Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa
File:                     c44601f2-05d2-374b-9533-52b328c9c474.roa (raw, json)
Hash identifier:          fUpbcC5TRDeuxdMAI1j6Y76BLhehHsvCcDVTEJfabYQ=
Subject key identifier:   81:C0:6A:97:09:62:30:3A:2C:74:6A:D8:F0:20:55:1E:0A:A2:4E:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339F9A0D087CE2782057F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16625
IP address blocks:        23.194.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f9:a0:d0:87:ce:27:82:05:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=3cfdccc4-4d4d-44d6-b4d4-53da123b915b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fa:0a:d1:7f:1c:02:d1:c1:25:83:66:71:5f:
                    fb:f9:b7:f8:a2:f4:20:76:d6:aa:9c:74:86:99:63:
                    94:29:d0:79:f6:a0:03:7f:c4:c5:c0:09:4b:f8:6d:
                    a3:19:76:55:27:83:ea:c0:a9:6f:d6:a1:06:d6:d4:
                    6f:f0:0d:d2:18:3a:4b:84:13:58:ef:d1:bc:c4:70:
                    af:14:d5:62:14:15:1a:d3:62:48:ed:a2:36:63:6f:
                    b9:76:96:18:b3:24:8c:36:86:54:c9:0b:31:ab:e6:
                    86:47:47:00:9a:0f:f6:04:0d:2c:1d:d1:d8:75:db:
                    07:2a:7c:bc:fc:69:30:59:3b:53:66:c3:04:b2:fb:
                    fd:18:f4:20:b3:ba:3f:cf:4d:14:08:52:86:36:2c:
                    91:ac:12:8f:e7:5b:02:11:e0:78:90:a7:48:af:da:
                    09:64:0c:3e:1e:55:e2:5f:09:93:47:92:04:3f:93:
                    94:4a:e3:0f:68:00:2a:d0:3f:a9:70:96:b7:91:b6:
                    16:a8:9d:89:57:6f:e5:e2:82:f5:29:3a:fc:e2:25:
                    6b:b0:ec:33:a7:ec:3b:22:2d:ac:01:c8:c2:17:b9:
                    08:d1:c6:87:08:24:dc:60:d8:41:a6:bf:9e:10:28:
                    bb:66:0d:ae:0d:50:30:50:9e:fd:4a:a2:de:0d:91:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C0:6A:97:09:62:30:3A:2C:74:6A:D8:F0:20:55:1E:0A:A2:4E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c44601f2-05d2-374b-9533-52b328c9c474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:7f:00:64:fb:08:67:75:86:eb:7b:9c:8b:c2:a8:88:e2:
         c4:82:c6:fd:bb:b0:fb:b0:80:95:66:ae:dc:da:b3:08:c1:c9:
         8d:8b:e4:ec:24:71:64:d7:d9:01:bf:1e:78:d4:ba:87:69:7c:
         90:ea:86:d0:ec:cd:f3:66:9c:5b:7c:c0:b2:25:8f:e7:28:7b:
         c2:7c:98:2c:c3:a9:a1:e5:1a:92:da:fb:77:64:7c:4f:19:03:
         41:68:75:c9:e2:59:fb:56:16:6d:a9:3e:a1:7b:70:34:09:51:
         92:c6:69:4d:ca:18:56:58:b3:27:41:df:88:f4:a3:3d:21:96:
         a1:a2:ad:50:2a:56:f5:34:25:41:ef:fa:80:7d:06:9d:67:47:
         9d:18:b2:76:fd:f5:10:61:85:9a:6e:af:9d:13:d5:2a:aa:1e:
         a5:ce:b2:ed:53:e8:dd:26:42:2d:60:ee:6d:e3:79:5f:44:28:
         73:97:86:c9:1a:3e:df:c3:4e:e5:b4:93:09:10:b2:54:f7:19:
         50:a9:63:9c:b6:a9:c3:1f:ce:76:c8:9d:28:7f:72:82:ae:e9:
         ae:09:9a:c7:50:86:66:20:2c:a6:2a:f8:06:4c:e6:01:16:84:
         40:55:64:7c:74:97:52:cb:fd:f6:e1:f8:29:82:73:0c:4a:24:
         4b:58:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----