Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa
File:                     927244e4-4b4c-3980-b03d-72a6aba787e2.roa (raw, json)
Hash identifier:          39JyLdi81Nuo7gnhiQpMo7av3F8i5kClPMlNzJE6aHQ=
Subject key identifier:   99:A3:87:63:4D:30:1C:E3:51:AA:5D:56:C8:01:87:CB:3C:C7:8A:17
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5EF47A8BB4053E0DF4E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     16625
IP address blocks:        23.48.20.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:ef:47:a8:bb:40:53:e0:df:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=307a9160-db95-468b-8a3c-f4ed90f64b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:87:e6:b1:dc:19:c8:1b:3b:c8:c6:ea:14:
                    fe:a7:1d:4b:f6:b7:92:ac:00:28:8b:7b:6e:89:d0:
                    47:7e:6b:28:4f:a5:01:af:65:c6:b5:c3:eb:ce:f3:
                    dd:c9:45:51:30:5b:66:cb:e8:13:66:d0:2f:a9:b4:
                    44:94:6d:38:21:70:6b:c6:07:6d:99:7a:6e:17:f1:
                    58:f0:ce:51:bd:a3:53:60:d8:b7:ce:46:73:7c:43:
                    a6:9d:c2:6e:55:7e:d5:38:0b:a8:49:4b:69:ca:45:
                    8b:9e:a0:13:c3:26:b6:74:bf:8a:73:f7:98:12:c6:
                    5c:3d:2d:7d:51:ae:fd:aa:33:dd:fb:ae:90:cb:66:
                    81:2c:e2:94:9c:c7:b3:ad:fd:60:ac:e7:b7:21:b7:
                    37:d3:c4:f4:74:e3:d6:bf:23:b8:f4:dd:38:07:79:
                    22:07:13:3a:8b:5b:4b:30:e8:59:4d:ee:fa:e8:23:
                    25:f9:4c:80:66:4e:d6:26:79:cf:8f:bd:1d:4f:4c:
                    3c:91:44:26:36:24:81:f4:c9:96:0f:db:0c:ab:32:
                    05:73:29:6c:46:fc:22:74:4a:1d:e5:68:be:4e:31:
                    d5:7b:42:df:23:8d:3c:75:5d:9e:07:1a:f7:30:1d:
                    21:c6:a4:ad:83:c6:e9:f3:e1:5d:d5:5b:6f:e6:98:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A3:87:63:4D:30:1C:E3:51:AA:5D:56:C8:01:87:CB:3C:C7:8A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/927244e4-4b4c-3980-b03d-72a6aba787e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:9a:f4:31:d3:c9:97:9c:9a:ec:6d:c5:38:18:03:9d:75:
         b3:46:78:59:2b:99:f6:02:55:ba:75:67:25:15:57:3b:65:76:
         29:75:b8:ab:60:c9:d4:94:08:78:97:40:e1:27:7f:03:a2:cc:
         96:e4:c1:f2:b3:1c:86:4c:46:e9:3c:2d:5b:dc:00:a4:ba:b9:
         c9:60:59:80:f6:48:c1:14:c0:0f:4f:d4:d3:8d:e5:2f:e2:58:
         85:8a:c1:b0:8c:2f:5e:15:02:9b:ca:dd:0e:b1:fc:60:b6:61:
         08:50:11:3a:65:4d:01:ff:02:74:3c:26:9b:5f:83:0f:56:77:
         6c:12:c3:cd:39:28:ba:ca:1b:89:67:53:81:5a:d3:82:f0:76:
         22:97:e2:2d:4a:09:fb:8c:6d:b7:51:de:47:67:fa:5d:46:b0:
         57:17:71:7e:a3:70:5d:59:c4:d1:23:1b:48:09:03:7c:b4:ff:
         9b:14:4c:5e:33:b3:8b:8a:a2:40:3b:bb:cb:2b:d9:92:7e:1b:
         41:ce:be:b5:91:91:49:d2:ec:1a:0e:ed:0b:6a:8c:b9:65:7e:
         49:82:e3:86:86:be:bb:37:9f:99:aa:28:1d:a8:f2:bb:43:30:
         2f:73:d4:21:df:e7:c4:c5:ff:2a:81:d5:87:5e:da:07:b1:89:
         5e:68:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:28 2025 by rpki-client