Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ba11830-c517-3e6a-bf11-42fe363736d5.roa
File:                     3ba11830-c517-3e6a-bf11-42fe363736d5.roa (raw, json)
Hash identifier:          qRcIg5guHl+qjwBNvNDcwQdPuzwRCQ87IrQkLM6AtBQ=
Subject key identifier:   94:6A:05:1C:0F:0E:E9:67:27:4D:E2:D8:A5:06:0C:89:7F:F5:AB:5D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F03DE488F0EAC85C2A5660
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ba11830-c517-3e6a-bf11-42fe363736d5.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        130.174.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:3d:e4:88:f0:ea:c8:5c:2a:56:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=71195339-b88e-46a7-a4c1-9fc03c46efbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:49:24:68:17:b2:57:e4:b8:65:c6:19:4f:
                    b9:1c:78:1c:8b:4b:e7:4c:fc:2d:29:3d:1b:be:1c:
                    63:15:e4:d8:f5:96:a8:14:5a:9b:77:5b:ac:c5:5f:
                    cf:e3:29:db:a7:43:93:83:d5:fe:68:c2:11:bd:e6:
                    c0:7d:3e:e1:9c:fd:87:2d:64:79:2b:68:56:f7:a1:
                    a0:18:7c:63:f2:03:93:c1:64:85:f0:6b:76:7f:3d:
                    c1:a0:90:4f:c7:2b:b4:c8:1e:c9:99:c9:23:e5:81:
                    24:b7:54:8f:98:37:9e:0f:5d:2f:91:1d:59:75:c0:
                    76:d8:e7:55:3c:76:3e:88:1a:0b:2b:8b:59:f2:11:
                    33:f1:4a:29:5c:5c:4d:c3:00:ed:ee:e1:c9:31:15:
                    88:f8:72:59:34:0c:4f:f2:13:bc:a2:5a:e6:66:d0:
                    e3:f8:fe:26:67:9e:8c:a0:f2:dc:b8:32:a1:04:73:
                    d3:7c:bb:df:0f:db:61:c5:3b:ee:c4:3a:b1:17:b0:
                    e6:4b:8a:63:57:dd:55:c1:fc:87:54:03:a9:4d:44:
                    04:07:5b:d4:e5:83:83:91:47:ee:82:a7:f3:3d:3c:
                    47:a7:50:b9:32:1d:4e:e7:de:3b:9b:5c:04:9b:a7:
                    25:20:9f:81:c7:9e:17:40:e9:ba:84:0f:e9:b0:0b:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6A:05:1C:0F:0E:E9:67:27:4D:E2:D8:A5:06:0C:89:7F:F5:AB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ba11830-c517-3e6a-bf11-42fe363736d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:ec:75:a1:d4:6b:20:85:b7:f3:c8:93:a8:72:47:a2:16:
         1c:dc:82:93:19:9e:c2:3c:69:7c:fd:b4:46:b4:f3:5f:83:51:
         df:0a:2e:07:c6:a1:42:3d:56:de:30:51:ae:b3:50:48:69:c3:
         68:32:35:5e:76:24:18:43:02:32:ba:1a:50:f5:f7:2e:f3:89:
         14:a9:40:59:2b:13:6d:c7:83:bf:c2:c3:75:cd:4b:0c:b8:57:
         bc:ea:d7:bb:dd:18:5f:e6:e1:cf:bb:0f:2c:99:2c:df:ec:88:
         52:a4:5d:8f:8f:02:e8:2f:f8:48:8e:bb:86:b2:e4:21:20:b3:
         c8:7d:e8:7d:73:58:6d:3d:ba:8c:92:fe:12:a3:1f:b2:59:1c:
         2d:6b:87:7d:72:46:b2:84:13:e0:c8:c0:4d:68:71:4a:5f:3d:
         72:35:14:33:20:6f:8f:b6:4a:8d:ad:b3:dc:a6:27:d5:2c:af:
         60:65:22:83:76:b3:b8:cc:c8:f8:6c:44:f9:fe:45:1f:85:7e:
         30:0f:91:96:e5:85:c8:53:7e:52:c5:c7:71:ec:4b:af:d9:8f:
         5e:f5:8d:c5:b8:a5:ee:75:29:fe:65:0c:4c:3b:a4:90:a4:7c:
         38:55:44:81:77:18:bb:49:9d:30:e6:08:ce:b7:23:23:8a:bd:
         fe:79:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:00:29 2025 by rpki-client