Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa
File:                     f36c3afe-417f-3e71-b37d-a2433d90da74.roa (raw, json)
Hash identifier:          bvPZK0cbbFBGrZkXSC6JD2iMoKKCmJC4ZXfxJsKGvxo=
Subject key identifier:   A8:A8:8D:44:7E:8F:DC:99:B6:F4:74:49:8D:36:BF:89:01:56:64:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858483F5556867B78BF953206A5E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa
Signing time:             Wed 18 Dec 2024 12:34:46 +0000
ROA not before:           Wed 18 Dec 2024 12:34:46 +0000
ROA not after:            Tue 18 Mar 2025 11:34:46 +0000
asID:                     16625
IP address blocks:        23.46.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:55:56:86:7b:78:bf:95:32:06:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 18 12:34:46 2024 GMT
            Not After : Mar 18 11:34:46 2025 GMT
        Subject: CN=256f7c87-36b2-400a-b7be-ad286cc1e768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1b:4f:73:4a:c0:05:c7:b5:66:80:05:31:cf:
                    40:a2:bb:de:94:a5:37:3e:da:08:e0:1b:31:1c:64:
                    33:03:57:c6:8f:cb:f8:a6:a9:92:69:7f:df:02:14:
                    c1:46:cc:c6:da:07:ab:a4:4a:25:c1:f8:5e:a3:71:
                    43:c1:5b:20:48:e6:5f:19:97:4e:b8:2e:4b:42:97:
                    ed:94:43:1a:35:e1:fb:f7:3c:dd:fb:23:4c:67:e7:
                    06:09:eb:b8:6b:b6:a4:87:55:27:70:9c:d7:73:c6:
                    d6:bb:ff:5d:2e:4c:0a:23:af:d1:71:52:8b:21:67:
                    25:91:2e:20:39:63:22:d0:cf:9c:57:e4:fe:94:83:
                    23:57:5b:9f:28:68:a2:44:b1:91:ea:84:47:09:9b:
                    8d:7b:c1:2e:b2:38:ad:82:e1:ac:aa:7a:30:ca:67:
                    cf:a8:f0:ea:9f:30:ca:ad:81:93:3d:82:6d:5a:9f:
                    1b:9d:57:46:07:a2:da:08:56:a2:ff:41:7c:39:c4:
                    2c:a0:83:37:a2:27:54:c6:ea:08:55:ee:49:92:1e:
                    bf:fe:63:66:25:63:09:46:ca:57:35:a4:cc:04:48:
                    bc:08:b9:67:37:1f:c2:6e:a5:ce:ec:36:1d:6b:57:
                    7f:2f:89:f7:e3:c9:96:7b:01:8e:9a:29:ac:9f:92:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A8:8D:44:7E:8F:DC:99:B6:F4:74:49:8D:36:BF:89:01:56:64:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f36c3afe-417f-3e71-b37d-a2433d90da74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:0b:e7:86:9b:dc:ec:75:c0:26:f7:f8:b3:7c:55:c2:15:
         0d:5e:a0:8b:5c:89:a6:66:36:30:c4:42:4c:32:fb:0b:02:d7:
         fb:bd:fa:45:a2:f0:d8:a3:45:42:d8:53:60:c6:7c:19:24:43:
         b2:78:71:af:2d:ec:31:70:6a:df:ae:3e:cd:59:eb:88:76:39:
         a3:7e:a0:21:9e:5a:9f:cf:29:fd:95:c0:7f:ef:f6:fe:ef:30:
         38:c5:24:bd:a5:c3:ee:58:88:46:70:b4:59:88:f6:10:a1:27:
         c9:11:de:ac:fd:42:63:f3:64:ed:05:fa:22:52:b8:cc:25:54:
         f9:ba:2f:93:34:c8:2e:49:76:82:65:60:0b:66:b1:0f:91:08:
         72:e7:2c:92:64:f0:c0:c4:1f:c6:5e:bd:c5:82:b7:8c:77:b7:
         f4:4d:8c:f6:64:e1:ee:c5:95:f3:41:aa:42:f2:cb:e9:77:26:
         51:59:aa:c3:e7:1c:ec:00:9f:1b:42:87:d6:d7:9d:ec:13:ca:
         e2:ee:3a:55:d8:aa:01:d7:e3:1c:fb:1d:5b:e8:95:ce:7b:12:
         ab:2c:14:a6:3c:4d:95:1c:01:82:c5:08:fa:48:f3:b9:65:d2:
         ba:a7:02:4d:3e:ac:01:74:64:8b:e3:86:18:15:01:0f:98:33:
         12:07:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----