Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
File:                     b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (raw, json)
Hash identifier:          3zyaLXCaiydXOPvlCf84fDlCF1WhHlNLt9+CSO88dA4=
Subject key identifier:   D9:49:9F:61:97:18:15:A8:A2:31:C0:4B:FA:5D:5F:0E:CC:C3:A6:5D
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F432858483F802CA557E192CD4B29F1E0
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        130.248.141.0/24 maxlen: 24
                          130.248.158.0/24 maxlen: 24
                          130.248.164.0/24 maxlen: 24
                          130.248.167.0/24 maxlen: 24
                          130.248.199.0/24 maxlen: 24
                          130.248.202.0/24 maxlen: 24
                          130.248.203.0/24 maxlen: 24
                          130.248.224.0/24 maxlen: 24
                          130.248.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2c:a5:57:e1:92:cd:4b:29:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=4e8c290b-6bae-44eb-b6d1-678bc8f9ae11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:0b:b5:df:d4:e4:86:9a:08:97:bc:10:21:
                    b3:14:06:63:d3:6d:53:12:cc:82:57:37:8a:48:b2:
                    17:0e:d1:4f:2b:b8:5c:af:9d:ea:71:ab:ad:db:14:
                    a5:70:2f:6f:06:7e:20:d5:18:4a:35:e3:84:03:d0:
                    fe:e3:27:d6:10:21:ff:fd:5e:25:ed:0d:a2:1a:fd:
                    39:3f:11:57:20:46:aa:98:0e:81:6e:06:58:41:b2:
                    8e:fd:0c:44:06:56:9a:67:e9:b2:9d:fa:a7:a4:cf:
                    5a:02:3e:34:4e:31:4d:3c:97:9f:08:12:5c:8d:83:
                    44:66:a4:71:34:53:84:9f:dd:b6:11:81:53:82:57:
                    cb:52:4d:e1:25:27:74:d2:94:d8:cb:9d:71:c2:55:
                    ad:94:7d:4b:1a:21:45:4c:ce:d4:ab:3a:d7:d6:55:
                    28:16:66:2c:40:23:be:2f:a5:e3:bf:73:84:33:f2:
                    c9:a5:cc:4a:3e:23:db:3b:a7:c1:86:bb:2d:fd:0e:
                    55:09:a8:99:33:6b:c7:53:be:af:3f:d4:91:f5:a5:
                    c6:53:0a:a9:e7:1c:6e:ce:06:47:95:46:1f:a9:2a:
                    96:12:ff:3c:84:39:4b:d6:6f:7d:54:c1:b3:29:89:
                    d5:bd:d3:48:a7:a2:47:0a:17:1d:0e:46:28:e9:0f:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:49:9F:61:97:18:15:A8:A2:31:C0:4B:FA:5D:5F:0E:CC:C3:A6:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/b780a0ee-0d24-319f-ad59-98019ee54e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.248.141.0/24
                  130.248.158.0/24
                  130.248.164.0/24
                  130.248.167.0/24
                  130.248.199.0/24
                  130.248.202.0/23
                  130.248.224.0/24
                  130.248.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:52:dd:72:62:85:26:90:05:78:3b:ab:fc:ca:c5:bc:20:e8:
         d6:e9:83:8f:ff:38:d3:c4:c7:a0:66:06:ec:f2:fe:6b:41:75:
         d5:24:c5:11:28:16:9b:8b:b8:88:87:28:28:c5:a4:fa:bb:72:
         55:97:cc:f2:a1:f1:b3:8b:5c:99:2d:c5:f7:1f:1b:c1:af:91:
         d2:23:9b:a4:56:17:90:6e:10:b5:05:a9:d5:18:01:a6:59:0a:
         73:10:fa:c0:97:c1:97:09:ce:d6:fe:45:b1:c3:bd:90:37:6f:
         cc:33:4c:9a:d9:60:28:62:0c:c4:5f:0b:ec:b6:87:b7:15:01:
         0f:35:7c:fb:8c:2b:e9:b3:47:ee:01:80:9d:e3:b8:9f:34:c7:
         a7:0b:03:90:bf:da:8d:97:7b:3a:dd:e4:95:0f:50:dc:d8:3d:
         e3:1a:9d:e3:0b:05:31:99:94:2c:09:06:23:f3:27:86:9c:d6:
         1b:2c:64:98:fd:2e:0f:1d:13:05:d1:c8:c1:98:21:c5:27:05:
         f9:bd:2d:0e:d7:39:e2:66:42:02:83:e3:4f:d2:52:cb:4b:f8:
         8c:94:13:05:bd:57:1a:b2:e0:e2:df:35:93:78:4d:73:30:03:
         3a:2e:32:32:74:ca:5e:93:a5:37:44:99:b3:d6:1f:8c:46:b6:
         8e:57:3d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:41 2025 by rpki-client