Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa
File:                     ec894fa0-ab6c-3824-a764-55b346867980.roa (raw, json)
Hash identifier:          PI7rMzxEAXPyjqNHgw+pX0eq3+dI7lHOAI4zqHsQXCs=
Subject key identifier:   86:DF:4B:71:C6:08:95:F0:F5:06:3F:51:23:6E:C7:13:FF:88:B1:8D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584883E5CDF7EFFED8A814FE8F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa
Signing time:             Sun 12 Jan 2025 02:00:38 +0000
ROA not before:           Sun 12 Jan 2025 02:00:38 +0000
ROA not after:            Sat 12 Apr 2025 01:00:38 +0000
asID:                     16625
IP address blocks:        23.51.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:e5:cd:f7:ef:fe:d8:a8:14:fe:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 12 02:00:38 2025 GMT
            Not After : Apr 12 01:00:38 2025 GMT
        Subject: CN=48356384-7484-4f81-9577-f20c6f917576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:a9:29:9a:eb:ab:30:50:5f:8c:b4:6e:01:
                    77:3f:97:39:56:0e:3c:43:c6:e1:0c:0d:cd:75:2d:
                    0a:b2:1e:51:0b:9b:e7:3d:56:42:51:7d:0c:84:6f:
                    52:64:78:68:97:54:80:94:b5:1b:08:35:7c:2f:ab:
                    f7:e3:e7:30:44:01:85:11:f0:f1:10:21:c8:ee:de:
                    1c:28:90:36:d7:b3:75:c6:b9:08:0e:ba:41:88:82:
                    82:5e:8d:71:ae:ff:85:ea:0a:ca:03:a5:6b:2a:30:
                    a5:b2:ef:f1:cb:74:1a:a9:35:3c:2f:58:c6:df:36:
                    45:72:3b:3b:92:ec:84:c2:d1:d5:86:ff:af:a4:0b:
                    46:05:2b:d9:dc:f9:88:72:e9:83:56:08:f1:ec:07:
                    38:56:d4:a0:c5:99:a3:a3:38:ee:5f:ac:a3:c7:0a:
                    4b:6b:0a:08:7d:5b:53:9d:10:42:3b:d8:41:db:59:
                    06:54:40:8a:93:80:55:5b:f9:c6:a6:22:36:10:08:
                    29:bb:28:ad:54:49:00:8c:41:9c:1b:83:38:aa:0f:
                    31:cf:a7:e7:75:8e:6e:01:a2:fe:76:d6:96:90:ae:
                    9c:f2:63:35:aa:d7:5f:42:28:7e:90:c2:19:52:4e:
                    0f:65:f2:4e:75:38:8d:d1:0e:88:1c:fb:b6:01:9f:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:4B:71:C6:08:95:F0:F5:06:3F:51:23:6E:C7:13:FF:88:B1:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.51.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:de:76:ef:76:c3:96:0d:9c:2e:ed:59:7d:64:05:ed:31:
         e4:d0:30:b2:91:d5:89:db:f5:ed:d4:44:2d:e4:fe:77:b7:af:
         b5:42:7c:74:70:e4:22:cb:a6:6d:07:08:b5:06:b8:38:8f:10:
         eb:4d:c9:b6:56:57:b2:38:c9:87:4b:2e:25:ed:0f:0c:e2:88:
         e3:e1:bb:01:c8:6d:1a:98:3e:26:ff:8a:9e:d2:77:ef:da:81:
         6e:85:9d:c3:7f:63:a3:f1:fa:b6:a7:62:0a:61:78:ba:83:7e:
         2f:43:7c:3d:7f:d2:be:e4:6b:f3:ed:e8:da:3a:08:e0:d1:89:
         cd:6f:34:2a:76:1e:7c:ff:32:07:f3:86:41:42:12:b4:83:4e:
         af:25:5d:4d:b2:4e:a0:0f:6d:d6:1d:3d:d5:64:ff:57:a7:94:
         f8:45:9f:f9:24:94:42:c6:be:56:11:29:31:bf:77:c7:78:89:
         7f:c4:9a:81:2b:49:35:73:44:cd:ad:5c:41:dc:6b:0e:66:91:
         5a:1e:70:a1:6a:8e:1a:bb:8b:ee:f4:2c:30:85:ba:25:d2:9a:
         74:95:1f:d6:ab:c2:f1:40:4d:fc:b0:58:27:66:a6:b7:0f:bc:
         3c:a7:55:9d:bf:d5:c9:43:c6:ed:4f:f9:d0:5c:14:52:44:af:
         ac:05:63:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5c337/7YqBT+j0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NDgzNTYzODQtNzQ4NC00ZjgxLTk1NzctZjIwYzZmOTE3NTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzypKZrrqzBQX4y0bgF3P5c5Vg48Q8bhDA3N
dS0Ksh5RC5vnPVZCUX0MhG9SZHhol1SAlLUbCDV8L6v34+cwRAGFEfDxECHI7t4c
KJA217N1xrkIDrpBiIKCXo1xrv+F6grKA6VrKjClsu/xy3QaqTU8L1jG3zZFcjs7
kuyEwtHVhv+vpAtGBSvZ3PmIcumDVgjx7Ac4VtSgxZmjozjuX6yjxwpLawoIfVtT
nRBCO9hB21kGVECKk4BVW/nGpiI2EAgpuyitVEkAjEGcG4M4qg8xz6fndY5uAaL+
dtaWkK6c8mM1qtdfQih+kMIZUk4PZfJOdTiN0Q6IHPu2AZ9dyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIbfS3HGCJXw9QY/USNuxxP/iLGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM4OTRmYTAtYWI2Yy0z
ODI0LWE3NjQtNTViMzQ2ODY3OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzM0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+g3nbvdsOWDZwu7Vl9ZAXtMeTQMLKR1Ynb9e3URC3k/ne3r7VCfHRw
5CLLpm0HCLUGuDiPEOtNybZWV7I4yYdLLiXtDwziiOPhuwHIbRqYPib/ip7Sd+/a
gW6FncN/Y6Px+ranYgpheLqDfi9DfD1/0r7ka/Pt6No6CODRic1vNCp2Hnz/Mgfz
hkFCErSDTq8lXU2yTqAPbdYdPdVk/1enlPhFn/kklELGvlYRKTG/d8d4iX/EmoEr
STVzRM2tXEHcaw5mkVoecKFqjhq7i+70LDCFuiXSmnSVH9arwvFATfywWCdmprcP
vDynVZ2/1clDxu1P+dBcFFJEr6wFY0k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:30 2025 by rpki-client