Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
File:                     791c2f5d-4258-3b3d-82a7-78c6a688c098.roa (raw, json)
Hash identifier:          Yb0gZ6fSmMqHkm50kes5fKBRz4oyhhqDCBlkKUPTQbE=
Subject key identifier:   02:F7:60:64:01:0D:5E:21:34:0D:DF:A9:15:62:B8:55:86:B9:E3:79
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858484D75825DF706B14E907DA6C0
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     30058
IP address blocks:        23.237.74.0/23 maxlen: 24
                          23.237.82.0/23 maxlen: 24
                          23.237.158.0/23 maxlen: 24
                          23.237.208.0/24 maxlen: 24
                          50.7.72.0/22 maxlen: 24
                          192.240.100.0/23 maxlen: 24
                          198.255.121.0/24 maxlen: 24
                          2001:49f0:d002::/48 maxlen: 48
                          2001:49f0:d048::/48 maxlen: 48
                          2001:49f0:d090::/48 maxlen: 48
                          2001:49f0:d0c9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:82:5d:f7:06:b1:4e:90:7d:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=7638dbf8-b7dd-4a6e-b894-4eb336db8bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:9f:b4:dd:7c:c2:25:93:c8:2c:dc:1a:8c:
                    b6:bf:2b:aa:39:e0:58:78:55:71:62:ea:35:15:30:
                    56:1f:16:77:f7:bd:d7:73:bc:20:e1:f7:ac:f4:13:
                    42:66:d2:d9:9b:3c:ee:78:15:dc:c2:68:74:b3:81:
                    e5:3d:61:c3:6a:7a:b0:94:b6:62:ea:d0:b6:38:4e:
                    2c:df:a7:0a:fe:d9:96:74:0f:eb:19:93:ff:5f:9d:
                    62:5a:c2:8a:ec:97:e4:56:30:45:31:bd:5f:40:21:
                    8b:26:60:4b:59:24:07:c3:f1:17:41:06:cd:6e:3f:
                    0c:8c:69:fe:a7:f3:b5:14:67:79:51:3d:dd:3c:f5:
                    d6:44:1c:78:f0:62:26:a5:ec:24:a9:e7:a2:0e:73:
                    91:d2:67:18:de:73:a2:0d:4f:6e:c8:e7:9d:35:5d:
                    ab:8e:8d:55:d5:9c:bb:06:1e:6f:d7:ae:dc:38:cc:
                    2d:85:77:2d:b7:f8:08:84:76:07:74:c6:e4:a5:15:
                    eb:f2:88:f4:b5:24:94:fc:b2:44:cd:f4:3f:82:a6:
                    5c:a3:e7:1a:b6:1e:d2:34:42:8e:d8:d6:59:e9:74:
                    a2:40:87:95:aa:25:cb:3e:ea:01:1b:25:09:74:1d:
                    b2:e2:54:a6:17:21:a4:64:fe:81:3b:36:00:ee:c3:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F7:60:64:01:0D:5E:21:34:0D:DF:A9:15:62:B8:55:86:B9:E3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/791c2f5d-4258-3b3d-82a7-78c6a688c098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.74.0/23
                  23.237.82.0/23
                  23.237.158.0/23
                  23.237.208.0/24
                  50.7.72.0/22
                  192.240.100.0/23
                  198.255.121.0/24
                IPv6:
                  2001:49f0:d002::/48
                  2001:49f0:d048::/48
                  2001:49f0:d090::/48
                  2001:49f0:d0c9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d0:ea:39:71:54:5c:95:9b:61:7d:69:01:83:ea:9a:1b:ad:
         47:be:0d:f4:84:68:fb:81:a6:18:7b:06:2c:3e:e4:80:db:10:
         ae:47:49:27:6b:cf:32:bd:44:9d:b5:48:1a:db:1d:88:39:88:
         cc:de:b9:90:92:0f:8b:d4:8d:11:90:86:6e:78:86:b1:61:ca:
         e8:6c:cd:f5:37:c2:8a:51:8f:8d:62:0c:49:53:20:f9:81:1d:
         46:d7:da:ee:32:20:14:8c:f9:58:53:84:dd:eb:a6:0f:c9:a3:
         d9:1f:95:3b:e3:b6:55:65:e8:f4:f5:19:10:6e:e8:29:ca:38:
         48:13:f2:3f:94:b7:37:94:3f:64:41:96:6d:cc:b0:2a:33:9e:
         d4:41:a1:37:fe:20:25:dd:c3:ab:55:ca:8b:44:2f:4d:58:9c:
         9e:ae:5e:70:9c:4f:a0:ad:ec:40:ac:59:8e:f2:ab:1b:9a:c6:
         cf:6a:bd:b2:b5:8e:d7:f3:4f:19:1f:02:91:16:b0:7c:92:f6:
         ac:a5:41:96:ca:42:d1:3a:fe:fc:08:31:d0:14:1c:d4:46:75:
         f1:45:9d:b0:fa:3c:91:a2:2a:80:a2:82:1d:19:a6:ba:e4:24:
         d6:2f:ba:c1:10:a3:bf:82:96:e7:09:37:6c:a3:1e:2d:a3:84:
         de:cb:0e:46
-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEhNdYJd9waxTpB9psAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
NzYzOGRiZjgtYjdkZC00YTZlLWI4OTQtNGViMzM2ZGI4YmFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhaftN18wiWTyCzcGoy2vyuqOeBYeFVxYuo1
FTBWHxZ3973Xc7wg4fes9BNCZtLZmzzueBXcwmh0s4HlPWHDanqwlLZi6tC2OE4s
36cK/tmWdA/rGZP/X51iWsKK7JfkVjBFMb1fQCGLJmBLWSQHw/EXQQbNbj8MjGn+
p/O1FGd5UT3dPPXWRBx48GImpewkqeeiDnOR0mcY3nOiDU9uyOedNV2rjo1V1Zy7
Bh5v167cOMwthXctt/gIhHYHdMbkpRXr8oj0tSSU/LJEzfQ/gqZco+cath7SNEKO
2NZZ6XSiQIeVqiXLPuoBGyUJdB2y4lSmFyGkZP6BOzYA7sMdzQIDAQABo4IDpTCC
A6EwHQYDVR0OBBYEFAL3YGQBDV4hNA3fqRViuFWGueN5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzkxYzJmNWQtNDI1OC0z
YjNkLTgyYTctNzhjNmE2ODhjMDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB
F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw
0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANdDqOXFUXJWb
YX1pAYPqmhutR74N9IRo+4GmGHsGLD7kgNsQrkdJJ2vPMr1EnbVIGtsdiDmIzN65
kJIPi9SNEZCGbniGsWHK6GzN9TfCilGPjWIMSVMg+YEdRtfa7jIgFIz5WFOE3eum
D8mj2R+VO+O2VWXo9PUZEG7oKco4SBPyP5S3N5Q/ZEGWbcywKjOe1EGhN/4gJd3D
q1XKi0QvTVicnq5ecJxPoK3sQKxZjvKrG5rGz2q9srWO1/NPGR8CkRawfJL2rKVB
lspC0Tr+/Agx0BQc1EZ18UWdsPo8kaIqgKKCHRmmuuQk1i+6wRCjv4KW5wk3bKMe
LaOE3ssORg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:48 2025 by rpki-client