Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d7c592a-e6e8-369a-9273-dec62c06a528.roa
File:                     7d7c592a-e6e8-369a-9273-dec62c06a528.roa (raw, json)
Hash identifier:          W7PCPdQWInCagYpl77+wwyufXlmNfIQ6zkuOYVrIAac=
Subject key identifier:   23:23:9A:53:A5:F5:58:30:8F:ED:6E:B4:9B:7D:62:DC:35:3E:18:CC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858482395478B408E4081E25B59F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d7c592a-e6e8-369a-9273-dec62c06a528.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     35994
IP address blocks:        23.58.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:47:8b:40:8e:40:81:e2:5b:59:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=0fb8ccbf-cf8c-4c25-8536-0c08b978aef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:17:a7:5b:de:d4:c2:c3:8a:bc:f6:63:aa:
                    eb:0c:f5:96:45:69:d3:99:ec:49:b2:05:7c:64:4f:
                    0b:3a:7f:40:96:8e:0f:64:6a:89:4e:84:39:c8:f9:
                    d6:55:b7:bc:ee:85:bd:f4:63:bd:cc:a2:53:e0:93:
                    ce:49:94:75:23:5f:6b:0a:91:32:5d:08:94:7a:81:
                    77:8c:69:45:47:26:23:51:63:79:23:05:aa:a2:e0:
                    51:81:92:53:bd:08:9f:fc:0f:18:d3:1c:5a:a8:b4:
                    bf:79:bc:5b:4c:eb:84:e4:de:86:c7:8d:71:55:4a:
                    3c:57:fe:3d:7f:56:4c:6f:07:7c:41:22:0f:cb:85:
                    ed:a2:b9:31:ab:b4:01:3f:de:aa:b6:34:da:bc:50:
                    59:27:b6:3d:1f:8c:68:8c:c8:e4:dd:be:f4:e8:a0:
                    94:b5:d0:13:73:ff:8e:08:c1:0f:2f:a7:13:58:2f:
                    ff:ed:2d:94:6b:1d:e7:80:90:8f:90:38:d1:83:63:
                    3b:21:60:58:cd:27:42:42:c3:9b:3c:a5:23:71:f4:
                    63:bc:17:98:27:71:48:28:1b:c3:2e:18:9b:25:28:
                    a8:c3:94:de:7b:3a:1f:01:5f:b4:74:63:f7:b2:04:
                    a6:2a:c1:ee:e3:df:07:a8:bf:38:e1:0c:49:70:f3:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:23:9A:53:A5:F5:58:30:8F:ED:6E:B4:9B:7D:62:DC:35:3E:18:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d7c592a-e6e8-369a-9273-dec62c06a528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:01:bb:26:fe:24:5a:7a:c0:2a:c5:a9:d9:0f:6d:83:61:10:
         2b:2a:9c:4f:90:3c:ba:1f:2e:7f:e8:d8:44:d3:3c:bb:2a:50:
         00:e9:a7:db:43:05:10:60:1b:03:b3:21:16:dc:7a:2d:a8:53:
         cf:c6:0d:65:4c:18:f7:6c:4c:2e:54:8a:51:30:53:79:07:c2:
         53:13:f6:c0:20:95:f2:49:b4:bf:3c:09:7c:22:1b:b9:22:5e:
         12:f0:c9:52:fc:07:89:fe:93:0d:15:22:60:c0:5b:b3:e7:9d:
         9e:12:6a:79:3d:21:f3:36:56:d7:7c:f0:67:bc:6e:20:b5:fd:
         16:7d:66:4b:fe:2a:46:fd:11:41:30:47:53:e9:3f:84:dd:d7:
         8e:22:22:02:51:a3:a3:27:f6:38:83:ce:dd:43:fa:cb:0b:b9:
         0e:78:fe:4d:a7:f2:56:8b:cd:8e:0b:96:39:ed:6e:a6:04:8e:
         2b:07:1b:f3:fe:d8:97:8c:df:fb:04:89:0d:e1:54:c7:70:28:
         c9:d0:a3:4a:b3:f0:7e:ee:55:f5:26:dd:e3:11:d4:57:42:f8:
         ad:60:56:6e:89:51:5a:5f:78:84:ea:3a:f0:d1:12:88:be:a4:
         e9:f5:b0:c2:73:93:04:d2:2f:cb:50:22:29:4d:08:9f:a9:b9:
         d3:04:6b:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgjlUeLQI5AgeJbWfgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIwODE0MDA1MVoXDTI1MDMwODE0MDA1MVowLzEtMCsGA1UEAxMk
MGZiOGNjYmYtY2Y4Yy00YzI1LTg1MzYtMGMwOGI5NzhhZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzcXp1ve1MLDirz2Y6rrDPWWRWnTmexJsgV8
ZE8LOn9Alo4PZGqJToQ5yPnWVbe87oW99GO9zKJT4JPOSZR1I19rCpEyXQiUeoF3
jGlFRyYjUWN5IwWqouBRgZJTvQif/A8Y0xxaqLS/ebxbTOuE5N6Gx41xVUo8V/49
f1ZMbwd8QSIPy4Xtorkxq7QBP96qtjTavFBZJ7Y9H4xojMjk3b706KCUtdATc/+O
CMEPL6cTWC//7S2Uax3ngJCPkDjRg2M7IWBYzSdCQsObPKUjcfRjvBeYJ3FIKBvD
LhibJSiow5TeezofAV+0dGP3sgSmKsHu498HqL844QxJcPNO8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMjmlOl9Vgwj+1utJt9Ytw1PhjMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Q3YzU5MmEtZTZlOC0z
NjlhLTkyNzMtZGVjNjJjMDZhNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIBuyb+JFp6wCrFqdkPbYNhECsqnE+QPLofLn/o2ETTPLsqUADpp9tD
BRBgGwOzIRbcei2oU8/GDWVMGPdsTC5UilEwU3kHwlMT9sAglfJJtL88CXwiG7ki
XhLwyVL8B4n+kw0VImDAW7PnnZ4Sank9IfM2Vtd88Ge8biC1/RZ9Zkv+Kkb9EUEw
R1PpP4Td144iIgJRo6Mn9jiDzt1D+ssLuQ54/k2n8laLzY4LljntbqYEjisHG/P+
2JeM3/sEiQ3hVMdwKMnQo0qz8H7uVfUm3eMR1FdC+K1gVm6JUVpfeITqOvDREoi+
pOn1sMJzkwTSL8tQIilNCJ+pudMEaxw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:21 2025 by rpki-client