Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa
File:                     4708d4a6-bebc-30cc-a144-769712f0b0b1.roa (raw, json)
Hash identifier:          8VgM6mfzt4dsujbixeMvaE4AdF8fI+Dsr4icOvF9hfw=
Subject key identifier:   94:63:E2:98:C2:0D:9C:CF:8F:F8:AB:A4:65:01:A4:A6:2D:76:49:4D
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584949FE947DAB2D80B447457400
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     11870
IP address blocks:        167.23.88.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:94:7d:ab:2d:80:b4:47:45:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=76e5195a-dc61-406b-9a7d-d8b46d7cd7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:39:85:9b:54:97:c3:a6:26:a7:1f:69:f1:
                    3e:95:d4:74:53:47:a9:5b:40:d0:9d:9e:15:76:7c:
                    ec:d9:ab:ab:c9:cf:bd:c0:f6:8c:2f:bb:1e:a5:c8:
                    fe:e0:ae:47:1c:1b:91:c7:1b:f0:4a:22:32:ad:4d:
                    a7:38:41:0c:0c:d6:3a:84:c6:c2:2e:ae:86:71:d8:
                    fd:9c:80:71:df:65:13:f4:e0:19:c9:25:97:cf:8c:
                    df:70:6b:1a:e4:1d:7b:05:13:6e:cf:d1:06:ed:ee:
                    1f:a9:4b:14:d1:ab:77:5c:02:27:d5:de:5b:8d:8c:
                    8d:c5:a4:12:ad:a7:4d:28:ed:f0:51:8e:b3:dc:94:
                    bd:b0:26:d3:16:5e:1e:48:4e:f8:eb:c2:83:92:17:
                    40:be:c5:3e:75:3a:aa:83:61:32:ca:bd:0c:1c:5e:
                    15:8f:3b:e4:72:c6:64:14:04:60:b0:7c:f3:59:3c:
                    cd:93:25:20:9c:b5:c9:63:c1:8e:1d:b0:12:e7:42:
                    97:4e:b0:b9:35:13:cd:83:e0:54:89:ea:2f:d8:92:
                    aa:0a:5c:66:4d:10:70:de:0b:d9:32:f2:6f:a2:b3:
                    11:6b:71:11:a1:86:59:95:c4:88:cd:77:d6:89:20:
                    94:c2:93:6f:e2:14:e6:a8:a0:3d:6e:17:a1:51:95:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:E2:98:C2:0D:9C:CF:8F:F8:AB:A4:65:01:A4:A6:2D:76:49:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/4708d4a6-bebc-30cc-a144-769712f0b0b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:0b:f5:e9:4e:0d:37:a1:38:86:5c:70:4a:f7:12:a0:ec:
         3c:95:5b:46:42:df:3c:0c:db:f6:ab:29:22:12:6c:3b:1e:bf:
         f6:89:09:b9:dd:b9:ba:be:9c:fa:cd:77:20:0f:5a:93:5e:a5:
         e4:24:52:0f:fd:b2:eb:6a:3b:ea:e9:a0:28:df:2a:80:9a:45:
         dc:46:10:5a:0c:68:79:55:a6:eb:4c:a1:ed:ba:92:60:eb:4a:
         dc:e2:8b:4c:cf:e4:ef:ae:2b:6d:a2:66:87:70:e0:ab:49:da:
         a0:87:b5:85:16:7e:cb:b4:14:d4:20:1e:00:14:d1:8b:0a:d6:
         15:2b:e9:ec:31:8c:5c:d5:c3:71:47:69:b8:f6:0c:dd:7a:8f:
         a7:e0:2f:3e:ba:17:cc:da:48:e1:6e:39:41:08:f7:4d:0f:61:
         21:ed:c3:53:16:02:45:7a:66:19:64:f7:5b:3f:67:a2:7e:de:
         f4:3b:14:a4:e4:de:96:73:f2:fd:56:5f:28:ec:ab:45:98:fb:
         38:36:18:1f:62:4f:c7:86:e0:a8:29:15:05:68:65:e1:fd:90:
         a3:b5:e1:c4:41:90:f0:14:7d:41:0e:e4:db:77:57:95:ca:66:
         a9:74:de:28:fe:60:1f:db:6f:a4:19:96:7b:a8:ec:54:29:9f:
         6d:14:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:34 2025 by rpki-client