Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa
File:                     1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa (raw, json)
Hash identifier:          O2b6PONBe4bj6g1hjUNFnffrdlvBmIoMF5o8ANlmIF0=
Subject key identifier:   7B:F2:DA:31:E3:46:5B:47:5A:A5:8B:7D:92:39:5D:1C:CD:EA:02:40
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285848C580F746A7BB21F1F83309C0
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     11870
IP address blocks:        167.23.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f7:46:a7:bb:21:f1:f8:33:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=59e6a153-8c3b-4c91-8a9c-7536618d81f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:01:5f:bc:23:de:46:5a:f3:88:97:65:4d:
                    77:e9:d8:ce:37:78:4e:64:fe:96:d6:ad:54:35:19:
                    b1:97:fa:e6:4a:3a:0a:18:26:e1:d7:f6:03:b6:2b:
                    23:fb:69:df:3c:da:9f:12:bf:8f:7b:87:0a:36:6b:
                    f4:1d:6e:58:39:f0:a2:b5:90:c8:11:48:d0:ad:15:
                    f1:f8:61:3b:eb:f6:16:c0:30:8c:e9:11:a8:ca:82:
                    aa:a9:8f:ed:59:ae:12:c4:59:55:e5:31:b6:f2:cc:
                    f9:3c:d7:24:63:c5:a6:a5:2e:c9:18:4e:c5:00:d6:
                    93:80:c5:80:ca:0b:d8:ac:d0:68:da:06:26:fd:34:
                    11:5a:98:2f:f5:b7:b1:88:ec:25:f8:ae:17:78:c2:
                    c5:04:c9:20:f4:ba:da:87:b0:54:44:51:00:19:5c:
                    7c:10:6a:df:39:6c:46:71:9c:ea:14:a7:af:66:fc:
                    8a:f5:60:07:a2:b9:c1:74:4e:cb:9d:f1:87:3f:30:
                    57:59:c3:fc:7c:5e:bf:df:75:4d:2d:12:df:cd:d9:
                    a1:0f:66:01:03:68:85:30:18:a4:30:50:ed:d6:92:
                    5c:65:44:f8:ae:2a:62:71:05:d5:7a:41:31:e6:b4:
                    e5:10:e3:6e:bb:e5:fc:66:e7:5b:81:9b:ac:90:fd:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F2:DA:31:E3:46:5B:47:5A:A5:8B:7D:92:39:5D:1C:CD:EA:02:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:e6:dc:fb:c8:f9:89:1e:a1:5e:5d:0c:d2:36:c0:ce:3a:
         bc:dc:2f:03:e4:85:ae:95:e8:58:78:2e:f1:d2:fd:88:d3:df:
         01:4b:2b:77:d3:c6:8d:7b:c6:c2:ac:e5:52:69:b8:bb:51:7b:
         8c:f4:1a:fb:aa:97:e0:91:8a:c1:e3:47:a3:22:4a:45:7c:73:
         b1:25:d2:f6:8d:c3:99:3f:fa:d5:f6:78:ff:df:66:27:ae:5e:
         c0:c3:62:a1:b2:a2:4d:7b:00:be:cb:e1:bb:53:6f:da:fa:fa:
         60:b3:0a:65:09:0d:73:a4:b0:09:c0:06:37:24:0e:fc:84:97:
         68:32:22:27:10:0a:67:90:b2:5a:93:53:a9:24:5a:e9:4b:0a:
         a1:1c:eb:87:74:79:5d:c8:02:f9:ed:50:cf:99:70:2b:50:82:
         18:a1:b4:1d:70:f5:67:d0:21:e4:e0:61:16:0c:ca:05:f4:47:
         34:61:3f:9c:08:0d:07:33:f2:2b:0e:69:e7:68:4a:bc:dc:4f:
         e7:d7:80:f5:ca:23:99:3d:32:2e:a0:9d:bc:a2:d8:e8:ae:fc:
         5b:62:a7:2a:63:ed:52:77:83:94:ca:5a:d6:9e:09:73:d4:bd:
         c2:a3:cd:9a:de:25:ee:67:81:86:b4:6a:14:25:d9:2a:f0:ef:
         75:75:d7:cd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjFgPdGp7sh8fgzCcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm
OGM0MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTllNmExNTMtOGMzYi00YzkxLThhOWMtNzUzNjYxOGQ4MWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCIBX7wj3kZa84iXZU136djON3hOZP6W1q1U
NRmxl/rmSjoKGCbh1/YDtisj+2nfPNqfEr+Pe4cKNmv0HW5YOfCitZDIEUjQrRXx
+GE76/YWwDCM6RGoyoKqqY/tWa4SxFlV5TG28sz5PNckY8WmpS7JGE7FANaTgMWA
ygvYrNBo2gYm/TQRWpgv9bexiOwl+K4XeMLFBMkg9Lrah7BURFEAGVx8EGrfOWxG
cZzqFKevZvyK9WAHornBdE7LnfGHPzBXWcP8fF6/33VNLRLfzdmhD2YBA2iFMBik
MFDt1pJcZUT4ripicQXVekEx5rTlEONuu+X8ZudbgZuskP1h5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHvy2jHjRltHWqWLfZI5XRzN6gJAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1
OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvMWNjNGM1ODgtYWM2Zi0z
NDJlLWI3ZTUtODI2ZWZhM2EyN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5
NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz
ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw
YTY5M2Y4YzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApxcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADabm3PvI+YkeoV5dDNI2wM46vNwvA+SFrpXoWHgu8dL9iNPfAUsrd9PG
jXvGwqzlUmm4u1F7jPQa+6qX4JGKweNHoyJKRXxzsSXS9o3DmT/61fZ4/99mJ65e
wMNiobKiTXsAvsvhu1Nv2vr6YLMKZQkNc6SwCcAGNyQO/ISXaDIiJxAKZ5CyWpNT
qSRa6UsKoRzrh3R5XcgC+e1Qz5lwK1CCGKG0HXD1Z9Ah5OBhFgzKBfRHNGE/nAgN
BzPyKw5p52hKvNxP59eA9cojmT0yLqCdvKLY6K78W2KnKmPtUneDlMpa1p4Jc9S9
wqPNmt4l7meBhrRqFCXZKvDvdXXXzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:53 2025 by rpki-client