Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa
File:                     e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa (raw, json)
Hash identifier:          QZ/Pk2aD3qBmh43N2JFVUXb5VdJANF/BVYb9MFGj0JY=
Subject key identifier:   85:4D:5D:ED:54:B2:33:E5:5C:FC:89:97:DD:C5:71:6D:B5:42:46:36
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858483B4FF403E2B939843C28D780
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     174
IP address blocks:        23.237.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f4:03:e2:b9:39:84:3c:28:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=da62ec2b-bff0-49da-9096-42afd701db26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ef:e0:ea:59:4c:3f:f3:2b:15:b6:3a:31:d1:
                    40:5a:98:2c:34:8a:e9:17:7b:c4:5c:b0:3c:55:89:
                    5a:ae:07:df:eb:00:53:f8:9b:ac:f9:81:35:c1:b5:
                    e3:89:f1:cc:0c:d0:90:4f:16:68:d3:dd:8e:f3:3f:
                    a8:ad:7a:35:34:b0:55:1c:c4:7a:02:47:23:f5:8a:
                    32:32:1b:0e:ef:d3:fb:49:1a:d7:dd:fe:70:97:c1:
                    c4:e4:b4:46:b6:46:bb:f5:33:b3:d5:3d:d8:c2:d3:
                    e8:c3:8b:de:b6:ab:c5:f2:c3:d2:c5:f7:55:78:4c:
                    64:77:b7:10:c6:22:30:04:df:83:89:04:ed:0b:d8:
                    fb:59:4b:8d:ac:1e:90:c9:da:d6:8e:d8:ff:e9:8a:
                    23:19:6c:a4:a2:d1:3c:b4:56:4d:44:c2:b2:04:95:
                    4a:0a:17:98:f2:21:40:fc:ba:f4:3a:d6:f1:94:84:
                    fe:a3:54:79:b5:63:c3:a7:d2:e9:34:66:e7:cc:eb:
                    ec:11:54:0e:be:ae:10:10:ce:7a:f9:9d:2d:e7:35:
                    fe:0c:8e:ae:ea:1d:91:bb:4c:5d:6f:a5:3a:1e:9b:
                    4f:1f:be:ec:8c:5a:41:c1:a8:9f:3d:f2:fa:1c:dd:
                    42:80:c5:e3:80:57:c8:b8:98:1b:4a:f0:14:8c:2b:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4D:5D:ED:54:B2:33:E5:5C:FC:89:97:DD:C5:71:6D:B5:42:46:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.237.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:c0:a5:78:eb:b0:53:21:d5:9f:96:5e:93:b2:78:c0:61:
         3a:8c:40:ad:2e:a1:31:4c:59:fc:60:0d:c3:a7:53:f2:d9:bf:
         27:98:9a:08:39:0f:41:83:5b:0b:e6:d2:fa:59:65:19:4a:93:
         06:3c:41:6d:17:80:bf:47:9e:f3:18:2d:db:29:11:b6:c2:65:
         93:f7:71:57:12:a5:8f:e2:63:7d:32:23:64:93:33:52:ef:76:
         96:76:91:25:e0:d1:7f:7b:41:40:e8:57:d8:70:d1:e5:3a:65:
         8d:ae:1e:70:26:7c:7a:ae:dc:14:56:3b:b2:80:a7:c1:d5:45:
         11:48:b6:dc:c9:48:0e:f9:24:3f:3a:92:99:b1:d2:56:d8:0d:
         74:b4:a1:7b:69:3f:ab:fc:f2:cb:92:37:8e:b7:b2:c0:76:31:
         6c:ff:e5:5a:35:9e:98:13:88:31:1e:49:2f:99:20:54:c9:99:
         a9:c5:55:73:e9:47:fc:a4:cd:07:a8:91:ad:b3:e8:89:19:22:
         5d:43:6f:10:ae:83:66:e9:84:21:77:d6:61:3d:02:8c:16:00:
         95:1a:80:64:85:e7:ac:66:92:4d:44:63:71:92:e3:89:a8:75:
         b0:91:f9:87:22:61:7d:8b:e3:c2:24:5e:51:83:db:77:8b:d6:
         60:3a:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:41 2025 by rpki-client