Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89d33e3d-53b6-303b-a27e-e61f64d8a2e5.roa
File:                     89d33e3d-53b6-303b-a27e-e61f64d8a2e5.roa (raw, json)
Hash identifier:          45zPOpgPcjhvTEfUku6d9SbMy4cuneX/20RHxous8Nc=
Subject key identifier:   9E:06:E8:9A:A4:6B:82:E2:33:F4:2C:6E:48:C2:2E:FE:49:78:FD:F4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584845159B9862E576D0DCC0FAC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89d33e3d-53b6-303b-a27e-e61f64d8a2e5.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.15.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:9b:98:62:e5:76:d0:dc:c0:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=972129ef-fc37-4daa-bbfe-16671715c2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:75:3e:7d:8f:c8:3b:fa:b3:25:e6:fa:8c:
                    ad:74:23:7b:c1:37:a4:b9:a5:1b:fb:18:f2:3e:de:
                    c0:2b:99:02:4f:10:66:c3:ed:1e:f1:6f:e1:75:c2:
                    d2:1f:8e:d0:f8:49:87:5d:46:e1:c5:6a:da:11:40:
                    80:77:7c:f8:b4:8a:47:6c:a5:f9:8e:22:e4:0e:38:
                    09:62:e2:0d:11:a4:67:a5:53:9f:e6:de:8b:a8:f1:
                    30:2b:1a:dd:2b:dd:8e:0e:c4:94:21:ef:8f:f2:56:
                    7f:a1:56:70:f7:c5:1c:dc:63:7c:e7:fc:11:4c:48:
                    d3:3f:8a:e5:ad:27:f1:79:06:0d:31:1b:97:07:1a:
                    33:5b:7a:6d:10:a3:b9:c6:74:09:e4:2c:e8:d3:18:
                    2e:4e:09:cd:43:68:d8:1f:cc:09:0e:3c:c5:07:3a:
                    00:3c:db:98:ea:87:4d:4d:ce:51:c3:72:e9:af:55:
                    3c:17:46:50:2a:c7:c7:3b:86:b3:3f:9a:d1:1f:dd:
                    5e:14:37:fd:ea:01:52:4d:88:f9:b1:d2:1e:bd:37:
                    b9:83:70:76:b6:ea:0b:9f:9c:cd:eb:86:ce:7e:27:
                    10:b8:46:23:7c:d8:54:df:47:31:21:31:03:22:c3:
                    70:e0:c9:0f:6a:45:40:1b:f2:a8:b8:9a:48:9a:c4:
                    08:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:E8:9A:A4:6B:82:E2:33:F4:2C:6E:48:C2:2E:FE:49:78:FD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89d33e3d-53b6-303b-a27e-e61f64d8a2e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:23:3c:b9:32:80:b2:56:7d:73:b1:ce:3e:d2:bb:ea:8c:1e:
         15:9f:86:15:50:31:09:f5:1d:e0:e5:19:d0:37:0d:24:70:85:
         67:17:67:b9:2e:01:33:bb:aa:a4:97:63:65:6c:fd:69:4a:ae:
         00:b6:aa:86:31:b4:c5:5f:00:76:50:1c:69:31:79:a0:76:bd:
         d2:dc:c7:fd:67:76:5b:a3:ee:3d:49:cb:5d:98:83:df:04:a3:
         33:6f:f0:68:97:b1:97:32:10:82:ea:1e:ff:ab:25:f7:ed:9c:
         ea:57:d4:d3:98:02:d4:18:39:f0:f5:b3:3e:ed:e0:07:7e:ec:
         59:8e:b7:3a:1c:83:0a:cd:d1:d3:e3:ba:f4:5d:db:82:f4:6f:
         3f:ef:c0:15:eb:cc:ec:52:9c:b9:d6:03:18:e8:63:12:e2:86:
         2d:e1:c9:36:a7:30:4b:35:95:1c:c7:2d:bf:22:c4:3a:67:bb:
         b1:05:88:cc:9a:b6:36:01:50:99:99:15:fb:4e:8f:86:39:aa:
         78:91:08:49:7c:89:aa:6b:9b:3f:87:d4:fc:ba:2c:b3:cb:c2:
         45:22:a0:ca:97:d3:8d:70:00:61:58:c4:d1:90:d0:23:33:ad:
         fa:b4:6c:75:47:d7:79:ce:61:ec:9e:c4:43:5d:87:b9:e5:29:
         99:01:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:57:24 2025 by rpki-client