Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa
File:                     5448a240-83e8-32ee-8db0-e26396fb2b3f.roa (raw, json)
Hash identifier:          YVDjlmpnd4p9/Of2acL2zIo9Z3ErYxFDZhUJ9KMrqZk=
Subject key identifier:   66:09:A4:48:9C:16:30:92:CD:54:7E:5B:C2:9B:3E:AF:35:5E:BF:BA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339F85D300F615CCD5AE600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.194.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f8:5d:30:0f:61:5c:cd:5a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=a4f3c49d-2bdc-43b8-94cd-182ef92b9025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:a2:70:f3:a1:73:2b:50:28:4b:6c:8e:36:
                    a1:62:44:f0:2a:c9:2e:71:a2:41:01:db:ee:d2:cb:
                    38:b9:58:83:09:39:86:12:8c:30:36:8f:9b:19:f6:
                    e6:d2:0b:d0:51:8c:97:ae:3e:87:6b:e5:a3:bb:a6:
                    18:c7:06:6a:e0:6e:dc:6f:ff:ce:b8:2e:46:6c:5b:
                    a8:71:db:8a:7e:68:c4:46:67:c4:fd:98:86:33:9a:
                    c3:b1:8b:95:7b:22:85:02:6a:25:56:2f:c9:c9:0f:
                    d1:d4:8a:03:d6:30:78:4a:53:5c:7f:69:3d:4c:1b:
                    c9:99:5f:11:b2:09:16:26:13:75:26:5e:28:a2:73:
                    22:95:30:70:10:83:f1:c1:18:0b:26:62:45:56:0d:
                    d0:0b:36:0f:61:ed:1e:54:ef:42:b4:b8:32:84:4a:
                    19:3a:30:fd:ab:b9:0f:1a:92:58:27:25:b8:c7:2c:
                    d1:a6:69:b1:2d:87:b7:a9:32:49:e4:41:89:97:79:
                    d5:b3:ea:fc:78:02:76:55:95:3b:02:5c:aa:25:4c:
                    3b:13:1e:68:f1:56:37:1d:e0:d1:63:5c:7d:db:a2:
                    8f:39:78:f9:91:fd:cf:4e:5c:77:3d:29:5c:d3:66:
                    2f:73:96:c7:46:92:d3:ac:f7:4f:54:54:3d:c6:19:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:09:A4:48:9C:16:30:92:CD:54:7E:5B:C2:9B:3E:AF:35:5E:BF:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5448a240-83e8-32ee-8db0-e26396fb2b3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ca:34:ea:c1:9d:26:d3:ea:fd:8d:3c:de:51:0c:c3:86:41:
         13:02:2f:b5:f2:d8:37:7f:f8:03:6b:96:a9:23:eb:02:9b:91:
         7f:80:5b:d5:90:2c:90:74:f2:0a:98:e6:37:9b:58:13:ae:55:
         3c:72:ac:19:d7:54:03:94:85:ed:51:f5:67:73:ce:8c:ea:f4:
         bc:2e:ba:b6:49:38:17:17:5b:ce:74:db:ec:3b:20:8c:7b:2a:
         aa:d2:8c:da:1b:33:8c:36:1e:8b:82:ac:23:15:ff:87:cf:b1:
         b7:d9:27:39:8d:42:40:c0:91:48:ef:c3:50:05:4b:75:7d:f5:
         0f:a0:42:0e:2f:57:83:bf:14:b1:13:d9:68:f0:f0:12:22:6a:
         56:e4:18:b8:13:01:86:d5:2f:66:7f:53:50:1e:85:9e:dc:09:
         24:04:f9:f0:88:39:43:d5:5d:fa:8f:01:bb:5f:74:cf:f0:c8:
         ec:55:9d:00:20:50:89:86:aa:9f:81:e4:26:2b:a2:9c:c0:f3:
         94:4d:f5:7f:de:f7:2a:6b:2d:d5:4e:8a:22:3b:ff:15:ef:70:
         c4:4b:26:0e:08:72:a5:4f:98:1c:03:5c:67:61:74:d3:67:ad:
         c9:a1:ff:b1:9b:82:0b:4d:13:74:c9:e4:2a:35:5d:c5:9c:a2:
         70:43:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----