Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
File:                     4a850ed4-4106-3fe5-af86-31e842945a97.roa (raw, json)
Hash identifier:          9loG3XxMlakB81zAdXLyLJRpEjRayHPszhYyzgwVT0A=
Subject key identifier:   9B:69:AC:A6:11:D5:17:9B:75:43:F9:39:7D:C6:76:3D:42:6D:D6:BF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F0308A96DD5C58DBDB1980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     203
IP address blocks:        130.174.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:30:8a:96:dd:5c:58:db:db:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=36911dd4-2df9-4277-913c-5361c261d290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:e5:38:e4:77:d8:81:6f:36:32:4b:cd:bf:
                    46:11:e1:94:e7:f8:7d:b5:f5:b2:32:60:23:8f:79:
                    c9:15:6c:58:cd:b3:c0:a5:02:7c:48:bd:18:0a:f4:
                    bd:a8:f7:56:98:9a:ae:c0:79:dc:7c:e4:43:f9:58:
                    ec:68:d1:73:4d:73:8b:70:fe:bc:5b:e4:c5:b2:cc:
                    32:f4:f3:5c:1a:01:33:f4:19:a5:4a:06:85:d4:38:
                    75:2c:2d:aa:82:af:a8:ec:51:89:69:73:2a:d0:af:
                    79:eb:c9:91:a5:3f:d2:94:84:58:25:16:5c:e3:ea:
                    c1:e5:f5:2d:b5:2b:55:e7:ee:c8:34:91:58:b0:c2:
                    02:a5:dd:bf:b2:70:f2:35:15:6a:63:e8:e5:cb:fb:
                    bb:77:96:16:82:a7:76:e9:7e:63:90:84:88:56:f2:
                    65:b0:2f:e1:5b:02:f2:7f:c3:82:53:0e:7d:e8:13:
                    27:b1:31:77:f2:67:97:a4:a5:12:bb:00:9c:5c:99:
                    56:ef:1f:0d:bf:b2:5a:96:7a:85:52:89:5d:a4:b1:
                    f0:3d:e6:bf:2c:28:7b:82:6e:6c:93:3c:01:f0:35:
                    71:06:b7:e1:3b:aa:06:55:88:e8:b8:28:e9:36:92:
                    56:29:df:f7:7e:3a:d2:33:e3:d0:e6:72:f5:8d:6d:
                    26:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:69:AC:A6:11:D5:17:9B:75:43:F9:39:7D:C6:76:3D:42:6D:D6:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:1a:ac:db:4a:2c:ab:28:32:42:b7:ea:c6:da:64:9c:25:
         69:3e:7f:d1:e7:2e:57:8f:b0:1c:24:22:6b:5e:50:36:1e:46:
         2e:09:4f:4a:f1:ed:9a:34:91:0d:f3:5c:67:28:a9:ee:d1:e0:
         d5:c3:ec:d0:ea:3d:ad:91:dd:c7:b4:d9:a9:05:d1:9e:12:65:
         97:f9:d8:24:ab:d6:ef:cd:7e:78:f5:97:78:1a:2a:7c:55:27:
         0a:a3:c4:25:43:57:05:14:ed:b5:f3:c9:0d:5c:ca:66:14:b1:
         be:82:39:d9:23:b6:a9:70:e0:0e:82:d4:fb:71:c7:23:33:bf:
         c8:22:be:9e:d7:55:93:95:0d:c2:da:45:f1:43:d9:de:a9:d5:
         77:85:8a:b5:7c:13:76:3e:0c:0d:86:ef:fd:88:26:af:59:10:
         05:58:63:4c:2d:df:c3:90:56:c1:91:0a:99:b3:de:80:9d:b8:
         aa:fa:0f:8b:de:a6:4c:52:6b:3c:91:68:2b:2c:c7:be:3a:42:
         92:c1:de:4e:b6:71:2a:7d:09:cb:6b:f7:ad:b1:97:02:33:06:
         26:09:d9:54:69:db:b6:59:02:29:60:d6:30:41:91:b5:18:5f:
         ae:48:ee:61:12:20:34:7d:11:05:39:1e:69:bb:51:d8:7b:c2:
         37:f4:38:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DCKlt1cWNvbGYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzY5MTFkZDQtMmRmOS00Mjc3LTkxM2MtNTM2MWMyNjFkMjkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWHlOOR32IFvNjJLzb9GEeGU5/h9tfWyMmAj
j3nJFWxYzbPApQJ8SL0YCvS9qPdWmJquwHncfORD+VjsaNFzTXOLcP68W+TFsswy
9PNcGgEz9BmlSgaF1Dh1LC2qgq+o7FGJaXMq0K9568mRpT/SlIRYJRZc4+rB5fUt
tStV5+7INJFYsMICpd2/snDyNRVqY+jly/u7d5YWgqd26X5jkISIVvJlsC/hWwLy
f8OCUw596BMnsTF38meXpKUSuwCcXJlW7x8Nv7JalnqFUoldpLHwPea/LCh7gm5s
kzwB8DVxBrfhO6oGVYjouCjpNpJWKd/3fjrSM+PQ5nL1jW0mlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJtprKYR1RebdUP5OX3Gdj1Cbda/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGE4NTBlZDQtNDEwNi0z
ZmU1LWFmODYtMzFlODQyOTQ1YTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4RMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/5GqzbSiyrKDJCt+rG2mScJWk+f9HnLlePsBwkImteUDYeRi4JT0rx
7Zo0kQ3zXGcoqe7R4NXD7NDqPa2R3ce02akF0Z4SZZf52CSr1u/Nfnj1l3gaKnxV
JwqjxCVDVwUU7bXzyQ1cymYUsb6COdkjtqlw4A6C1PtxxyMzv8givp7XVZOVDcLa
RfFD2d6p1XeFirV8E3Y+DA2G7/2IJq9ZEAVYY0wt38OQVsGRCpmz3oCduKr6D4ve
pkxSazyRaCssx746QpLB3k62cSp9Cctr962xlwIzBiYJ2VRp27ZZAilg1jBBkbUY
X65I7mESIDR9EQU5Hmm7Udh7wjf0OJQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:42 2025 by rpki-client