc:c3:16:7b:44:af:06:55:92:43:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CA:06:FE:89:8D:C4:26:32:C7:C8:64:8F:E6:7E:40:B1:F7:F9:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57df91d3-e070-3c62-8234-e5db5774baad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:97:b4:b1:29:c8:26:48:d5:35:e8:f3:a3:fc:d5:51:c9:
         7e:07:1b:be:d1:fe:c3:8f:2f:3f:a7:df:83:aa:0f:e4:30:9b:
         8c:fe:c5:b7:60:d0:d7:04:fd:94:ee:d9:d3:99:c6:a6:33:3e:
         6f:a6:0e:e7:3e:2c:b1:44:a4:db:a9:c9:e7:d0:83:70:13:f7:
         98:4e:37:7e:d6:3d:44:3a:43:05:c4:cf:c1:8d:08:da:11:fd:
         d6:72:75:1b:4a:71:ba:f3:33:16:79:15:5d:d6:69:5b:e0:5b:
         2f:ec:96:9c:2e:84:36:bf:1b:97:ff:c9:c2:10:a6:29:b5:3f:
         9d:dd:ae:e8:b3:c0:23:66:39:30:94:64:de:75:2e:ea:62:88:
         c3:b7:94:e0:53:9c:09:f3:41:59:69:76:64:50:5c:6e:0c:bb:
         37:64:c1:de:4b:2e:95:77:36:9c:1c:d8:b2:39:11:54:c8:5f:
         a2:89:60:bd:85:c5:4d:13:ed:b4:b6:e6:c0:71:9a:98:b7:f2:
         94:2e:e0:27:49:a6:b1:7b:7a:7f:2a:7c:10:03:f5:6d:b2:e0:
         5c:05:a8:d2:0b:af:eb:dd:8c:fc:6b:fc:d9:16:72:46:02:ca:
         32:a3:31:70:11:22:9b:b9:b1:f2:68:a4:c2:76:ca:5c:ef:e2:
         9b:ea:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:07 2025 by rpki-client