Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa
File:                     74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa (raw, json)
Hash identifier:          kwD8k/hRBrzdSxs6g4cKpQiA04Vmgqvm0kx7RqpZ6+8=
Subject key identifier:   37:0C:DB:05:81:87:F0:16:6F:FF:07:95:CF:06:85:07:85:11:23:73
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584812D5371A1758A40F4FE6F5E0
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        144.81.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:37:1a:17:58:a4:0f:4f:e6:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=681cebcb-7fdf-47e2-95ba-afe2bf4651be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:81:09:b2:8d:ae:84:aa:2c:98:2f:4d:7a:
                    c2:dd:e8:cb:2a:ec:ce:ad:f7:76:8d:21:cf:ea:47:
                    37:86:30:9f:b4:6c:30:c6:9a:80:b9:88:3c:13:2a:
                    7c:b0:33:d6:5d:d2:f3:dd:48:50:2e:11:0e:96:a9:
                    60:f4:dc:97:e5:a2:47:95:d3:2a:09:c4:b5:01:ea:
                    eb:c2:e9:cf:29:66:ea:da:29:3a:0a:34:62:37:e4:
                    69:3d:5a:83:10:eb:ae:4c:18:25:fb:1c:72:f1:4e:
                    16:b4:0a:f6:07:ce:bd:e6:d9:38:3f:50:1a:e3:34:
                    bb:8f:34:4d:4d:1c:e1:81:ed:1e:61:9a:1c:7b:08:
                    91:7d:a8:2e:c7:eb:7a:f3:3b:70:1b:73:da:61:a2:
                    47:28:2f:fd:b5:b2:be:cc:8b:8d:9e:68:f5:03:7c:
                    27:55:21:aa:77:f2:76:e0:78:f3:a4:82:9a:83:96:
                    c2:0b:59:27:6a:3d:c7:25:ec:ad:c2:7a:06:92:f5:
                    ab:c4:01:b6:7f:b6:e9:7f:6e:c9:93:96:5c:b3:4c:
                    ba:44:8a:66:e5:0e:59:67:b9:e2:2b:f1:e7:c3:1a:
                    3c:44:93:ef:f6:1e:05:1b:f4:78:99:1e:34:20:e3:
                    d7:24:a9:6f:0f:4f:3f:02:9b:ab:27:47:8b:d3:2b:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0C:DB:05:81:87:F0:16:6F:FF:07:95:CF:06:85:07:85:11:23:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/74f40584-fc0c-3c62-abde-3cb9d0aa7614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a9:a6:24:50:56:66:b6:45:d4:d7:10:43:76:b6:fb:23:03:
         6b:0d:70:6a:d8:ab:61:a4:4d:85:b8:9c:10:fc:e1:fe:3a:57:
         da:6e:c6:21:1c:ab:06:90:cf:09:4b:e9:d7:2d:a6:c6:c0:8c:
         d9:a4:58:f1:14:c5:1f:f8:bd:c9:76:e2:d8:a4:68:3e:45:55:
         20:31:b7:53:90:e2:50:f3:e6:da:b2:44:ab:be:d3:1f:00:0c:
         1f:3b:62:31:43:39:f3:27:dc:3d:96:6d:aa:6b:0f:97:14:eb:
         0d:1a:1f:97:24:a1:09:38:06:85:58:2f:ac:d9:df:9d:1f:dd:
         c0:bc:4b:e7:75:81:8b:f7:4f:cf:6b:19:b9:e0:9c:ef:ab:b8:
         86:1c:33:f4:91:84:a7:19:72:aa:f3:15:84:44:fe:82:cc:4a:
         90:1d:ac:2a:f5:74:ef:0b:30:4d:b4:f9:f2:bc:c3:01:e8:a0:
         27:3d:79:0b:37:a4:87:4f:ac:c1:f4:87:e1:bf:9b:f4:52:70:
         e8:c1:57:1b:73:28:03:a1:53:51:86:e9:c4:dc:21:65:22:e2:
         b6:3f:f7:9a:c7:6d:33:89:c6:30:db:e0:18:49:a8:ad:e8:a7:
         40:a6:71:45:ea:e7:0d:b8:1f:05:ae:77:3a:a6:ad:7d:e6:d7:
         31:e3:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:35 2025 by rpki-client