Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa
File:                     52b924c0-a239-324e-9a22-250465491f74.roa (raw, json)
Hash identifier:          BQWA0+iSJllYRfYeTd52B5oVQdUOT0Btl/L/WXLG6hg=
Subject key identifier:   FF:6F:EE:FD:B9:BD:27:F6:65:CC:30:F1:20:C2:5F:B6:02:8B:F7:A0
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F43285848C580F64DDBF4E61B07350040
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     11870
IP address blocks:        167.23.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f6:4d:db:f4:e6:1b:07:35:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=9eeb270d-c5ec-4efa-bdb4-d432756cb258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:31:b7:52:9a:e9:f3:74:77:aa:a4:1b:b4:
                    6e:83:38:54:e0:26:59:77:06:c5:4a:c3:21:0f:b1:
                    cf:58:93:95:c7:41:fc:bf:a3:d0:26:4e:7e:c7:e5:
                    86:7e:4c:09:7e:c8:87:3c:04:65:19:ed:dc:59:02:
                    bd:d4:27:ca:6b:6c:5f:f3:16:03:05:c1:41:bd:f1:
                    a9:a4:52:46:e9:fc:d7:30:44:a0:0e:09:7e:8e:22:
                    9e:1b:0d:7f:04:2e:3d:d0:ef:8e:cd:40:7f:21:bc:
                    24:5a:39:6c:26:b7:51:35:c3:30:83:42:7a:1b:80:
                    38:cf:58:ad:a0:56:97:4c:06:fb:a0:cf:d6:a7:9e:
                    ac:8b:18:b0:b3:d1:9e:0f:63:ec:d9:d3:93:5e:2e:
                    5e:21:00:ba:d2:12:09:d0:50:d9:a2:47:89:f8:58:
                    aa:cb:02:64:2c:35:53:f7:1c:0f:c6:44:9b:e1:02:
                    79:12:72:5e:8f:d7:af:9f:fe:a1:cc:5d:de:38:24:
                    aa:23:fe:91:f9:be:d3:95:95:19:cc:d5:fa:a7:f0:
                    f5:8c:05:8e:a6:b0:ff:0c:6b:30:a8:c1:48:4f:ba:
                    63:7b:59:6c:f6:89:ca:1d:e1:a6:0e:03:52:6c:3b:
                    8e:d3:f7:60:69:4b:ec:a3:a1:a9:3f:19:3f:41:00:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:EE:FD:B9:BD:27:F6:65:CC:30:F1:20:C2:5F:B6:02:8B:F7:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/52b924c0-a239-324e-9a22-250465491f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:73:1e:53:b4:64:17:bc:3f:a4:66:3b:09:bb:47:b9:1c:
         14:00:0c:ff:3e:de:84:c9:a1:2f:d9:89:c7:29:37:6b:e4:c3:
         57:b7:75:5c:55:a6:bc:f5:05:fd:dd:19:0c:73:a3:d9:0a:81:
         55:57:f4:3b:2e:f5:05:e3:30:d8:b3:48:d2:31:a0:a4:6b:b4:
         a8:9c:ee:6a:46:4a:70:fc:ce:36:54:c6:96:8d:e8:f9:0b:e4:
         40:06:e8:63:75:ab:56:0f:10:95:e2:ad:bc:db:ad:f3:f6:52:
         72:44:f4:02:6b:29:86:e7:1a:4d:4c:7a:3e:2a:c2:89:4c:af:
         53:e6:b2:2e:cd:c7:dd:97:79:33:8c:eb:5a:4f:26:cd:b1:93:
         c6:54:30:06:51:1d:8a:dc:71:d7:50:d7:57:d0:45:56:8d:45:
         36:6a:70:2c:b3:d8:80:16:55:6f:5a:22:41:81:2a:68:d8:27:
         83:1c:36:2f:8b:4c:fd:f0:43:6b:3d:8b:44:f4:54:a3:05:d3:
         09:89:bf:66:b2:fb:56:2f:62:42:41:1a:44:95:e5:3c:c8:64:
         0f:ad:dd:50:1e:f5:1b:ed:04:7a:a6:c5:88:f4:b0:b1:72:9f:
         bd:d1:61:36:e0:dd:66:62:78:a1:2c:ab:b8:cc:97:9b:dd:28:
         40:1f:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:37 2025 by rpki-client