Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa
File:                     d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa (raw, json)
Hash identifier:          CnyRAVkugRKngIPwbHImmBRRF+QoZ9J+BGKQOoP2gHU=
Subject key identifier:   26:5B:00:02:39:70:5A:FA:33:FD:26:AC:59:63:2B:F0:55:E3:52:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487CEB737C2E52F0D7E2C47980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.43.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:73:7c:2e:52:f0:d7:e2:c4:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=e556287c-5df5-497a-8f60-5f783e923e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:be:e4:dc:eb:be:4a:0e:3e:2c:04:e6:1f:
                    b3:40:57:62:9d:68:ea:95:ad:d7:4d:87:c6:f1:b5:
                    66:41:d2:67:29:d1:cc:e2:b3:dc:c1:25:ac:ec:44:
                    ca:a6:e0:08:5d:78:89:47:49:12:c9:13:35:21:d2:
                    e5:4e:59:70:93:46:f6:da:83:f7:f9:55:3c:8c:9a:
                    14:5b:93:e5:d6:d4:38:11:6c:c2:2d:28:ec:ae:ad:
                    a2:29:fb:ec:f0:a2:d9:ed:f3:b6:f5:28:97:a0:ec:
                    3f:13:b6:3e:c8:d2:6d:2a:81:f2:6d:4f:88:00:95:
                    bf:6a:84:c4:75:36:7a:11:4b:ed:15:66:5c:6c:d8:
                    8e:02:41:7d:80:13:ae:61:98:58:31:ec:f5:7e:fe:
                    0b:20:4a:4c:24:f9:79:21:79:c1:04:86:66:71:77:
                    49:2f:4a:9d:d9:0e:b7:ec:1b:e3:8e:e0:b4:7c:dc:
                    f4:fd:30:3c:6c:15:c5:b3:7a:a2:76:2d:31:62:1e:
                    68:52:95:9c:3d:4e:f2:d5:fe:1f:8c:be:5b:04:0b:
                    51:aa:af:0b:07:f8:c3:40:da:30:d3:b2:12:f1:37:
                    31:97:2f:8f:dc:ab:3e:62:2a:2e:f7:2e:be:14:77:
                    8b:57:53:f5:70:e0:59:5f:75:98:4f:3b:6d:50:fe:
                    c5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5B:00:02:39:70:5A:FA:33:FD:26:AC:59:63:2B:F0:55:E3:52:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1d81728-e55c-3ac7-9853-2fd3e8d1dd8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:22:4f:65:a5:2f:78:17:eb:4e:e2:2a:ab:c1:10:06:7d:6a:
         b3:c3:dc:b5:70:51:cc:e5:12:89:ba:d4:87:da:87:bb:6e:90:
         35:3f:45:6a:3e:6a:06:b1:18:7f:b1:1c:fa:50:5d:17:e6:69:
         93:22:9b:74:6f:b2:6e:25:93:69:a1:eb:70:3c:6d:b9:b5:00:
         da:40:9f:a6:7f:86:00:30:30:e7:c5:0f:87:34:8f:ef:84:69:
         97:6c:ea:45:af:c4:f9:91:74:2f:22:52:f5:d4:32:1d:40:16:
         ea:22:fc:b8:bd:b5:92:97:c0:c9:97:6f:c6:30:b1:d1:be:e1:
         f7:d4:4b:a1:6e:52:f6:1e:e6:56:e3:90:1f:e5:49:69:de:ed:
         80:51:15:ef:d5:31:44:58:d1:16:37:2f:3d:c4:7f:88:2a:4c:
         2d:40:e4:a5:ee:14:a8:94:d7:20:e3:84:80:e2:d2:89:ba:38:
         38:f2:e2:41:1a:bc:fd:98:f0:96:52:e0:46:37:cb:10:57:62:
         b4:90:01:85:86:35:24:eb:f5:a9:55:2f:77:20:ef:2a:b5:f8:
         8c:98:ed:6c:78:2a:c1:b8:92:81:43:2c:aa:af:79:53:2b:ca:
         13:a5:47:b1:74:62:c8:a3:82:e8:d9:53:93:3a:a9:8a:fd:f2:
         2d:9f:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:43 2025 by rpki-client