Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa
File:                     e803f80a-8363-34ec-afa6-52eb1032763f.roa (raw, json)
Hash identifier:          gna2YOn0ttz8ScoTJQ5EaIid6ZLC5TVClxAWHOwlAgg=
Subject key identifier:   3A:E7:5C:15:4F:8B:98:2B:1C:6D:08:E0:33:C3:2B:36:97:FE:45:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848451596C12DB410606831C880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     9498
IP address blocks:        23.1.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:96:c1:2d:b4:10:60:68:31:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=e82ca274-4193-4b35-b76f-82dcb824d481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:89:dc:73:a9:99:07:0f:a4:9d:0b:63:ca:44:
                    53:a9:75:9d:b2:67:f7:ed:4b:06:04:0d:df:68:36:
                    07:e1:68:bc:60:09:d0:2d:6c:02:aa:9d:f0:5a:c5:
                    4b:a4:1f:5c:77:70:e0:ba:af:c4:4b:79:0d:8c:82:
                    71:b4:cf:4f:25:7d:00:d1:7d:0d:6b:56:63:87:96:
                    ca:8c:4e:50:ca:b0:72:9d:ae:40:5d:a2:68:3d:76:
                    a3:a7:f2:fd:9c:cd:b5:b4:aa:e7:75:a7:91:b9:3e:
                    3b:c6:59:9d:60:b3:ea:78:31:5d:dc:25:ee:77:8b:
                    3b:ee:bb:e3:51:39:1a:99:08:0b:c5:46:31:6b:4d:
                    cf:6e:95:af:80:a9:af:d7:20:19:b6:08:28:14:38:
                    6c:be:69:0e:f1:09:14:90:b8:35:42:14:6c:98:47:
                    a3:e1:d6:b0:1f:7a:2a:ef:18:8e:e2:a2:23:7d:20:
                    c1:78:18:e2:2a:fb:d6:7f:bb:b4:4f:84:42:b5:bd:
                    2b:ab:af:6b:a5:af:41:8f:29:01:9f:24:50:aa:84:
                    80:58:3b:fb:e1:96:c9:8d:2a:9e:cf:49:4f:84:70:
                    1e:ac:3c:c2:da:b1:b7:39:25:2e:d0:8e:d0:48:c3:
                    75:67:28:bf:be:0c:7a:ba:11:fd:10:c8:a4:09:89:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E7:5C:15:4F:8B:98:2B:1C:6D:08:E0:33:C3:2B:36:97:FE:45:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e803f80a-8363-34ec-afa6-52eb1032763f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:7c:ea:49:a0:08:58:20:1a:4b:4d:be:05:b6:ff:37:ce:
         68:69:79:72:bb:a3:76:6e:1c:bf:f5:62:2c:44:54:8f:65:fc:
         7c:5e:b9:13:b4:86:87:93:b4:b4:c7:f7:1d:af:7c:e5:fb:cc:
         60:5c:6f:0d:4a:cb:b4:97:31:2a:2c:fc:8c:82:88:10:be:70:
         ce:b3:d1:24:26:31:89:c7:ce:8c:c8:b3:f1:ce:f1:64:21:fc:
         e0:45:94:23:db:35:2c:78:37:0b:c5:81:6e:d7:f3:64:40:1e:
         96:29:81:59:fc:99:ea:7d:6c:3b:22:4d:a7:0b:d6:e2:f7:b0:
         40:10:ef:30:01:6a:79:68:6a:0d:93:3a:48:f7:2c:2c:0d:35:
         7d:e8:ff:de:30:f9:07:bd:b2:e0:f1:2d:c4:cc:0a:de:d9:a5:
         7e:33:2d:3d:c9:83:5a:02:99:ad:4e:1f:c8:31:7a:23:7d:93:
         5a:84:e0:d5:73:35:c0:69:a1:76:21:79:72:12:4b:2a:ff:63:
         3d:77:2d:19:cb:98:58:3c:c6:b5:61:29:2b:4d:6a:52:d7:30:
         ad:27:05:c7:54:a1:4b:d5:af:1f:12:14:f7:6a:13:fe:e8:85:
         b8:88:5a:c2:84:dc:2d:ed:79:85:16:84:13:22:d4:44:d2:0c:
         40:66:79:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:34 2025 by rpki-client