Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
File:                     bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa (raw, json)
Hash identifier:          DGH/ej9gvb7/q5IKID8gFaj9jf07fEla5TUXfhxKKns=
Subject key identifier:   8B:2D:87:89:17:61:55:8A:2B:5B:7C:8F:44:66:76:85:50:AE:8E:D6
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584851A56A3C459D03487A232A80
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     21976
IP address blocks:        130.156.5.0/24 maxlen: 24
                          130.156.6.0/24 maxlen: 24
                          130.156.7.0/24 maxlen: 24
                          130.156.8.0/24 maxlen: 24
                          130.156.9.0/24 maxlen: 24
                          130.156.10.0/24 maxlen: 24
                          130.156.11.0/24 maxlen: 24
                          130.156.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:6a:3c:45:9d:03:48:7a:23:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=cf94362d-8704-4c97-8882-dce0841ed3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:75:ec:fb:2f:62:c4:70:03:77:a3:7a:d8:
                    dc:22:02:d0:63:d6:a9:1e:2f:6d:13:8d:79:e5:92:
                    1d:39:27:8b:28:cb:d9:8a:15:8d:10:54:bb:d2:09:
                    e9:05:e7:b0:6e:e0:6b:e8:21:7c:08:47:37:cd:d0:
                    28:59:5d:5b:9f:53:57:05:f6:5d:6e:3d:d6:37:2c:
                    e2:97:49:a2:69:57:3b:18:9a:3d:0e:61:30:f4:b4:
                    53:e4:3e:6c:e5:95:66:c4:08:4a:69:05:b6:82:71:
                    04:54:de:0d:55:98:2b:f2:ee:a5:31:de:03:1f:d2:
                    61:50:ce:b0:94:99:5e:f3:9e:7e:37:17:26:43:3f:
                    ba:1a:73:be:e5:44:2c:8f:b7:5a:35:6a:71:e1:e2:
                    ff:03:f7:f2:65:10:3f:3f:26:88:e0:10:0f:3b:4d:
                    09:3a:ea:93:48:d7:0a:28:38:37:7e:8a:0d:6f:58:
                    2b:db:2c:c3:6b:45:e1:ab:38:db:bb:46:47:cc:c1:
                    c1:67:8a:79:03:dd:e8:20:34:a0:47:7b:f6:8b:85:
                    c3:8c:cf:65:e6:79:c7:ac:4a:b2:b7:8c:f6:47:85:
                    0f:d9:87:76:36:52:24:74:bd:62:b0:aa:34:79:47:
                    2b:86:15:8a:de:7b:1b:5b:31:06:2b:02:01:e3:38:
                    22:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2D:87:89:17:61:55:8A:2B:5B:7C:8F:44:66:76:85:50:AE:8E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/bdb4685b-bdba-39c0-a88b-ee594d8bf927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.5.0-130.156.12.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:35:e8:0e:63:c3:aa:dd:f2:f1:3f:80:91:8a:94:5d:8f:88:
         77:38:4d:5d:6b:e0:6b:5d:b8:f2:e4:ec:f7:1c:19:a1:c5:ff:
         08:07:1b:f2:16:27:2b:e3:a5:27:17:ff:a1:e3:ba:66:e9:1a:
         a6:0d:30:1a:52:0b:12:f3:99:d7:4c:1b:10:39:fc:82:e9:e9:
         ca:3b:ec:b4:35:88:9f:a0:78:e3:68:21:e0:c6:d3:18:28:76:
         82:a2:c9:81:10:50:6f:18:b5:a4:47:31:54:fb:12:c1:db:dc:
         47:17:b3:93:4d:ec:99:d2:31:78:7d:c8:ad:39:12:11:a1:01:
         67:8c:8c:55:ad:88:7e:39:c4:72:1e:5a:78:1d:ff:2a:3f:2e:
         bc:57:02:79:3e:d9:b7:f1:fe:58:f0:7f:67:f6:bd:99:30:ef:
         61:c7:75:8b:e7:29:61:6f:53:b9:74:e3:d4:59:92:80:7a:4e:
         1a:63:00:03:ee:bd:dd:c0:df:e0:10:64:94:39:a0:e2:2f:47:
         5c:e4:74:8e:e7:c0:69:02:bf:a4:c5:c7:39:33:42:48:8b:03:
         cf:e0:69:13:2e:bd:0c:5d:e1:c5:8c:3c:9e:23:0a:54:cd:ec:
         d6:f4:e8:da:71:4e:9a:18:fa:70:5e:76:ea:25:25:58:7f:26:
         00:31:e1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:10:09 2025 by rpki-client