Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa
File:                     f1533c87-7d67-3280-8df4-89a705447f84.roa (raw, json)
Hash identifier:          FOXIJkYyD+U6AYPnU4XXYQcPzGd2ufb9G64rohxl0Vc=
Subject key identifier:   EC:BD:4A:EC:72:D8:2C:10:F2:ED:B6:3F:20:5D:72:76:BF:BC:6D:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584843B00E390A62AFD4AEE33C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa
Signing time:             Fri 20 Dec 2024 02:00:40 +0000
ROA not before:           Fri 20 Dec 2024 02:00:40 +0000
ROA not after:            Thu 20 Mar 2025 01:00:40 +0000
asID:                     20940
IP address blocks:        23.5.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:b0:0e:39:0a:62:af:d4:ae:e3:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 20 02:00:40 2024 GMT
            Not After : Mar 20 01:00:40 2025 GMT
        Subject: CN=c6f3b589-e621-4392-ac72-71466496a078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:75:bf:2d:2f:84:ce:57:2c:f9:08:de:66:bd:
                    f1:2d:b5:b2:bf:58:cd:c4:fc:5e:1b:81:f8:3a:a5:
                    12:4f:82:fe:e2:4d:f6:cb:60:8f:55:da:01:4d:3e:
                    95:12:c3:b2:53:dc:6b:d4:5b:57:f5:28:f8:07:39:
                    de:ef:a6:fa:ea:09:53:ed:ac:a2:0c:e2:ba:71:c6:
                    d9:78:3e:b9:f7:2c:e0:8f:5c:24:85:3d:46:37:aa:
                    86:2e:68:bb:13:f5:25:c6:02:c5:8a:34:6b:96:6a:
                    d5:db:be:a8:57:b9:86:b4:59:1e:88:60:08:9b:0d:
                    11:33:f4:6f:2e:ad:10:86:00:6a:00:85:b0:f5:15:
                    66:bb:27:5e:26:d6:7c:72:bc:44:52:a4:42:97:75:
                    92:34:f3:9d:b5:7a:af:f2:54:aa:14:9e:70:a2:ef:
                    9c:a8:76:d4:bd:8a:ee:f1:e5:c4:dd:c0:58:63:eb:
                    71:7b:8e:ec:98:e4:de:99:54:99:32:33:b2:c4:32:
                    85:cb:02:de:10:80:22:86:c4:f8:7a:97:65:fb:58:
                    cc:e2:dc:e3:bc:0e:14:8f:70:5b:c7:6c:63:b0:75:
                    12:63:ab:30:b4:ac:da:12:44:b4:cb:d7:93:fe:49:
                    32:ed:b1:7c:3b:d6:37:0d:dd:c8:0e:a6:9b:88:77:
                    2e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BD:4A:EC:72:D8:2C:10:F2:ED:B6:3F:20:5D:72:76:BF:BC:6D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1533c87-7d67-3280-8df4-89a705447f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.5.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:08:d6:24:05:e2:b0:fe:58:fc:57:29:ed:9c:d8:94:28:
         2b:17:6a:d9:9f:3d:98:03:ef:8c:bd:cb:4c:01:36:15:3f:56:
         e9:38:d2:f2:15:6a:47:2c:c3:b7:e8:7f:6b:e4:ac:1b:7b:24:
         66:a4:f5:fd:a0:28:b6:26:64:85:63:c9:3b:ee:41:15:ef:4a:
         33:40:ac:08:fa:6f:e4:73:56:91:4b:71:84:a4:6c:3b:95:84:
         64:79:94:0a:bf:e2:0a:68:7a:89:e6:2f:63:3e:2d:70:7b:41:
         5c:35:7f:6a:05:eb:ce:bb:a6:65:b8:8b:3e:4d:1d:09:4d:2b:
         ec:26:f0:f4:00:fe:e6:cc:2e:6d:79:14:36:cf:7e:8d:60:52:
         5a:47:c6:a1:a0:8b:e9:cd:6e:f0:02:15:76:fb:1b:70:fa:7d:
         9e:32:ef:af:b1:b7:89:9c:2b:06:e1:a2:88:94:32:0f:b7:4c:
         61:c0:b6:90:59:8e:76:7d:b2:aa:8e:0e:ba:9f:6f:d6:eb:1c:
         6e:73:20:d1:f1:d5:1c:b8:74:64:e0:7d:ad:d6:c7:b8:56:c3:
         df:17:1e:1f:57:e7:d8:bc:96:b9:d7:c3:25:d6:9e:65:f6:01:
         46:05:ee:c8:b1:ac:a0:a7:fd:8e:81:06:9a:5f:3f:40:fb:15:
         a9:be:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:52 2025 by rpki-client