Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa
File:                     d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa (raw, json)
Hash identifier:          EL/Vh7VdiW3GC2i/iysi91swY3yStzwNqMywU8ytnkk=
Subject key identifier:   8B:56:1A:F3:4F:A3:98:42:A7:F6:76:9B:CB:1D:26:47:37:3B:C8:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849833A0CE56038BD37FD225B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.195.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:0c:e5:60:38:bd:37:fd:22:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=d1e47bad-1b58-419e-9eba-3e613c97c27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:74:de:90:a5:92:5a:74:6d:02:63:b5:0b:2e:
                    c7:2b:6e:76:75:b8:a9:ee:ba:6a:b0:88:4d:c8:a4:
                    71:82:62:5c:25:ac:79:da:06:3f:7a:6c:11:a9:61:
                    5d:b1:28:f0:3a:13:db:f7:97:91:07:9b:3a:8b:c6:
                    c0:91:32:12:bf:4b:cf:b2:0b:e2:90:e3:98:51:0c:
                    c5:02:b5:15:c3:cd:9e:db:1a:84:70:0c:39:3e:b8:
                    3f:c0:2f:8b:b9:3d:f9:8c:3b:10:dc:e9:7c:82:44:
                    17:87:06:48:93:c1:10:e6:bc:b7:40:4a:74:d0:68:
                    0f:36:f5:f1:e1:07:a6:71:24:db:1a:a9:a9:38:f7:
                    2f:60:ac:f5:ae:13:7e:b2:eb:a3:33:90:a1:16:04:
                    1a:40:fc:53:71:31:ca:dd:a8:c0:5a:8e:89:76:e3:
                    a8:98:81:7a:dd:b6:67:1d:72:da:b9:35:55:70:78:
                    d7:1d:f7:dd:fd:31:02:cd:7d:d1:b8:45:d9:8e:ea:
                    d7:ce:75:cd:0e:41:1f:d9:af:2c:f2:1f:d7:b9:b3:
                    14:74:5d:0c:80:bb:30:87:d4:5b:ad:07:f5:df:c6:
                    dd:f7:e8:4b:be:0a:7f:8e:33:ef:93:85:db:bb:4b:
                    74:ea:7c:15:b1:26:58:7a:07:dd:eb:9f:7d:1f:b7:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:56:1A:F3:4F:A3:98:42:A7:F6:76:9B:CB:1D:26:47:37:3B:C8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4430742-cad1-3759-a6d0-6fde7b7f1fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:49:32:0a:7f:95:ac:22:87:76:7e:81:27:53:4b:50:1f:93:
         02:d6:e0:ea:87:70:a9:4d:5b:ed:f2:c6:b5:30:1b:c9:d5:33:
         08:5e:eb:e9:4b:a6:3e:fa:34:9c:6c:58:1e:7f:61:2e:d9:dc:
         02:b4:23:78:5e:3b:a6:00:88:41:bf:8c:c4:05:fe:65:be:42:
         81:ae:54:c3:92:27:6f:cc:15:b4:e7:c4:56:90:f9:09:98:ae:
         63:e1:e5:0b:c4:e9:1f:c1:c1:e8:4a:5a:cd:bb:a1:28:3b:44:
         91:5b:65:18:0d:03:f2:6c:ed:b8:11:38:7c:7c:14:77:4f:6d:
         b1:12:61:0a:cc:53:63:e5:50:93:44:22:c6:8f:4a:d2:56:ee:
         6e:0e:4a:de:9c:22:49:ad:77:2e:7f:89:b5:01:02:a3:29:75:
         82:7f:ff:e5:b5:f3:36:d2:20:69:9b:e9:3b:56:5d:17:c1:91:
         4f:e1:c5:84:87:16:9e:d0:53:06:d7:a7:10:5c:f7:73:43:43:
         1c:8b:cc:75:af:6f:2b:ea:a3:29:12:4e:76:a3:e0:fb:f4:6f:
         77:2c:67:62:00:12:68:d8:f2:03:c7:0b:f0:20:3b:52:0c:44:
         b3:a3:40:9a:cf:83:c1:84:c6:77:83:85:96:f4:81:93:a4:81:
         21:aa:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----