Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa
File:                     a90c0d2a-d5be-3719-a165-238f4345c6a1.roa (raw, json)
Hash identifier:          Lo4oCIqKUpyrNFNgkgb7PuCWse/lEvz96LmuKM47hd8=
Subject key identifier:   4F:4B:A5:05:B4:90:DE:13:4C:C2:03:BE:38:90:F0:05:72:DB:A2:96
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858484D7581E031627EE392F0F540
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     30058
IP address blocks:        23.237.162.0/23 maxlen: 24
                          23.237.247.0/24 maxlen: 24
                          50.7.49.0/24 maxlen: 24
                          216.227.133.0/24 maxlen: 24
                          2001:49f0:d0d1::/48 maxlen: 48
                          2001:49f0:d122::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:81:e0:31:62:7e:e3:92:f0:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=3dd4e967-ad62-4281-9014-0947873d4714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:32:d9:53:c2:cb:77:1f:b2:43:6f:f9:ae:
                    84:32:87:06:61:65:0e:d8:0d:0e:f3:d1:3f:2f:30:
                    d2:fc:61:33:a5:da:56:a3:4c:ba:3e:60:14:53:51:
                    78:db:ec:4e:ee:2a:21:a5:49:98:b7:ba:e4:6a:9f:
                    58:7f:85:37:74:2c:1e:b1:6f:6a:aa:5e:b4:e9:75:
                    da:bc:ed:9e:25:a9:32:74:9f:3a:07:6f:b0:55:04:
                    02:7a:ac:fe:17:f0:bc:25:9a:5c:c8:0f:b1:43:6d:
                    01:c1:18:9d:ac:1b:40:49:55:cf:57:91:71:b9:58:
                    38:ac:bf:12:a3:cd:88:ae:9c:f4:cc:c4:71:8f:10:
                    7e:19:63:3e:04:3c:b5:43:bc:49:aa:38:d1:1a:92:
                    da:f6:ab:2e:f7:51:8f:80:23:51:c8:ac:a9:fc:69:
                    95:50:cc:99:3b:d6:08:70:7e:a8:4f:35:27:0b:96:
                    c1:2d:dd:8d:99:19:5a:5b:20:d8:82:0f:67:d0:c8:
                    7a:80:c4:a9:cf:55:7b:63:6c:4f:70:c6:c1:50:0a:
                    42:6f:25:ef:da:53:9f:22:ff:94:f0:97:56:37:fe:
                    59:57:25:90:9a:1a:a5:b0:84:ca:2d:26:cd:0e:0f:
                    24:d6:80:11:10:49:73:10:cd:3a:c8:3b:7d:c1:eb:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4B:A5:05:B4:90:DE:13:4C:C2:03:BE:38:90:F0:05:72:DB:A2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/a90c0d2a-d5be-3719-a165-238f4345c6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.162.0/23
                  23.237.247.0/24
                  50.7.49.0/24
                  216.227.133.0/24
                IPv6:
                  2001:49f0:d0d1::/48
                  2001:49f0:d122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:98:b2:0a:bb:89:43:ab:05:42:e2:40:f8:f0:4d:a4:d5:
         57:79:a8:87:a8:7f:38:54:23:40:b5:79:14:4b:8c:f2:f9:6a:
         50:23:15:db:89:9d:e5:69:fc:64:a3:cc:ab:b0:b2:76:bd:42:
         ad:1c:2f:8e:9d:d8:79:85:e2:1b:a5:cd:7d:48:10:ff:bb:05:
         ba:5a:ba:d2:76:aa:09:9e:22:ba:7b:ae:25:22:4f:f5:dd:e3:
         aa:24:7e:ca:a1:c7:77:fb:9f:c4:c5:04:5c:3f:b9:5e:c8:db:
         95:34:ff:91:06:51:b0:4c:97:88:ab:24:5b:35:c5:fe:ad:b1:
         6e:d9:4c:43:3a:23:84:00:56:72:2e:67:f1:9c:7e:08:55:1e:
         1e:09:6e:03:26:15:03:96:ad:c2:15:26:63:95:28:3d:a0:15:
         1b:5c:68:f7:32:71:da:7c:59:09:61:63:27:7a:07:80:14:58:
         9c:23:42:17:8e:7b:a2:49:1b:c4:8d:e1:ce:ad:45:e0:52:b2:
         bf:eb:82:7c:d7:b7:b3:55:c6:57:e4:19:d0:52:4d:f3:b6:f7:
         61:65:f3:56:d0:58:14:8f:83:5f:31:92:7e:d9:09:ad:1a:f6:
         80:8c:66:69:19:9a:75:3d:eb:d1:95:9a:cf:1d:24:10:a5:e9:
         15:3b:1e:77
-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEhNdYHgMWJ+45Lw9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk
M2RkNGU5NjctYWQ2Mi00MjgxLTkwMTQtMDk0Nzg3M2Q0NzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFwy2VPCy3cfskNv+a6EMocGYWUO2A0O89E/
LzDS/GEzpdpWo0y6PmAUU1F42+xO7iohpUmYt7rkap9Yf4U3dCwesW9qql606XXa
vO2eJakydJ86B2+wVQQCeqz+F/C8JZpcyA+xQ20BwRidrBtASVXPV5FxuVg4rL8S
o82Irpz0zMRxjxB+GWM+BDy1Q7xJqjjRGpLa9qsu91GPgCNRyKyp/GmVUMyZO9YI
cH6oTzUnC5bBLd2NmRlaWyDYgg9n0Mh6gMSpz1V7Y2xPcMbBUApCbyXv2lOfIv+U
8JdWN/5ZVyWQmhqlsITKLSbNDg8k1oAREElzEM06yDt9wesIGQIDAQABo4IDgTCC
A30wHQYDVR0OBBYEFE9LpQW0kN4TTMIDvjiQ8AVy26KWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYTkwYzBkMmEtZDViZS0z
NzE5LWExNjUtMjM4ZjQzNDVjNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBF+2iAwQA
F+33AwQAMgcxAwQA2OOFMBgEAgACMBIDBwAgAUnw0NEDBwAgAUnw0SIwVAYDVR0g
AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h
cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC
AQEAtraYsgq7iUOrBULiQPjwTaTVV3moh6h/OFQjQLV5FEuM8vlqUCMV24md5Wn8
ZKPMq7Cydr1CrRwvjp3YeYXiG6XNfUgQ/7sFulq60naqCZ4iunuuJSJP9d3jqiR+
yqHHd/ufxMUEXD+5XsjblTT/kQZRsEyXiKskWzXF/q2xbtlMQzojhABWci5n8Zx+
CFUeHgluAyYVA5atwhUmY5UoPaAVG1xo9zJx2nxZCWFjJ3oHgBRYnCNCF457okkb
xI3hzq1F4FKyv+uCfNe3s1XGV+QZ0FJN87b3YWXzVtBYFI+DXzGSftkJrRr2gIxm
aRmadT3r0ZWazx0kEKXpFTsedw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:55 2025 by rpki-client