Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1fb601d-c3a5-3b92-a9dc-c1bcaa4a577b.roa
File:                     c1fb601d-c3a5-3b92-a9dc-c1bcaa4a577b.roa (raw, json)
Hash identifier:          Hhp/43JNJP7W+4uP1WKiK9oNJL4f4eCry+Cn8/orojo=
Subject key identifier:   2E:32:8F:F5:E7:76:D3:79:C3:28:7E:50:C3:AF:74:14:D4:6C:8A:EC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858485E35CC225B41BCBED4EC4280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1fb601d-c3a5-3b92-a9dc-c1bcaa4a577b.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     20940
IP address blocks:        23.50.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:cc:22:5b:41:bc:be:d4:ec:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=f27f5cec-a279-45ec-be07-78b4f33b7c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:76:35:d4:32:90:42:dc:71:1c:bc:1b:ea:
                    97:44:f7:66:bb:b6:41:0a:90:a9:85:84:a9:f4:72:
                    61:e7:4d:c8:8c:63:7a:3c:2a:93:69:42:d5:9b:13:
                    0c:bb:05:0a:7f:eb:cd:06:ae:6c:33:75:16:39:51:
                    92:82:fa:a8:0f:a1:ee:b7:7a:4a:05:86:08:87:22:
                    a2:cf:63:e4:fd:82:6c:63:82:96:1d:43:62:e4:f5:
                    fd:6a:fc:0e:80:c6:11:be:6a:43:32:e5:db:ee:d1:
                    d7:d0:31:dc:85:70:07:ee:2c:32:bf:d2:d0:37:79:
                    a9:c0:f3:18:91:ba:d7:27:c6:98:26:01:d4:17:e8:
                    5b:c0:af:a8:a2:42:72:c1:45:a0:a6:c1:4d:df:c5:
                    19:71:98:42:fb:a5:a2:2f:cb:2e:a7:6a:53:a6:d4:
                    78:0f:d5:ae:54:78:a6:5f:51:af:5b:e5:84:b6:59:
                    f3:ce:68:40:e6:de:7c:a0:e9:20:57:22:5e:7e:9b:
                    cd:c0:bb:56:ed:1b:53:8a:3a:20:71:ff:5e:7a:71:
                    d7:68:db:87:7a:a1:5b:f3:e2:68:c9:c7:e5:01:28:
                    a2:38:84:9d:42:90:8a:02:95:42:95:70:30:75:11:
                    b4:d8:f8:0f:ab:47:16:eb:8a:59:f6:d6:a4:d5:65:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:32:8F:F5:E7:76:D3:79:C3:28:7E:50:C3:AF:74:14:D4:6C:8A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1fb601d-c3a5-3b92-a9dc-c1bcaa4a577b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:98:da:2b:3d:d0:8d:fb:a1:6b:89:d4:97:11:a4:fc:6b:
         66:e2:c7:97:b8:1f:4f:dc:15:a2:96:19:7d:7b:34:28:ee:b4:
         da:4e:eb:35:02:cc:8b:3d:53:3a:cf:bb:65:24:fa:c7:7e:08:
         07:f4:52:7b:90:9f:21:96:03:73:59:5b:2e:cd:03:c9:59:2d:
         50:6b:07:f2:a8:5c:3f:77:41:af:d6:52:6e:72:ba:5d:38:c6:
         6f:8e:d2:71:16:33:99:31:fd:d3:83:09:e9:98:c9:0f:92:22:
         76:1c:15:2c:3f:7e:62:d6:26:24:68:dc:a7:ce:e6:85:0d:9d:
         ad:7b:23:57:7b:05:5d:9b:92:7e:39:fc:2a:35:a1:d3:af:32:
         79:bb:3f:de:99:ce:35:88:52:2e:49:27:a1:71:5f:47:d3:a9:
         28:0b:8e:5b:64:aa:4e:be:af:a0:48:3a:f6:bc:9e:71:90:44:
         73:05:6c:1b:50:84:96:62:1c:8a:70:92:a9:97:dc:20:e3:24:
         31:4d:a7:d7:2c:38:18:14:61:d6:dc:d2:5d:24:8d:74:37:82:
         11:f6:93:29:a9:16:c1:1d:9e:d4:ff:0d:a6:07:aa:de:56:b1:
         a0:dd:07:d5:2f:fc:6b:a6:a3:d0:13:b8:e5:c4:29:34:0d:c6:
         ba:ee:c2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:51 2025 by rpki-client