Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6257e7-23cc-34e1-94e3-730821132113.roa
File:                     ef6257e7-23cc-34e1-94e3-730821132113.roa (raw, json)
Hash identifier:          tVl1cNgSp+Ff3qGIsr6oT6n3QPmUSViH/eFB0ZG2VkA=
Subject key identifier:   B7:D9:2E:B1:62:5E:A5:7F:20:D1:10:C9:26:88:8A:D9:08:EB:B0:B1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858487FB5EDDAD32A3A4B593616C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6257e7-23cc-34e1-94e3-730821132113.roa
Signing time:             Fri 10 Jan 2025 14:00:51 +0000
ROA not before:           Fri 10 Jan 2025 14:00:51 +0000
ROA not after:            Thu 10 Apr 2025 13:00:51 +0000
asID:                     20940
IP address blocks:        23.47.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:b5:ed:da:d3:2a:3a:4b:59:36:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 10 14:00:51 2025 GMT
            Not After : Apr 10 13:00:51 2025 GMT
        Subject: CN=066a844b-9675-46df-91d3-584314443601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:df:d1:f7:2e:d1:1a:b7:ad:c0:be:75:f6:
                    76:5f:81:02:0e:81:9a:8c:15:e9:1c:2f:11:7d:bf:
                    c4:4d:47:32:72:e5:eb:d4:87:41:1b:a5:73:a6:83:
                    2b:55:5a:80:5f:a6:68:84:9f:bc:91:cc:8d:de:ae:
                    2e:51:97:e3:7a:ac:e6:6b:fe:c8:64:b3:c9:f0:bb:
                    2a:d4:38:0c:cf:f8:35:6a:65:48:31:0e:ff:77:21:
                    43:c3:9b:7e:98:21:55:c8:34:60:c0:8b:6a:12:61:
                    48:1a:a4:d0:04:f0:0b:07:fb:00:ee:af:3c:eb:79:
                    04:4a:fc:67:51:8a:ba:a7:ed:ef:79:51:bb:51:1a:
                    2d:fd:84:00:aa:42:82:ab:15:c1:83:e4:2e:ff:08:
                    69:46:ef:a4:a7:95:ea:11:00:22:c5:48:c3:4b:ea:
                    6d:b1:d7:1b:b2:93:17:69:6f:8f:d2:1d:45:44:40:
                    a2:81:b5:73:8c:49:da:04:97:1e:18:b4:ca:a4:83:
                    a3:7f:2c:4e:cb:33:0b:6d:05:f7:c0:fb:b9:da:6c:
                    98:c7:ee:37:63:53:08:42:47:30:93:1e:fd:7f:d9:
                    20:25:42:91:83:bb:e8:66:d2:90:f9:04:db:b5:92:
                    de:c0:f0:e1:00:35:e2:7f:2f:fa:0d:55:cf:15:0b:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:2E:B1:62:5E:A5:7F:20:D1:10:C9:26:88:8A:D9:08:EB:B0:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef6257e7-23cc-34e1-94e3-730821132113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:95:54:f5:66:e2:0e:7a:81:48:61:c7:d3:48:cd:5f:14:b7:
         ab:54:74:89:e5:6e:ae:d6:52:ab:9a:d0:47:be:fd:e4:ab:f5:
         e2:98:d1:41:2a:67:7b:6b:f1:5f:5d:89:0e:81:30:38:0d:51:
         0b:a1:ff:43:f3:7c:e3:d4:0d:81:8d:84:90:e8:54:64:04:7e:
         d1:30:05:48:87:de:f2:44:06:92:47:2f:67:59:c8:f8:59:b5:
         20:f0:8a:f4:82:ba:e6:07:9a:72:35:d8:d2:6a:75:a2:db:2b:
         c2:2f:59:c2:10:6b:79:47:81:aa:3b:ed:7a:59:92:3f:9c:b0:
         90:72:5a:8f:80:7f:75:c7:5b:79:f9:9d:cd:2e:91:65:f4:74:
         7e:93:56:a5:d5:6e:a3:5d:20:24:e5:b0:71:6b:c1:60:40:87:
         61:58:e6:ed:03:53:3e:b6:da:a5:9e:07:af:74:51:95:f9:39:
         9a:cb:f9:61:86:e5:fc:5e:bb:77:47:85:54:b5:e6:26:08:45:
         9b:bf:9c:66:4b:ce:ad:80:17:48:ba:3f:fc:4d:39:0f:a8:81:
         c1:d6:bf:40:9f:b6:e0:d3:10:bf:0c:be:3c:03:d2:0f:4f:58:
         fe:59:a2:4f:95:e1:9c:21:82:56:07:da:f2:93:7d:e6:58:dc:
         3e:2d:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:13 2025 by rpki-client