Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/94e18ce9-4bf4-35df-9c2f-9d08f1973343.roa
File:                     94e18ce9-4bf4-35df-9c2f-9d08f1973343.roa (raw, json)
Hash identifier:          0p+b0ewbXsLGoYCq83mWeNrQSQanrn1A4gMi4jtUKN0=
Subject key identifier:   67:E0:74:B6:C5:73:7F:77:1A:D4:F2:89:A7:6F:33:C9:BE:78:B9:E8
Certificate issuer:       /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913
Certificate serial:       010D0C9F43285848FC68423EFC706E5AB26D0780
Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/94e18ce9-4bf4-35df-9c2f-9d08f1973343.roa
Signing time:             Mon 24 Feb 2025 06:00:40 +0000
ROA not before:           Mon 24 Feb 2025 06:00:40 +0000
ROA not after:            Sun 25 May 2025 05:00:40 +0000
asID:                     3356
IP address blocks:        23.133.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fc:68:42:3e:fc:70:6e:5a:b2:6d:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913
        Validity
            Not Before: Feb 24 06:00:40 2025 GMT
            Not After : May 25 05:00:40 2025 GMT
        Subject: CN=4f9e29e0-a294-4cbd-a662-a91168d1c77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:8c:d2:fe:dc:f3:f1:a1:7a:87:a6:70:49:
                    9d:5f:23:e9:bc:f1:8f:af:fb:f1:dc:63:63:72:7e:
                    80:52:7b:76:13:9c:0a:0c:1d:85:71:ed:7c:f8:55:
                    44:63:82:b1:30:b9:fb:94:80:99:70:57:a0:53:4e:
                    fb:c6:b1:be:5b:ea:08:d9:40:5c:7b:e5:83:47:e3:
                    38:97:f5:e8:63:40:1c:76:be:7c:f4:4e:48:e4:9f:
                    c2:ce:c9:3d:c8:c8:1d:19:24:91:8a:18:89:6a:c9:
                    b5:b5:ce:b9:60:3e:e8:98:39:e1:5d:7f:cc:7a:1c:
                    f6:ab:dd:98:11:e6:7f:b7:10:7a:51:02:f4:e3:9d:
                    e6:1a:b8:08:05:70:6e:05:bc:01:c3:3f:54:65:e3:
                    43:a5:5c:5e:8f:ed:fb:58:ff:84:19:6f:66:75:05:
                    15:76:c2:1e:0f:a3:b6:2f:c4:e9:2c:67:10:cf:b8:
                    a3:8c:84:54:9f:5e:88:4d:c3:ec:c6:04:7d:59:cb:
                    46:a3:07:b3:a2:5d:13:fc:5a:58:37:1d:3e:3f:46:
                    88:47:1e:a5:74:01:de:76:77:24:b6:0c:41:81:b5:
                    dc:eb:48:10:10:09:f7:23:55:ba:f7:a9:73:24:d2:
                    be:92:77:ca:ee:9e:90:a7:b2:f5:87:7c:be:49:9c:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E0:74:B6:C5:73:7F:77:1A:D4:F2:89:A7:6F:33:C9:BE:78:B9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/94e18ce9-4bf4-35df-9c2f-9d08f1973343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl

            X509v3 Authority Key Identifier:
                keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:52:74:e7:b4:40:a5:7a:d1:5d:21:75:2f:4c:5d:97:77:
         cd:7d:b5:1b:85:7b:29:23:b3:08:ab:b7:c4:30:f5:c6:20:97:
         2b:79:b9:fe:c8:58:27:9a:da:f5:91:30:be:3c:c2:e1:0a:e7:
         e8:f7:51:ea:a0:fd:80:df:72:72:24:9e:80:44:48:58:14:37:
         b4:26:ca:36:b5:62:e9:79:9c:56:80:c9:43:69:13:be:5d:02:
         4b:06:cb:79:67:ba:2e:ee:1b:d8:6a:3c:31:9d:27:c4:e9:56:
         c3:1c:cf:92:38:d6:e1:4d:2d:c0:b2:8e:97:a4:86:96:68:c7:
         46:72:b7:d8:4b:43:56:f2:8b:70:11:75:ac:31:7f:b6:5e:e3:
         f7:7c:40:4b:33:e2:03:62:4a:ab:d8:38:c1:8e:1e:63:38:6b:
         d4:58:b3:b4:03:7d:8e:76:2e:44:44:a3:c6:1c:a9:f9:c7:b7:
         22:3b:6b:f1:7a:86:21:bf:b8:03:bb:aa:72:fc:84:e7:fb:ee:
         b5:80:34:9f:54:5d:54:e8:e7:e6:9b:2e:95:6b:21:19:4b:06:
         04:df:80:bd:7f:e7:2f:ff:b2:d3:38:33:c7:a0:39:9e:16:b4:
         c8:07:e4:6b:9e:bf:a2:0a:2a:91:1e:a4:26:5b:de:85:0b:86:
         ea:80:f0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:52 2025 by rpki-client