Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
File:                     5d90966f-a528-3b8b-8dc3-ede422faaf58.roa (raw, json)
Hash identifier:          BtRKZeW1d65JPp0hMIdJIxQen0enX2EbcZnotGubf9w=
Subject key identifier:   AA:3C:03:AC:B8:40:BC:FC:5C:EF:6D:64:5F:B5:82:39:DB:7D:4F:11
Certificate issuer:       /CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
Certificate serial:       010D0C9F432858480644FA0C92F48AB536009300
Authority key identifier: C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     397592
IP address blocks:        23.134.112.0/24 maxlen: 24
                          2620:13f:5000::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:fa:0c:92:f4:8a:b5:36:00:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=79968496-1d01-44c8-9c93-7cec1b392ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:09:46:da:5a:45:62:d2:c1:dd:29:62:8e:
                    fe:41:35:29:1f:6f:c0:3c:2d:83:9f:b5:62:82:9c:
                    02:af:c9:cd:a6:c0:b0:d9:68:b1:2b:fe:c1:16:9d:
                    a2:87:0b:a9:44:2a:d3:bd:da:73:e5:5a:23:1b:08:
                    67:3b:67:b9:9d:07:f6:ea:d8:77:ff:38:e7:e2:5e:
                    9b:27:9a:de:35:d6:ef:e5:aa:60:86:48:21:2e:ca:
                    57:8c:77:57:f5:dd:4d:03:8a:17:14:9a:9d:80:db:
                    bc:fd:41:b3:e5:49:a9:2d:60:d0:55:29:66:13:a3:
                    58:96:7e:8d:2e:5a:bc:d5:7f:6e:78:68:ea:da:d9:
                    bb:ff:8f:fc:b2:b5:97:7e:9a:1d:e1:2b:86:65:9f:
                    43:87:6c:db:49:2c:fb:58:52:f5:fb:a4:c9:f7:fe:
                    a6:83:65:e1:e6:05:07:5f:a6:89:1d:f8:62:e1:a8:
                    5c:2b:d2:13:ca:63:10:1a:31:58:7e:d0:b8:d8:4c:
                    33:c7:33:4b:b5:e1:32:1d:ae:47:e6:05:9d:35:66:
                    ca:f2:52:b5:e1:dc:54:b7:50:71:19:11:c4:0b:6f:
                    0c:bc:a0:42:d9:47:4e:de:08:8e:81:b5:27:46:93:
                    58:2a:d4:04:fa:96:9d:38:0f:51:1a:ff:0d:af:81:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3C:03:AC:B8:40:BC:FC:5C:EF:6D:64:5F:B5:82:39:DB:7D:4F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl

            X509v3 Authority Key Identifier:
                keyid:C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.112.0/24
                IPv6:
                  2620:13f:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:ff:75:11:2c:28:01:bf:cd:f1:63:7e:13:97:5b:98:b8:
         a6:af:82:1d:89:29:9d:26:51:2a:19:35:99:c6:5e:0e:d0:37:
         29:63:48:31:c5:b0:d0:d8:bf:3c:9b:87:8b:3c:02:f6:e7:bc:
         1b:f9:9c:7a:4c:03:07:4f:7f:9e:1c:58:43:78:53:4e:39:94:
         24:a7:e4:f5:3a:ac:98:9b:c2:f6:1f:3c:34:a1:98:8a:25:55:
         6a:5d:e4:60:88:31:fd:9d:f7:c7:67:08:df:eb:e7:76:9f:01:
         bc:f5:96:20:a7:f0:82:95:a2:86:56:cb:8d:69:06:91:e7:ce:
         a4:96:6a:98:c8:31:68:96:85:2a:81:5c:be:81:9d:4f:14:2c:
         d3:fc:a4:88:c8:72:dd:e1:49:30:c5:61:c5:52:a9:e2:41:46:
         dd:28:f0:86:ca:09:1c:36:64:3b:9e:3c:a8:d3:80:5f:ef:26:
         84:d1:ad:15:31:08:16:6d:22:fd:cd:72:1e:4f:61:7f:d2:91:
         f8:c3:65:49:30:98:b5:9d:ad:48:dc:eb:45:f8:d5:4d:7d:3b:
         95:de:d4:93:9b:3a:0a:a6:da:ec:2c:6d:af:35:86:f3:c5:fd:
         e1:f7:bc:39:64:34:f3:ce:d7:bb:09:b3:50:1f:d4:1b:8e:77:
         5d:7c:b5:67
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEgGRPoMkvSKtTYAkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRhMWY3NzgtYWVjZC00YmI4LWE1NDUtYjhjYjRiMThi
M2ZlMB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
Nzk5Njg0OTYtMWQwMS00NGM4LTljOTMtN2NlYzFiMzkyY2UxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ0JRtpaRWLSwd0pYo7+QTUpH2/APC2Dn7Vi
gpwCr8nNpsCw2WixK/7BFp2ihwupRCrTvdpz5VojGwhnO2e5nQf26th3/zjn4l6b
J5reNdbv5apghkghLspXjHdX9d1NA4oXFJqdgNu8/UGz5UmpLWDQVSlmE6NYln6N
Llq81X9ueGjq2tm7/4/8srWXfpod4SuGZZ9Dh2zbSSz7WFL1+6TJ9/6mg2Xh5gUH
X6aJHfhi4ahcK9ITymMQGjFYftC42EwzxzNLteEyHa5H5gWdNWbK8lK14dxUt1Bx
GRHEC28MvKBC2UdO3giOgbUnRpNYKtQE+padOA9RGv8Nr4H3ZwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFKo8A6y4QLz8XO9tZF+1gjnbfU8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGEx
Zjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNiNGIxOGIzZmUvNWQ5MDk2NmYtYTUyOC0z
YjhiLThkYzMtZWRlNDIyZmFhZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRhMWY3NzgtYWVjZC00YmI4LWE1
NDUtYjhjYjRiMThiM2ZlLzhkYTFmNzc4LWFlY2QtNGJiOC1hNTQ1LWI4Y2I0YjE4
YjNmZS5jcmwwHwYDVR0jBBgwFoAUws5R985w6ZOvOqtng4XVfwJI6c8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGExZjc3OC1hZWNkLTRiYjgtYTU0NS1iOGNi
NGIxOGIzZmUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4ZwMA8E
AgACMAkDBwQmIAE/UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhc//dREsKAG/zfFjfhOXW5i4pq+CHYkp
nSZRKhk1mcZeDtA3KWNIMcWw0Ni/PJuHizwC9ue8G/mcekwDB09/nhxYQ3hTTjmU
JKfk9TqsmJvC9h88NKGYiiVVal3kYIgx/Z33x2cI3+vndp8BvPWWIKfwgpWihlbL
jWkGkefOpJZqmMgxaJaFKoFcvoGdTxQs0/ykiMhy3eFJMMVhxVKp4kFG3SjwhsoJ
HDZkO548qNOAX+8mhNGtFTEIFm0i/c1yHk9hf9KR+MNlSTCYtZ2tSNzrRfjVTX07
ld7Uk5s6Cqba7CxtrzWG88X94fe8OWQ0887XuwmzUB/UG453XXy1Zw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:55:48 2025 by rpki-client