Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4974a93-2904-3423-a2b2-54351d831090.roa
File:                     b4974a93-2904-3423-a2b2-54351d831090.roa (raw, json)
Hash identifier:          NdTKQGwbcy/TWZBG+byPJ6iNFcjIp3SjOxGbli9CwKg=
Subject key identifier:   F7:F1:86:46:B6:B3:AA:8A:D4:77:AB:96:36:8F:C2:D8:68:1F:B2:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5EBDF70D5DB266623BD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4974a93-2904-3423-a2b2-54351d831090.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.47.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:eb:df:70:d5:db:26:66:23:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=99a07365-c72e-42c9-85f5-d980cbbb13e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:18:5e:51:9c:b0:4c:e5:1a:17:67:4d:31:
                    ed:96:72:61:b3:99:97:8d:9b:3f:e5:3e:9f:79:77:
                    d3:f3:bc:7e:5d:b2:64:2f:cd:f0:3e:a1:f9:3e:13:
                    25:7a:75:64:30:74:ba:81:6f:09:37:c4:60:dd:e5:
                    9a:57:68:ee:c3:e3:5f:6e:f6:d7:4c:69:05:52:31:
                    1e:01:b5:8d:c2:0c:c9:d2:76:39:6a:d1:f7:9e:6d:
                    f3:ed:13:de:c1:40:4e:40:c7:97:ed:76:29:60:28:
                    69:a7:3b:68:06:fc:32:a1:85:be:b4:e2:b9:96:b2:
                    62:ac:99:6f:be:46:b1:21:1a:ed:d9:c7:aa:9a:3c:
                    64:35:fd:4c:fa:8e:cc:df:3f:3b:61:4e:4f:16:60:
                    ed:ef:2a:41:f1:1b:2a:52:bd:c6:c5:d1:94:82:85:
                    88:02:0c:93:09:e0:e6:e0:50:55:9f:91:5c:81:89:
                    6a:b7:54:a8:84:ab:6b:39:a8:b1:59:fd:c2:1e:fe:
                    5b:50:5b:a5:d5:22:69:df:4e:74:87:1c:d2:27:92:
                    69:af:fd:49:19:12:21:42:f8:f2:f8:55:ed:70:d2:
                    fa:e5:c4:92:64:69:45:4c:96:0e:16:67:64:db:5b:
                    a2:0e:97:fc:94:4b:87:f3:fd:bf:f7:e6:f8:9f:98:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:86:46:B6:B3:AA:8A:D4:77:AB:96:36:8F:C2:D8:68:1F:B2:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b4974a93-2904-3423-a2b2-54351d831090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:df:98:15:62:02:7e:43:fd:e4:9e:31:8e:56:d6:67:7d:17:
         fb:8a:5c:09:60:d6:b3:5a:57:f4:9e:6f:e4:e5:61:63:ec:48:
         a1:5f:07:7e:f6:55:35:bd:5c:53:d7:8e:89:1e:3d:fb:d1:34:
         2c:76:d7:54:ba:d4:34:f0:04:07:91:6b:96:6b:e2:2e:e1:29:
         bb:00:52:01:05:59:71:45:10:c2:74:ff:3b:9e:42:7d:d8:95:
         6a:32:93:c1:65:c4:5b:50:c4:79:63:dd:35:ac:c8:40:90:86:
         d4:2a:34:13:9c:fe:fc:06:61:da:b4:81:3c:5e:50:80:78:c5:
         a4:85:7b:a3:db:85:de:86:62:7c:20:27:a9:6b:5d:64:bf:eb:
         1a:76:fa:6b:f2:13:1e:16:a0:00:bb:ba:a4:16:b3:e0:d1:9b:
         81:5e:5a:68:46:d1:96:9d:39:c8:76:84:fd:77:a3:54:c2:38:
         c6:55:7d:1e:cf:80:2f:86:4d:38:8c:d9:0a:54:98:ea:80:ae:
         a9:81:24:53:a3:36:62:ae:b7:7b:15:81:a7:f7:05:26:47:33:
         8a:ef:5d:a7:06:88:12:5f:98:d2:18:be:41:bc:e1:95:03:48:
         5e:b3:ed:45:c5:5f:af:c6:8d:31:4a:5b:4e:18:74:91:d2:25:
         f0:fe:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:09 2025 by rpki-client