Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa
File:                     1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa (raw, json)
Hash identifier:          qUWVY9sG7svxCWnvLybP5Y4dAbsm8q6CGzKOBp0zfcg=
Subject key identifier:   EB:C8:AB:96:7A:E2:7F:D1:2A:8B:9D:70:68:AF:D7:0B:76:8B:77:36
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858491AA6D1842A2854F5B101BD80
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     30058
IP address blocks:        23.237.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:d1:84:2a:28:54:f5:b1:01:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=c376dcfa-1753-4646-aa97-4ffeaeb09746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:d2:5c:ad:c3:49:fe:f3:ad:a8:5f:56:ad:
                    73:c4:98:4e:a0:75:a8:a1:2e:e2:3e:a5:f6:7a:5e:
                    96:8f:f7:ea:28:89:b4:4c:e3:24:cd:95:1f:09:9f:
                    19:15:f4:04:47:49:f2:bc:42:6b:c0:c9:1d:50:25:
                    b9:c7:9a:40:b6:a7:3b:c1:0b:85:2f:a8:47:d5:9b:
                    f3:40:9a:5a:36:fe:fb:8f:f3:5f:14:62:0f:2f:08:
                    b9:3a:8b:09:8c:f6:2b:b4:d2:9d:3e:21:77:e0:ce:
                    3f:55:c8:71:df:61:8b:ce:c1:14:a9:62:af:3a:d2:
                    94:16:af:f7:d3:a3:7a:24:e3:53:4f:4e:46:b0:c4:
                    27:31:36:5c:d9:88:2d:62:23:f9:8c:25:24:21:9a:
                    78:88:cd:8b:6a:0b:4e:e2:ce:aa:d2:0d:7c:f2:03:
                    ed:62:2d:4a:a6:04:13:c5:53:6b:ea:5b:ea:59:3b:
                    dc:05:db:91:da:36:5a:9b:57:58:bb:0e:a2:92:e0:
                    f1:95:21:a9:d0:e1:58:2b:ed:bc:8a:71:f5:77:37:
                    cd:46:42:47:33:94:e7:56:16:f2:f2:1e:0d:42:e1:
                    c6:1d:b4:26:88:2c:92:f0:b9:de:08:9b:3c:36:55:
                    11:ee:84:e4:a6:a8:9c:23:03:9e:95:a3:d2:ad:cd:
                    c6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C8:AB:96:7A:E2:7F:D1:2A:8B:9D:70:68:AF:D7:0B:76:8B:77:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:41:02:d4:8a:66:a3:5e:ef:6c:5a:3d:1f:5a:08:9d:b4:18:
         98:b9:77:88:34:d2:c1:f2:60:3d:a2:7c:9b:23:c9:a6:ed:7d:
         09:9b:38:18:8e:c2:ab:24:75:70:10:11:a9:46:9c:92:e9:8b:
         b0:82:5a:34:ed:cc:a3:60:f5:17:c2:22:6c:ad:d8:d8:30:19:
         69:2b:0c:bd:06:dc:ce:a9:f1:b6:70:1c:b9:14:36:ef:13:af:
         e3:37:e6:0b:c7:fb:81:90:2c:ca:10:aa:91:8f:90:ed:15:59:
         d9:cf:84:b5:cb:a9:44:43:d1:54:0c:89:cd:59:27:08:19:e1:
         d8:95:c5:90:8d:a3:1a:f4:cc:a5:a7:a9:09:b5:85:3d:5d:81:
         45:98:6f:81:4e:2f:74:f4:0f:6d:d4:12:0c:0b:a5:4c:fc:69:
         6f:b2:08:d4:d5:9a:ed:92:85:01:8d:3d:fa:61:df:65:0d:7e:
         ee:64:c4:dc:2a:1b:50:bc:bf:8f:b4:37:e7:87:5f:8b:c6:a6:
         50:28:59:05:59:61:af:26:bd:78:ea:bf:4f:1c:53:19:1f:21:
         e6:dd:f7:f6:9b:30:49:91:11:4b:62:5e:ff:8c:92:04:87:86:
         1b:72:46:84:85:19:90:ef:4d:e9:65:e2:58:63:2b:c5:e1:2f:
         0a:7e:e8:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptGEKihU9bEBvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YzM3NmRjZmEtMTc1My00NjQ2LWFhOTctNGZmZWFlYjA5NzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9nSXK3DSf7zrahfVq1zxJhOoHWooS7iPqX2
el6Wj/fqKIm0TOMkzZUfCZ8ZFfQER0nyvEJrwMkdUCW5x5pAtqc7wQuFL6hH1Zvz
QJpaNv77j/NfFGIPLwi5OosJjPYrtNKdPiF34M4/Vchx32GLzsEUqWKvOtKUFq/3
06N6JONTT05GsMQnMTZc2YgtYiP5jCUkIZp4iM2LagtO4s6q0g188gPtYi1KpgQT
xVNr6lvqWTvcBduR2jZam1dYuw6ikuDxlSGp0OFYK+28inH1dzfNRkJHM5TnVhby
8h4NQuHGHbQmiCyS8LneCJs8NlUR7oTkpqicIwOelaPSrc3GjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOvIq5Z64n/RKoudcGiv1wt2i3c2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMTYyOWJkZjctZjY0Zi0z
ZjNlLWEyNTQtNDM1NzQ2ZjZmY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+2TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL1BAtSKZqNe72xaPR9aCJ20GJi5d4g00sHyYD2ifJsjyabtfQmbOBiO
wqskdXAQEalGnJLpi7CCWjTtzKNg9RfCImyt2NgwGWkrDL0G3M6p8bZwHLkUNu8T
r+M35gvH+4GQLMoQqpGPkO0VWdnPhLXLqURD0VQMic1ZJwgZ4diVxZCNoxr0zKWn
qQm1hT1dgUWYb4FOL3T0D23UEgwLpUz8aW+yCNTVmu2ShQGNPfph32UNfu5kxNwq
G1C8v4+0N+eHX4vGplAoWQVZYa8mvXjqv08cUxkfIebd9/abMEmREUtiXv+MkgSH
hhtyRoSFGZDvTell4lhjK8XhLwp+6K0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:07 2025 by rpki-client