Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa
File:                     f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa (raw, json)
Hash identifier:          IZUmDLc33BAyO9/nJReqxNVyhsSoY2iymZwSe2pX9o8=
Subject key identifier:   1A:0D:2D:B2:43:F3:62:37:7E:CE:04:B5:F7:63:4C:CB:2A:87:B4:30
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858498339F718769F2C3918A7B400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20940
IP address blocks:        23.193.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:f7:18:76:9f:2c:39:18:a7:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=9eed408c-8281-48ca-aeda-245c37af1b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:86:c2:0d:01:ca:03:10:92:2d:dc:18:eb:21:
                    02:5f:ea:00:c7:70:bf:ab:f1:be:b1:38:a4:c9:1c:
                    fd:df:2b:a5:bb:2d:e1:29:88:2c:ad:e8:7b:66:46:
                    1c:ac:47:21:41:43:48:35:68:4d:78:55:da:6e:6b:
                    94:0e:cf:46:89:c7:06:cf:26:37:4c:ef:fd:eb:8d:
                    77:fe:9f:22:e7:cb:1f:01:56:1a:10:2c:cc:09:9f:
                    c5:ba:c1:63:2b:ee:2a:37:8e:4d:18:d8:66:c9:a8:
                    b2:c0:98:e5:41:0c:3a:bc:80:74:a8:76:5c:1b:65:
                    29:1b:35:28:ec:6a:3b:12:00:82:dc:9b:b8:3c:66:
                    9d:d1:da:18:4c:62:6a:d7:73:5e:d6:20:4c:ae:38:
                    21:b6:e5:50:fc:ae:e8:37:76:ed:a8:fa:49:2d:a3:
                    65:3a:a9:98:95:42:01:dc:53:d3:c7:97:08:ab:f5:
                    ee:dc:03:ea:9e:bf:df:7f:f2:52:7f:e0:cb:33:d7:
                    18:f1:7f:1b:25:ba:2f:74:ad:9c:47:65:78:f0:55:
                    17:7e:6e:48:c0:00:87:e5:a3:ea:8e:1f:81:38:30:
                    c9:f7:d6:4a:71:ca:76:72:32:46:78:ea:62:77:b0:
                    c6:bb:3e:58:42:91:57:e9:2a:fb:4d:03:af:b8:2f:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0D:2D:B2:43:F3:62:37:7E:CE:04:B5:F7:63:4C:CB:2A:87:B4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4c0261d-b6bb-3b00-af43-ee5facc7d8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:9b:00:d8:22:91:f1:8e:18:7b:0b:51:a5:75:a6:1c:7d:
         0a:61:d3:52:8d:e0:38:09:a2:62:c2:33:0e:db:5e:c7:38:31:
         99:71:46:1f:f1:7a:c6:32:78:da:53:e7:7b:98:af:16:41:bb:
         87:57:ab:21:1b:28:4e:46:88:35:44:2d:25:cc:d2:86:5f:3a:
         16:f8:3d:23:c1:c1:a0:4d:9c:f5:57:47:35:35:01:5b:7e:73:
         59:5c:15:ff:7b:d7:da:74:6d:ee:fc:46:23:74:76:70:67:3f:
         24:f1:02:63:ed:ef:74:4d:c4:5e:db:36:eb:a5:70:31:be:05:
         ef:1e:08:22:e2:64:39:3e:9b:a4:2c:6d:df:bc:77:36:75:65:
         64:2a:b9:14:36:b8:f1:89:82:4c:ab:3b:de:1b:30:b3:9e:40:
         44:3e:5d:90:53:1e:bd:4b:c1:29:e1:26:c0:59:e7:88:0a:2a:
         6b:ed:cf:3c:73:55:7d:fc:d2:97:62:1e:ee:aa:e4:c6:c6:28:
         cd:27:bf:8d:7e:69:1f:53:f3:bf:64:26:85:b4:dc:88:f5:ef:
         9a:10:26:ae:ab:85:b7:39:dc:bd:84:f9:3b:b7:fa:01:44:02:
         01:ae:e6:ed:de:0e:b4:81:a2:49:92:ad:cf:bc:f7:d6:05:04:
         f9:51:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----