Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa
File:                     02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa (raw, json)
Hash identifier:          FwTK1/5F0hs+NRXLBAIIKiuInhEHZotVz5ER33arGxc=
Subject key identifier:   62:08:54:B8:8A:7C:10:8A:7E:7A:DD:CC:FA:6E:EB:FD:4E:0B:7B:B0
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584891DB2B7A60285AB63A0EA960
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     30058
IP address blocks:        23.237.164.0/23 maxlen: 24
                          23.237.210.0/23 maxlen: 24
                          23.237.248.0/24 maxlen: 24
                          216.227.166.0/24 maxlen: 24
                          2001:49f0:d0d2::/48 maxlen: 48
                          2001:49f0:d0fc::/48 maxlen: 48
                          2001:49f0:d13c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2b:7a:60:28:5a:b6:3a:0e:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=a5760af7-91fa-4bdf-9a1e-19bfea49ad4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:36:5e:de:8c:80:a7:8c:5b:3e:24:c0:01:
                    3c:0c:9a:f6:77:83:70:c0:ce:c2:4c:b7:9b:46:b2:
                    b6:60:52:16:c7:e1:29:8a:4d:9a:cc:da:ca:86:43:
                    1d:ab:3e:d0:81:84:48:88:05:bd:0f:c9:cd:79:5e:
                    0c:40:ed:29:98:c7:e1:f9:4c:c1:be:79:72:1e:86:
                    28:c4:bb:e3:98:f9:96:32:5a:87:f2:bb:a9:8d:ba:
                    42:fa:3d:54:8a:37:61:6e:f0:9b:c2:43:b5:68:c2:
                    0e:0a:19:80:fd:6e:1b:16:0a:23:dc:33:c8:79:36:
                    55:2e:66:a4:c4:08:87:e4:f3:b3:5b:fc:cd:c3:82:
                    f1:45:9e:db:5f:2b:6b:71:ea:92:50:6a:0d:bc:d7:
                    2b:d1:4b:63:df:8c:41:29:55:3a:b9:94:c7:b4:ed:
                    8e:39:89:3b:57:c6:34:40:5a:f9:52:39:2a:0a:7d:
                    0a:ff:51:5e:6c:e8:d6:15:74:4b:6f:68:2a:5b:b1:
                    49:f7:b9:69:67:f0:6b:f5:16:c7:a9:71:92:51:29:
                    8e:e5:a2:82:bf:42:7d:52:0a:6f:78:10:ba:59:9e:
                    27:a6:b5:e5:f0:4c:cf:58:86:40:23:f7:c5:42:cf:
                    01:06:c4:be:3f:82:4f:39:de:49:db:72:27:05:ee:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:08:54:B8:8A:7C:10:8A:7E:7A:DD:CC:FA:6E:EB:FD:4E:0B:7B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/02c1feb9-5ad0-370c-8b3b-30b3acef4404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.164.0/23
                  23.237.210.0/23
                  23.237.248.0/24
                  216.227.166.0/24
                IPv6:
                  2001:49f0:d0d2::/48
                  2001:49f0:d0fc::/48
                  2001:49f0:d13c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:95:75:d7:ec:1d:3d:84:43:51:b1:e5:44:40:28:53:d9:a2:
         05:f1:4f:3e:a8:2a:96:76:b6:66:82:39:4d:85:bb:55:cd:5d:
         82:c8:d7:bc:b0:0a:1e:5f:50:06:ec:4a:18:62:56:c0:70:72:
         9f:b2:54:1e:38:28:2c:3b:dc:44:36:1d:ce:3d:fe:46:0a:57:
         e2:3c:97:57:71:61:cb:60:a4:1b:1d:36:bd:66:f6:2a:9f:c3:
         c4:a5:ae:4b:6f:63:f3:6e:b5:da:48:c3:46:b3:7c:d6:a5:2a:
         21:17:cb:a3:84:5e:af:f6:8a:ec:ae:96:3a:9d:d1:b5:50:4d:
         3e:3f:35:8d:8c:cd:8a:c7:a6:3d:f3:d0:45:a2:87:d4:3e:cb:
         15:ba:d0:68:e9:d4:07:21:2c:4b:79:dc:d8:0b:0a:36:02:97:
         15:b1:c9:ec:47:3f:f9:31:b4:51:66:7f:4d:3c:c9:4d:8b:00:
         cb:64:f7:b6:4b:0a:9a:aa:35:a6:c9:a8:93:01:e6:1d:cc:74:
         13:4d:3c:4b:ee:d5:b1:54:32:ee:8b:1a:81:54:85:58:26:ef:
         28:12:f2:fe:36:79:ec:d4:0f:20:0e:a6:e2:4a:0b:d0:10:36:
         8e:27:d7:7a:0e:33:5f:d2:98:c2:cb:6e:6c:df:e9:56:6d:d4:
         6d:84:78:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:25 2025 by rpki-client