Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa
File:                     ca198e4a-51e7-3809-82fe-f71cc26e2591.roa (raw, json)
Hash identifier:          mA7nIcc881QxSdaO5lnOco48Y/3hH51N/0GmALhnrpI=
Subject key identifier:   C7:B5:EE:87:2A:E2:3C:E3:20:8B:87:C9:18:4A:33:90:E8:14:A0:53
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584823954697E1A25E85ADFD6500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     24319
IP address blocks:        23.61.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:46:97:e1:a2:5e:85:ad:fd:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=403cc493-ded6-40f4-99aa-db1d338d4267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:5a:3f:28:c5:00:44:9b:42:69:86:34:11:
                    75:db:83:a5:df:4d:69:36:ee:c3:77:66:a3:d2:d3:
                    64:f4:cc:0d:cd:cb:b9:91:4b:93:87:63:e4:9a:a6:
                    f6:21:62:94:c5:38:5b:f4:71:5f:d1:45:ea:db:77:
                    99:93:39:f2:de:34:e6:0b:13:f6:59:cb:8b:b4:c9:
                    aa:03:31:2d:7f:83:e3:8e:82:4d:50:39:bd:d5:30:
                    24:0a:c5:fc:0c:03:6e:1c:ac:0b:3b:8f:1e:d6:57:
                    e8:8f:52:8d:56:aa:da:35:0c:2e:4d:76:e8:6e:44:
                    1c:f0:7d:74:99:6a:d4:11:82:18:8e:ea:b0:13:a0:
                    96:cd:12:a9:e6:49:ee:01:b8:32:0c:f9:1d:6a:82:
                    15:ae:9a:fd:ef:59:f1:73:f7:73:0f:9e:d3:d7:f5:
                    73:fa:5a:48:67:d0:20:58:7c:d2:65:0b:12:23:85:
                    8e:5f:79:97:f8:b6:fa:9c:9d:cc:9e:09:2f:dd:fb:
                    ce:d3:0a:eb:b9:1f:f7:c9:f7:43:1e:93:c9:0e:5a:
                    52:62:95:2a:ca:07:d2:f0:94:f5:9e:3f:e9:e7:b9:
                    9a:1b:12:2d:a7:1d:4d:fa:cc:08:b3:a5:a9:48:1d:
                    31:43:6a:88:ed:61:68:d5:5c:3b:73:4a:1d:de:5a:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:EE:87:2A:E2:3C:E3:20:8B:87:C9:18:4A:33:90:E8:14:A0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca198e4a-51e7-3809-82fe-f71cc26e2591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:90:1f:c1:85:b8:0d:7a:2e:32:b8:ac:a7:7c:8e:25:b7:c8:
         b7:19:62:7a:9d:ae:dc:87:5f:ad:60:e8:f6:f5:a8:5a:a7:92:
         fb:c7:ea:e2:9e:ff:79:bb:b9:10:2e:46:09:e0:d1:d7:7d:69:
         86:1e:8e:30:ae:05:58:99:57:9f:bc:29:41:d2:15:ae:aa:78:
         7c:fa:52:7b:26:35:ba:29:1e:9c:92:b6:fc:8b:ed:a4:e1:65:
         54:a7:66:2d:87:93:0a:c5:44:f1:ca:13:fd:a6:b2:07:fb:6f:
         60:7f:cf:e5:21:f9:64:a7:79:b3:07:ec:53:92:c0:6f:3d:72:
         79:e6:2e:0e:5d:e9:59:56:69:f1:de:93:01:71:24:96:90:25:
         94:53:cb:7d:be:5f:96:9c:f1:c2:2d:cb:3a:66:db:c4:dc:13:
         f8:81:4f:dd:b2:6b:e8:0b:ea:e4:c1:f9:81:c2:6c:48:27:91:
         0a:15:7f:69:57:7f:a9:36:6c:cc:9e:81:68:5e:c0:19:7e:d2:
         d0:c4:22:2c:f0:73:26:9b:e1:8c:de:f0:c8:83:b1:07:f9:8a:
         65:62:b5:02:a0:a2:61:4d:f2:89:48:2a:57:94:d0:32:60:4d:
         14:99:c3:7a:23:2a:b6:1b:ab:dd:ef:cc:b2:b4:c5:d5:8c:52:
         fd:bd:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:57 2025 by rpki-client