Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5c68c09-6e4e-3eb3-bdc1-b100e82209fe.roa
File:                     a5c68c09-6e4e-3eb3-bdc1-b100e82209fe.roa (raw, json)
Hash identifier:          mZLIWYxRaVoJU8ByM4AC1lS27ccisOMYX8UK34l0JsA=
Subject key identifier:   4C:B0:C8:73:77:D1:1C:AB:64:B3:E5:DE:F5:3E:EF:97:23:FA:57:0F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858496E4991DE94E01DEDB9C80A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5c68c09-6e4e-3eb3-bdc1-b100e82209fe.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     20940
IP address blocks:        23.62.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:91:de:94:e0:1d:ed:b9:c8:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=5727f560-0893-45bb-a7f1-ede075a65013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:bd:c4:43:88:0b:b7:e7:b9:c9:25:a5:f7:
                    0d:8e:c6:ef:0f:3e:49:ee:80:49:59:da:df:66:ac:
                    10:74:98:3d:75:c5:b6:90:a5:b9:73:fe:1e:09:eb:
                    cb:da:cb:59:be:2c:10:ab:b5:89:08:29:b1:88:06:
                    27:1d:6a:6f:b4:b5:84:2c:ad:ac:d4:7d:4f:08:7d:
                    43:b0:bd:ad:0a:47:3d:21:9b:28:ca:fb:5a:1c:66:
                    5c:5c:91:ae:0b:35:68:81:69:ef:70:db:ae:87:3c:
                    1a:ff:50:03:22:23:14:9e:74:33:16:6c:05:ea:a1:
                    df:cb:48:b6:1f:5e:f5:67:2b:8e:18:87:49:77:f2:
                    17:e4:34:7c:a7:49:fe:d1:c1:80:f4:22:36:5e:0e:
                    b0:08:fa:0f:74:71:e2:4a:88:e4:74:09:47:1d:33:
                    78:c5:aa:51:3d:ca:e9:14:21:a2:43:3e:7b:7d:27:
                    19:d6:81:e0:3e:9d:34:8f:68:e2:92:55:44:3f:3c:
                    fc:4c:80:5c:39:56:04:14:f8:bb:08:cd:4d:35:d4:
                    70:98:4a:6e:44:7e:fc:fe:d9:f4:98:23:9e:10:af:
                    e3:c2:74:37:07:d1:2d:23:b1:e5:93:f8:c1:e8:58:
                    26:85:27:63:e6:f6:dd:63:6a:b1:63:d2:a6:5b:34:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:C8:73:77:D1:1C:AB:64:B3:E5:DE:F5:3E:EF:97:23:FA:57:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5c68c09-6e4e-3eb3-bdc1-b100e82209fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:e1:5c:6d:e6:1e:82:a0:e9:b9:7c:33:d9:92:1d:ee:0f:
         23:5d:93:d9:a3:4d:c4:9f:09:fc:26:63:80:76:a6:18:36:28:
         f8:1d:a5:56:d6:90:9a:a1:39:a5:72:24:50:c8:b4:00:ce:bf:
         cd:91:c7:89:74:aa:1d:50:4f:e5:d0:8d:ff:b4:82:07:76:08:
         80:9e:5c:91:2e:8f:68:92:2a:a7:9c:df:60:04:5e:55:02:1f:
         3a:7a:96:59:ed:5b:04:d8:6e:d0:08:72:f0:84:38:39:e0:3d:
         8a:35:ec:be:51:4e:75:fa:ec:e4:47:b7:3c:67:8f:4e:a0:c6:
         d5:66:d1:23:3c:2b:e4:df:31:ed:c6:80:5d:99:14:37:e0:80:
         1f:32:8e:92:f3:5b:30:da:49:a2:57:df:fb:c9:fd:e6:be:d1:
         55:d5:c1:48:ed:b0:94:db:63:d2:85:19:53:b1:43:6f:40:79:
         65:bb:9e:26:d4:7b:d1:6e:86:00:14:b1:ac:83:43:60:ae:5c:
         be:f7:65:b3:c4:84:a8:65:9d:63:39:a6:4a:97:e0:80:09:e8:
         e0:23:8f:49:23:75:ab:4f:99:08:70:43:1b:42:58:6a:68:92:
         fb:05:89:be:c5:03:c1:6a:7b:7d:fc:66:9c:5c:a3:af:3f:88:
         15:20:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:31 2025 by rpki-client on console.sobornost.net