Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa
File:                     2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa (raw, json)
Hash identifier:          W01LsibBIB9c/pijh97WEcjk2jpS0Yk1TuOStan27S8=
Subject key identifier:   FF:7F:D5:08:11:74:DD:87:4A:EF:6E:CB:98:38:87:5F:A6:99:14:F2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556A51EE47A07A97D845F2
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6a:51:ee:47:a0:7a:97:d8:45:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=056e6d41-0322-4e58-b152-f47ee2206dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:e3:f7:2f:d5:09:85:05:c0:76:78:a6:06:
                    c2:fd:93:b4:c1:9d:a6:32:bc:a0:ac:33:f0:44:f2:
                    63:a4:d2:4c:b5:14:0f:d4:0f:b2:fd:41:fd:68:59:
                    5b:3d:15:ca:e9:c9:d2:59:0b:1b:13:cb:42:48:0f:
                    11:ac:4d:5b:86:2a:1f:52:0d:3b:8b:b1:6b:7d:de:
                    7a:17:3c:52:d2:c0:eb:35:61:54:3e:79:ff:d8:96:
                    02:03:0c:04:df:45:36:57:86:f1:d4:e8:69:a1:d7:
                    2c:b6:64:c3:0f:7b:af:c1:1d:c6:9a:28:ca:9f:67:
                    35:7c:f1:21:6a:4b:d5:86:79:d6:7a:83:c0:e8:3c:
                    d2:94:07:0a:f2:85:8f:44:4f:ce:ca:c2:04:ba:73:
                    31:5d:ba:46:7a:6e:97:5b:c8:4c:5b:e8:96:22:5d:
                    c6:91:ce:f1:fd:69:4e:db:53:65:14:24:a6:af:37:
                    84:99:24:7b:69:0f:84:36:46:40:b3:ca:79:e2:d3:
                    70:31:2c:d1:73:f5:d2:dc:2a:62:db:d9:c2:91:37:
                    b1:c6:f9:0b:67:68:a3:27:91:25:8b:ee:cc:03:b8:
                    87:7e:2a:dd:a2:03:7b:86:bf:a3:54:10:87:f8:91:
                    59:cf:e4:49:86:5f:df:af:23:8b:54:95:29:1f:52:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7F:D5:08:11:74:DD:87:4A:EF:6E:CB:98:38:87:5F:A6:99:14:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:fd:87:9c:d5:90:37:a5:71:78:b0:f2:cb:36:54:4d:cb:02:
         77:70:6c:2b:61:17:3a:87:8d:a2:65:cf:d5:a8:fd:ce:04:94:
         14:d7:2b:e2:76:70:5f:ee:d2:6f:86:e9:10:91:a6:eb:4f:de:
         84:35:86:e2:bf:75:1a:dd:27:68:ad:32:16:53:aa:f0:39:79:
         d7:72:17:f4:db:c4:be:27:ef:25:b4:83:8d:b6:e5:ab:32:87:
         6d:0f:07:63:bf:94:20:1f:9a:69:a6:9a:d5:3d:56:eb:86:b2:
         62:05:53:74:5e:97:c0:2e:74:f2:4f:18:e7:1d:84:15:88:ae:
         1a:d8:8d:17:f3:8b:0e:bc:49:ec:69:b5:28:b0:9d:f7:32:09:
         88:33:24:87:c1:9a:26:65:cd:14:1d:5d:5d:50:e4:ba:88:11:
         9b:87:0f:40:c1:ca:ae:1e:28:1f:82:fc:13:03:f6:05:0f:5d:
         6f:7c:87:b3:da:0b:2d:2d:da:c3:09:b4:8f:dd:c7:92:c5:4e:
         08:0e:1a:08:d5:79:08:c2:1a:05:f3:8a:65:c6:aa:de:ff:4d:
         f7:56:34:07:80:3e:b6:50:e0:60:49:15:c4:5d:d1:b6:54:8e:
         39:fb:99:64:c6:53:b4:3e:9e:db:12:4a:83:39:47:41:a1:fc:
         ba:c8:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:39 2025 by rpki-client