Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa
File:                     5fbbce69-7323-3009-bfa1-7a42782344ac.roa (raw, json)
Hash identifier:          AwCk/F7FRvsMXOWEq58EUsVes2JfxR6FvqVvZxSbcek=
Subject key identifier:   A8:47:F0:DF:BB:C1:D1:EE:B7:DE:15:25:55:E1:39:BD:F4:10:A5:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858485B6B0952F1284090F87C7EA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     35994
IP address blocks:        23.39.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:09:52:f1:28:40:90:f8:7c:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=65faefb5-4443-4fd3-981b-c6651125041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:4b:80:e1:70:70:53:b7:a9:af:2e:96:d3:
                    5b:36:0d:3a:55:ad:d4:09:c3:6c:bb:bb:ad:9e:72:
                    1a:e9:cd:01:ce:ae:6e:ba:8e:b7:94:10:21:5f:e7:
                    6a:24:f4:e6:37:3e:50:2c:64:22:56:65:64:6f:82:
                    dd:d4:7f:4e:72:39:8b:d0:25:8c:60:5d:3a:57:03:
                    3c:b7:99:b3:c0:c8:45:ad:05:0e:42:db:f2:3b:ee:
                    30:b8:8d:06:e6:59:93:0b:45:88:8c:d3:23:e8:87:
                    c9:05:66:da:fd:12:5c:b5:1c:ed:f9:a6:17:0d:e7:
                    21:9f:26:c7:80:ea:b3:9e:79:de:08:09:da:57:3f:
                    c8:bc:00:5f:12:4f:50:ae:6a:8b:13:1d:4a:bc:12:
                    3c:5d:0b:04:c9:c4:10:04:4a:2c:33:d9:74:ce:2c:
                    ae:d7:97:4d:d9:9a:b1:91:7d:86:c7:b1:f2:0e:cc:
                    82:68:f5:21:1e:10:ef:1b:0c:76:ff:f8:0c:e3:f7:
                    fd:b6:f7:39:58:22:0a:5b:fc:9a:39:b9:70:c7:e4:
                    b8:85:0d:c3:a0:07:df:05:93:e5:72:64:75:20:20:
                    75:05:bc:83:89:56:92:ed:3a:e4:27:0f:74:48:c2:
                    16:92:76:25:06:a5:05:c9:6e:5c:56:93:3c:b7:52:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:F0:DF:BB:C1:D1:EE:B7:DE:15:25:55:E1:39:BD:F4:10:A5:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbbce69-7323-3009-bfa1-7a42782344ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.39.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:cf:d5:21:5f:93:46:46:73:91:e2:75:97:0a:a2:0b:2f:
         0c:86:3f:6c:88:b4:24:2f:9a:87:c8:8a:c0:21:f9:9d:03:68:
         27:bc:03:f6:f4:a4:d0:29:dc:f5:22:6c:b3:2e:d9:1f:3e:19:
         53:5a:b3:a9:74:51:ab:2f:58:76:1a:ce:d4:68:f1:ef:4b:78:
         fa:a0:76:ac:09:e7:06:f3:65:5b:59:95:ee:50:23:b5:65:9a:
         f4:50:2e:9c:f6:aa:f4:d5:b9:48:26:52:9e:d4:8e:7f:03:93:
         bc:57:ac:5e:19:f9:9e:b2:a2:b3:b6:ab:bd:cc:a1:4f:2f:8e:
         db:d0:23:7a:50:2b:b5:86:c1:39:11:e8:17:99:10:2b:bb:c0:
         8f:49:3f:45:25:12:cd:d5:60:dd:96:31:41:8a:8c:c0:72:e9:
         17:00:35:af:26:63:28:2c:85:e0:3d:cf:3d:e2:8f:48:d2:70:
         72:08:47:cc:08:c2:20:66:c8:80:33:65:3f:16:86:74:73:87:
         13:78:07:c2:97:d4:49:4c:12:9d:46:61:6d:ad:58:3c:15:da:
         0d:cc:52:2d:fd:c6:14:43:e3:7a:c5:f6:f7:b6:ae:ad:06:ae:
         72:a6:4d:6b:9f:06:ed:42:e8:2b:d6:1d:48:fc:27:83:f3:95:
         20:30:97:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhbawlS8ShAkPh8fqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
NjVmYWVmYjUtNDQ0My00ZmQzLTk4MWItYzY2NTExMjUwNDFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoBLgOFwcFO3qa8ultNbNg06Va3UCcNsu7ut
nnIa6c0Bzq5uuo63lBAhX+dqJPTmNz5QLGQiVmVkb4Ld1H9OcjmL0CWMYF06VwM8
t5mzwMhFrQUOQtvyO+4wuI0G5lmTC0WIjNMj6IfJBWba/RJctRzt+aYXDechnybH
gOqznnneCAnaVz/IvABfEk9QrmqLEx1KvBI8XQsEycQQBEosM9l0ziyu15dN2Zqx
kX2Gx7HyDsyCaPUhHhDvGwx2//gM4/f9tvc5WCIKW/yaOblwx+S4hQ3DoAffBZPl
cmR1ICB1BbyDiVaS7TrkJw90SMIWknYlBqUFyW5cVpM8t1JWywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhH8N+7wdHut94VJVXhOb30EKXUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWZiYmNlNjktNzMyMy0z
MDA5LWJmYTEtN2E0Mjc4MjM0NGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyemMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9wz9UhX5NGRnOR4nWXCqILLwyGP2yItCQvmofIisAh+Z0DaCe8A/b0
pNAp3PUibLMu2R8+GVNas6l0UasvWHYaztRo8e9LePqgdqwJ5wbzZVtZle5QI7Vl
mvRQLpz2qvTVuUgmUp7Ujn8Dk7xXrF4Z+Z6yorO2q73MoU8vjtvQI3pQK7WGwTkR
6BeZECu7wI9JP0UlEs3VYN2WMUGKjMBy6RcANa8mYygsheA9zz3ij0jScHIIR8wI
wiBmyIAzZT8WhnRzhxN4B8KX1ElMEp1GYW2tWDwV2g3MUi39xhRD43rF9ve2rq0G
rnKmTWufBu1C6CvWHUj8J4PzlSAwl70=
-----END CERTIFICATE-----