Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a816e3fa-5008-38ce-8760-e2f845346dbc.roa
File:                     a816e3fa-5008-38ce-8760-e2f845346dbc.roa (raw, json)
Hash identifier:          AajYJq3xb7OdvBv7uaFxS8X+DYjv3jJI3ngK9gX1HnY=
Subject key identifier:   57:1E:73:28:26:7B:7F:FF:37:76:F4:CB:7B:17:05:25:51:2D:09:FE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584827C535E46A75569F4C376700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a816e3fa-5008-38ce-8760-e2f845346dbc.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     24319
IP address blocks:        23.210.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:35:e4:6a:75:56:9f:4c:37:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=fc416490-a4a0-4e13-b772-ab347364447f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:7a:b7:45:3e:64:a8:97:c1:82:e0:4e:0d:
                    60:41:2e:87:e1:7f:da:1b:89:06:91:67:f4:c5:ef:
                    b8:ae:89:b9:1c:50:f4:78:5b:88:6c:57:54:4c:30:
                    76:6d:79:fd:50:94:e3:2a:56:8f:c9:75:46:e2:3b:
                    d4:26:cf:6e:41:95:10:da:03:ed:5f:27:62:f6:13:
                    c0:68:51:71:d2:2d:55:ca:df:f1:82:4f:c1:71:97:
                    7c:1c:8e:a8:d0:cf:53:00:fa:56:78:49:ae:51:08:
                    9b:29:23:f4:59:47:a1:9e:34:42:72:4f:00:91:c8:
                    07:24:f6:97:1e:27:75:5a:74:a7:7b:7e:fc:87:4b:
                    47:d9:60:f3:8b:97:52:b2:17:45:14:6a:d0:b3:95:
                    c1:d5:a0:91:1c:c9:a4:7c:f2:0f:6f:64:4c:88:84:
                    a3:27:1c:6f:6a:f1:a6:1a:8c:6b:2e:40:71:c5:45:
                    dc:44:72:8e:e4:b5:14:46:61:e1:7a:b2:1f:9e:07:
                    52:56:73:d1:24:b0:de:16:a0:85:7c:6d:34:49:5c:
                    cc:9e:42:bf:eb:e1:b2:21:68:b1:07:d7:89:44:5e:
                    1d:36:c9:72:12:b8:c0:85:40:6f:55:36:7d:38:57:
                    ab:0a:05:60:63:1b:56:75:59:45:e7:24:ad:4b:e0:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1E:73:28:26:7B:7F:FF:37:76:F4:CB:7B:17:05:25:51:2D:09:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a816e3fa-5008-38ce-8760-e2f845346dbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.210.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:eb:57:52:e1:1a:e2:93:1e:05:9d:07:8d:77:3d:31:a7:
         9a:b0:d4:ee:18:26:86:d2:39:5e:29:bb:fd:cc:26:b1:63:76:
         5c:27:d5:ca:de:53:b7:57:3f:18:e3:06:98:2b:55:9f:9e:f8:
         2f:a1:e7:35:6a:af:2d:86:eb:31:23:52:53:a4:a6:ac:5b:c7:
         1d:f7:66:f6:a6:7e:15:05:55:54:bb:36:5d:37:a3:46:9c:24:
         bb:00:80:d1:ff:71:c7:3c:2b:4d:17:ab:8c:df:6a:b8:07:25:
         ea:46:40:d5:fa:18:03:d1:58:2f:f5:67:7d:9f:cb:18:c5:c6:
         a0:6c:f3:c8:f4:ec:5c:4d:0a:b9:2e:10:17:26:ce:e3:c6:55:
         dd:95:45:a6:05:a1:6e:73:71:b1:f2:07:00:7f:ad:ac:a5:bd:
         fb:3e:c0:d0:e8:12:05:09:f1:97:97:e3:f1:35:b2:d1:e4:2a:
         a0:f9:e7:32:6a:9d:7c:e2:e0:c2:ea:a0:4c:2c:d8:52:62:3f:
         91:d2:e6:36:68:38:c9:aa:b2:6c:90:c8:0e:23:56:b7:99:1c:
         f0:cb:1e:f3:18:8c:45:a6:75:bc:28:33:04:9c:5e:21:8b:8c:
         0b:a3:e5:a5:91:7b:7a:fc:d4:c4:07:e9:09:c1:4f:db:83:be:
         1e:a9:74:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxTXkanVWn0w3ZwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZmM0MTY0OTAtYTRhMC00ZTEzLWI3NzItYWIzNDczNjQ0NDdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW56t0U+ZKiXwYLgTg1gQS6H4X/aG4kGkWf0
xe+4rom5HFD0eFuIbFdUTDB2bXn9UJTjKlaPyXVG4jvUJs9uQZUQ2gPtXydi9hPA
aFFx0i1Vyt/xgk/BcZd8HI6o0M9TAPpWeEmuUQibKSP0WUehnjRCck8AkcgHJPaX
Hid1WnSne378h0tH2WDzi5dSshdFFGrQs5XB1aCRHMmkfPIPb2RMiISjJxxvavGm
GoxrLkBxxUXcRHKO5LUURmHherIfngdSVnPRJLDeFqCFfG00SVzMnkK/6+GyIWix
B9eJRF4dNslyErjAhUBvVTZ9OFerCgVgYxtWdVlF5yStS+BxwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcecygme3//N3b0y3sXBSVRLQn+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgxNmUzZmEtNTAwOC0z
OGNlLTg3NjAtZTJmODQ1MzQ2ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9IFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4461dS4Rrikx4FnQeNdz0xp5qw1O4YJobSOV4pu/3MJrFjdlwn1cre
U7dXPxjjBpgrVZ+e+C+h5zVqry2G6zEjUlOkpqxbxx33ZvamfhUFVVS7Nl03o0ac
JLsAgNH/ccc8K00Xq4zfargHJepGQNX6GAPRWC/1Z32fyxjFxqBs88j07FxNCrku
EBcmzuPGVd2VRaYFoW5zcbHyBwB/raylvfs+wNDoEgUJ8ZeX4/E1stHkKqD55zJq
nXzi4MLqoEws2FJiP5HS5jZoOMmqsmyQyA4jVreZHPDLHvMYjEWmdbwoMwScXiGL
jAuj5aWRe3r81MQH6QnBT9uDvh6pdOU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:27 2025 by rpki-client