Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/75befe69-0a70-378d-bf4e-178813045f8e.roa
File:                     75befe69-0a70-378d-bf4e-178813045f8e.roa (raw, json)
Hash identifier:          el4lmHsCcL52y0EP1EHTHjg61YTbDqoTRJZDGgOXEUU=
Subject key identifier:   A1:70:5E:F2:3F:56:69:BC:A7:09:20:E2:8B:EF:56:1A:B3:68:AE:63
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584834555F4DEF67B2EDA669F060
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/75befe69-0a70-378d-bf4e-178813045f8e.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        23.227.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:5f:4d:ef:67:b2:ed:a6:69:f0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=38a0b9dd-c8c3-456f-89e4-e6bca526f0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:7c:f1:8c:08:e5:54:fc:3f:3f:95:48:60:
                    1b:d4:fb:a3:51:68:af:65:d5:2d:c5:fd:26:e6:21:
                    3b:0e:0c:10:4b:95:2d:77:64:79:5b:0b:a6:41:eb:
                    c2:0f:67:63:ab:50:de:cf:e6:5c:0d:b8:6a:7e:09:
                    f1:68:d6:fd:ef:67:ee:e9:e0:d0:e2:65:43:3c:a4:
                    b1:c8:99:48:23:15:bd:dc:97:5c:d4:0e:72:1d:41:
                    4a:b5:3f:75:63:89:fe:a6:e2:7b:b9:b7:b0:56:ac:
                    53:a9:7f:8d:93:4f:ef:97:9d:90:4a:5d:fd:09:a7:
                    ff:11:c1:a8:f0:42:3e:e1:7f:26:5a:08:8d:b1:ec:
                    56:02:8a:d4:48:1f:bc:cb:b1:d1:d9:ff:c6:e8:aa:
                    d1:e9:91:56:7f:6b:46:46:b5:ac:88:93:47:05:3d:
                    9c:dc:f5:b9:0a:b8:74:59:5f:02:0c:e1:8f:bb:50:
                    c1:26:1e:ef:fe:a1:9f:51:1a:8a:d7:6d:bc:0c:d4:
                    17:15:a8:b2:15:f8:74:0c:a2:5a:68:bd:3a:00:40:
                    65:19:bf:9a:ad:a9:9e:c5:6f:69:08:b6:06:43:6b:
                    8b:22:9b:1b:99:5c:ee:c6:0f:fa:87:ff:b4:e4:9a:
                    5c:6f:2e:4a:56:3d:89:9f:b0:43:7c:59:ca:41:09:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:70:5E:F2:3F:56:69:BC:A7:09:20:E2:8B:EF:56:1A:B3:68:AE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/75befe69-0a70-378d-bf4e-178813045f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:21:52:e3:50:0e:06:83:f0:26:3c:0b:c1:a5:2a:d7:c9:c4:
         d7:05:43:02:62:8d:ce:c9:30:7e:bf:b5:7d:ca:22:a7:30:d1:
         9c:49:fd:3e:1c:1b:19:70:3d:4b:c6:75:e4:5a:74:c0:ee:97:
         7d:dc:6e:7f:65:b0:1d:c2:1b:e0:15:04:6b:6b:f7:18:b5:c7:
         a0:f6:6b:ab:c4:91:5f:0f:11:a7:92:2e:16:91:47:a1:2b:b6:
         97:7e:6d:be:9e:08:eb:76:18:61:fb:45:bc:7e:31:5e:a8:c5:
         7a:a6:d0:6e:c0:1f:2a:56:4d:67:ac:42:b6:ba:1d:71:b5:50:
         84:1a:8e:b9:51:2d:01:cb:39:b1:97:44:c6:55:c8:fd:cf:ae:
         46:5c:85:59:72:97:12:6f:29:cc:ea:d7:75:48:a2:2e:d7:13:
         fa:b3:e2:ac:57:4e:1a:83:aa:48:3e:ee:c7:10:d2:8d:31:1e:
         ab:d6:e8:1b:46:86:15:a0:a0:0e:a6:46:b7:77:c0:5d:23:6d:
         35:ae:a8:0d:d0:90:b7:69:3b:09:20:89:9f:91:80:13:38:0f:
         44:7f:3d:65:83:11:47:50:d4:eb:c3:58:f1:58:99:ad:d5:2e:
         32:7b:aa:45:c9:d1:df:c5:86:57:ef:42:45:04:a5:eb:bd:d1:
         9c:95:66:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:32 2025 by rpki-client