Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
File:                     353441b7-94a6-3393-8c6f-5d9b94d013ec.roa (raw, json)
Hash identifier:          DK/L3tjzkBUsyNd1Tv5TJWwtu0gO3ZDvyu3laGGVWNc=
Subject key identifier:   34:9A:99:04:CA:CC:4D:AA:C9:F8:34:5F:A9:DC:46:C9:64:28:1A:6C
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584832F0203080629F3923185480
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     174
IP address blocks:        23.237.148.0/23 maxlen: 23
                          23.237.150.0/23 maxlen: 23
                          23.237.152.0/23 maxlen: 23
                          23.237.154.0/23 maxlen: 23
                          23.237.156.0/23 maxlen: 23
                          2001:49f0:d0c4::/48 maxlen: 48
                          2001:49f0:d0c5::/48 maxlen: 48
                          2001:49f0:d0c6::/48 maxlen: 48
                          2001:49f0:d0c7::/48 maxlen: 48
                          2001:49f0:d0c8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:20:30:80:62:9f:39:23:18:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e9d1621d-80d4-48aa-b155-4528ef991bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:ac:f0:96:95:9b:97:bb:b2:6d:eb:db:16:
                    48:e0:ac:e4:d2:27:be:31:e5:c7:d8:fe:96:38:ff:
                    53:34:80:62:22:dd:4b:9f:e5:b8:10:3e:ea:4b:00:
                    b7:59:11:f2:73:a4:6c:94:ca:d7:8c:7b:66:b2:ed:
                    92:44:40:ef:9f:21:d7:9b:98:fa:09:92:07:6f:88:
                    f5:c9:7d:3e:ab:ea:05:60:68:07:8a:bb:0f:b7:b2:
                    6c:4a:13:89:8e:4f:b2:b9:23:88:97:1d:6a:fd:26:
                    b4:78:c4:e8:f7:bf:68:91:6f:be:28:bb:36:32:57:
                    6f:34:ab:af:21:26:1d:1c:32:17:aa:64:8f:6f:7e:
                    b7:5b:37:f1:96:7a:25:66:cc:8d:66:f0:e1:94:7c:
                    28:71:a4:26:3f:1b:be:72:43:7f:74:ad:15:e0:64:
                    7b:45:40:b8:42:ce:1e:8b:cb:eb:98:a3:99:98:48:
                    12:31:57:87:2f:77:31:c5:93:6f:09:e5:e2:00:fc:
                    e7:2c:9d:2a:24:7b:b4:12:1c:1a:a6:45:df:70:55:
                    40:03:e9:21:0f:e4:18:21:a3:77:7d:1e:cf:9f:7a:
                    b0:30:ea:41:94:ee:71:cf:b8:95:00:21:a3:db:d0:
                    0f:34:6d:bc:05:4b:e8:00:d4:b2:38:2f:93:c9:a9:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9A:99:04:CA:CC:4D:AA:C9:F8:34:5F:A9:DC:46:C9:64:28:1A:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/353441b7-94a6-3393-8c6f-5d9b94d013ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.148.0-23.237.157.255
                IPv6:
                  2001:49f0:d0c4::-2001:49f0:d0c8:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:3d:11:40:46:e8:28:32:6d:21:83:40:42:8b:1e:6d:23:
         df:f6:f2:48:02:85:44:f5:95:28:e9:86:c8:9a:49:d2:ea:1e:
         64:97:1e:b9:9a:db:c0:a3:36:84:64:c4:11:83:a9:57:4c:48:
         07:5d:78:1b:ef:24:29:12:8c:df:b0:a1:4d:78:12:78:74:2f:
         a2:09:77:8a:31:dd:f7:d0:b8:c8:4c:9c:cd:95:29:f7:7b:bc:
         12:5b:15:a9:47:9c:71:12:a4:f8:8d:a4:a0:4a:b5:38:de:b5:
         ec:46:74:8e:93:ce:d1:d5:bf:de:6e:04:11:4b:12:72:0e:3c:
         45:23:4b:5c:8d:d1:48:73:ba:70:b7:59:c9:d5:24:02:c6:e3:
         78:6a:8f:d9:46:e6:ec:2b:ba:be:f7:f3:c8:00:79:66:b3:bb:
         dd:9c:32:da:11:f0:38:58:ed:0f:2d:88:f3:44:64:2c:6d:d5:
         09:65:73:90:07:3c:10:14:70:7a:b8:22:db:9c:2c:f9:0f:fa:
         14:ae:eb:67:d1:6b:77:c1:8e:63:f6:9b:40:90:e7:2c:e5:fc:
         b6:c9:8d:62:26:55:26:e6:b3:a3:e2:c6:c7:df:fe:75:6d:28:
         82:16:6a:b9:d2:08:1b:b4:a3:3e:47:d4:6c:1c:73:d3:6a:3a:
         88:ff:40:89
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEgy8CAwgGKfOSMYVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZTlkMTYyMWQtODBkNC00OGFhLWIxNTUtNDUyOGVmOTkxYmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiWs8JaVm5e7sm3r2xZI4Kzk0ie+MeXH2P6W
OP9TNIBiIt1Ln+W4ED7qSwC3WRHyc6RslMrXjHtmsu2SREDvnyHXm5j6CZIHb4j1
yX0+q+oFYGgHirsPt7JsShOJjk+yuSOIlx1q/Sa0eMTo979okW++KLs2MldvNKuv
ISYdHDIXqmSPb363WzfxlnolZsyNZvDhlHwocaQmPxu+ckN/dK0V4GR7RUC4Qs4e
i8vrmKOZmEgSMVeHL3cxxZNvCeXiAPznLJ0qJHu0EhwapkXfcFVAA+khD+QYIaN3
fR7Pn3qwMOpBlO5xz7iVACGj29APNG28BUvoANSyOC+TyalqCQIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFDSamQTKzE2qyfg0X6ncRslkKBpsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzUzNDQxYjctOTRhNi0z
MzkzLThjNmYtNWQ5Yjk0ZDAxM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAIX7ZQD
BAEX7ZwwGgQCAAIwFDASAwcCIAFJ8NDEAwcAIAFJ8NDIMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJcePRFA
RugoMm0hg0BCix5tI9/28kgChUT1lSjphsiaSdLqHmSXHrma28CjNoRkxBGDqVdM
SAddeBvvJCkSjN+woU14Enh0L6IJd4ox3ffQuMhMnM2VKfd7vBJbFalHnHESpPiN
pKBKtTjetexGdI6TztHVv95uBBFLEnIOPEUjS1yN0UhzunC3WcnVJALG43hqj9lG
5uwrur7388gAeWazu92cMtoR8DhY7Q8tiPNEZCxt1Qllc5AHPBAUcHq4ItucLPkP
+hSu62fRa3fBjmP2m0CQ5yzl/LbJjWImVSbms6Pixsff/nVtKIIWarnSCBu0oz5H
1Gwcc9NqOoj/QIk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:54:50 2025 by rpki-client