Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebc50ff8-ebb4-3baf-8e1c-293dd7eba20a.roa
File:                     ebc50ff8-ebb4-3baf-8e1c-293dd7eba20a.roa (raw, json)
Hash identifier:          odI0ZB+OcXvU/Q2SHlP/E0xeS7Vv60JMIKibrYWYA8M=
Subject key identifier:   11:AA:BD:B1:06:C4:A1:85:81:94:F9:68:FB:21:D7:DC:05:A1:16:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584834558BF655C71BC363C74900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebc50ff8-ebb4-3baf-8e1c-293dd7eba20a.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     16625
IP address blocks:        23.66.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:8b:f6:55:c7:1b:c3:63:c7:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=fcd210e9-c96e-4d02-9abe-ff6050ae3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:c1:4a:54:df:c5:28:7c:a0:77:2c:d3:6a:
                    ef:3d:2a:41:07:11:20:18:dc:45:ba:7d:3e:68:a9:
                    ae:14:51:af:9c:bf:85:05:87:1b:d4:67:bf:9f:ef:
                    e5:71:b0:df:0f:d6:d0:35:80:18:31:5c:31:34:e8:
                    96:6a:a7:ca:5f:69:a7:ce:ae:34:d4:d1:ce:b9:f6:
                    cd:9a:3f:66:f3:e5:91:c1:a2:69:83:5e:a8:96:14:
                    60:51:92:49:56:78:d9:94:54:89:52:cf:44:29:00:
                    9c:ef:6a:80:27:7b:4c:bc:1c:2f:6c:95:2a:1c:05:
                    d1:2f:e2:2c:eb:47:bd:76:c9:b8:ab:17:e4:12:ac:
                    a9:c4:0c:e0:57:61:58:d8:61:d6:a6:f2:db:df:ae:
                    b0:ec:28:b1:19:b7:47:ad:d9:f7:a2:b8:5f:f8:cb:
                    85:52:ea:4d:50:9b:43:53:c0:5c:a9:f2:01:9e:16:
                    fc:c6:34:c5:7d:1a:70:5e:8d:af:c0:55:82:f8:b1:
                    c4:09:8b:ee:f8:b6:0c:3d:a1:e1:57:3e:f4:b0:15:
                    a4:88:b2:98:2e:58:9f:26:c8:ba:33:87:b9:b2:cf:
                    75:66:ff:85:d0:ad:82:bc:64:36:a7:d5:b8:88:b2:
                    8a:bc:6c:7d:87:a0:22:22:2e:7d:0e:03:0e:48:9f:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:BD:B1:06:C4:A1:85:81:94:F9:68:FB:21:D7:DC:05:A1:16:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ebc50ff8-ebb4-3baf-8e1c-293dd7eba20a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c5:e5:63:ba:31:4d:9e:b5:ef:56:30:87:fd:34:61:8c:e3:
         8f:5b:1a:4c:12:a0:ef:3d:00:0a:6f:2d:b2:f1:73:8b:38:c9:
         b8:2b:c7:25:03:97:88:82:12:4a:02:a5:20:09:d2:56:f7:bd:
         41:73:19:f8:d4:7c:38:d9:6b:aa:16:ce:c0:2a:e3:3b:36:0b:
         40:f1:f2:e0:2b:4a:d6:df:21:b2:27:01:57:c6:94:c9:96:5d:
         5f:d5:53:54:2e:08:87:c1:5e:22:4d:3e:cc:a4:21:c2:9b:e3:
         3b:3e:48:c2:eb:7d:ff:0b:8e:5c:c7:c3:eb:29:22:d7:35:3b:
         c3:b2:17:3c:4d:a8:b5:d9:3c:39:c4:6f:57:5b:02:1b:b0:dc:
         6e:3b:e6:89:40:5e:59:d9:9e:b5:ea:64:f9:df:51:a9:e7:ec:
         31:36:cb:91:b1:de:7e:6c:26:ed:6b:d8:d4:ef:2d:a1:df:8a:
         21:65:5c:04:71:08:59:e3:c0:74:95:c5:8f:ee:f4:29:29:3b:
         b0:06:1a:3a:07:2b:0a:33:a5:2a:7f:54:7c:0f:d3:06:0e:a8:
         dc:b4:7f:8b:48:3c:23:3b:39:71:ed:0c:f4:a7:29:20:cc:e2:
         c3:ac:54:a1:ca:52:a0:99:ca:1a:f5:37:97:ac:e4:0f:c0:26:
         f9:6a:c1:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VYv2Vccbw2PHSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZmNkMjEwZTktYzk2ZS00ZDAyLTlhYmUtZmY2MDUwYWUzODc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs77BSlTfxSh8oHcs02rvPSpBBxEgGNxFun0+
aKmuFFGvnL+FBYcb1Ge/n+/lcbDfD9bQNYAYMVwxNOiWaqfKX2mnzq401NHOufbN
mj9m8+WRwaJpg16olhRgUZJJVnjZlFSJUs9EKQCc72qAJ3tMvBwvbJUqHAXRL+Is
60e9dsm4qxfkEqypxAzgV2FY2GHWpvLb366w7CixGbdHrdn3orhf+MuFUupNUJtD
U8BcqfIBnhb8xjTFfRpwXo2vwFWC+LHECYvu+LYMPaHhVz70sBWkiLKYLlifJsi6
M4e5ss91Zv+F0K2CvGQ2p9W4iLKKvGx9h6AiIi59DgMOSJ8Y+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBGqvbEGxKGFgZT5aPsh19wFoRYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWJjNTBmZjgtZWJiNC0z
YmFmLThlMWMtMjkzZGQ3ZWJhMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF0LQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjF5WO6MU2ete9WMIf9NGGM449bGkwSoO89AApvLbLxc4s4ybgrxyUD
l4iCEkoCpSAJ0lb3vUFzGfjUfDjZa6oWzsAq4zs2C0Dx8uArStbfIbInAVfGlMmW
XV/VU1QuCIfBXiJNPsykIcKb4zs+SMLrff8LjlzHw+spItc1O8OyFzxNqLXZPDnE
b1dbAhuw3G475olAXlnZnrXqZPnfUann7DE2y5Gx3n5sJu1r2NTvLaHfiiFlXARx
CFnjwHSVxY/u9CkpO7AGGjoHKwozpSp/VHwP0wYOqNy0f4tIPCM7OXHtDPSnKSDM
4sOsVKHKUqCZyhr1N5es5A/AJvlqwUU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:10 2025 by rpki-client