Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d66341-b2aa-3acd-94b1-86a0fc320159.roa
File:                     60d66341-b2aa-3acd-94b1-86a0fc320159.roa (raw, json)
Hash identifier:          xRfcR4OYQIfVc+Hl1qXwqdtnM+jMZ0Yf0Zj65oVSUak=
Subject key identifier:   F7:64:5C:CF:D8:39:95:65:93:6B:C3:46:1C:0F:6B:E3:95:C6:51:85
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858483455702F93DC213F81509540
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d66341-b2aa-3acd-94b1-86a0fc320159.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:70:2f:93:dc:21:3f:81:50:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=df073fc3-7500-4eb9-b3fc-4f75545fbbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:85:07:5f:18:96:20:02:20:16:68:e1:9b:
                    0d:2f:00:5b:3d:93:19:c4:9d:57:5e:a2:1a:0e:14:
                    17:1b:9d:ff:6e:aa:b3:bc:8a:d7:c3:40:ff:cf:58:
                    a8:9c:6d:11:24:cf:c9:9e:aa:f8:4e:87:3c:06:fd:
                    d3:7e:c6:53:c4:bc:93:42:c0:2c:72:35:1d:b8:8d:
                    05:7b:f9:14:2f:44:30:0c:13:97:5e:ed:c5:cc:07:
                    13:f0:97:de:fc:fd:97:e0:5c:f5:82:74:ca:7b:0a:
                    d9:bb:f1:fc:d7:39:32:44:e2:7d:84:2a:d5:36:fa:
                    5f:3b:3e:1f:ec:c7:8e:56:cb:ab:76:60:6e:a7:de:
                    a3:1a:e8:79:2c:43:5e:0f:16:09:44:60:aa:06:fd:
                    ba:d4:d3:ae:72:28:0f:00:9d:12:c6:90:bc:06:63:
                    f4:3c:8c:ba:e8:d8:52:55:16:c9:b8:30:7b:13:14:
                    ef:f1:ab:99:c3:8f:0f:27:f7:db:f3:fe:29:db:a1:
                    52:f8:a4:3e:52:31:b0:6f:00:63:34:15:e7:e2:50:
                    7c:ee:83:4a:eb:39:13:9f:ed:f0:74:88:de:37:03:
                    c5:cd:2e:fb:ff:aa:b3:69:31:22:fa:24:4d:3c:f8:
                    fb:87:66:36:ae:3c:34:43:0e:e9:6c:81:0a:4b:73:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:5C:CF:D8:39:95:65:93:6B:C3:46:1C:0F:6B:E3:95:C6:51:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/60d66341-b2aa-3acd-94b1-86a0fc320159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:3d:5f:9c:ec:1b:dd:14:51:d5:cf:a0:61:3c:c9:66:08:
         54:4e:b6:d4:b3:23:bd:ab:7f:d1:a6:8d:bf:9f:21:db:7d:49:
         fd:41:91:02:20:2c:e7:45:6d:74:b3:4d:c8:f4:e5:3f:99:2f:
         3e:64:44:9f:c5:24:83:a5:ac:58:cc:cf:91:eb:5b:16:8e:ed:
         5e:8e:94:e7:b6:78:b7:7e:8e:54:f0:81:81:aa:ad:ff:38:f8:
         f6:14:96:8f:e4:e0:4f:b6:e1:cc:9c:5b:a4:57:c0:91:46:34:
         c8:4d:6f:46:eb:1d:1c:b6:96:2e:b8:a8:b4:1f:76:22:63:c6:
         63:5e:03:e4:3d:cb:8a:fd:39:cd:96:a0:4f:a9:87:94:ea:90:
         3b:f8:ca:ad:b7:49:91:9c:66:4f:ac:0f:b4:d0:55:83:bb:0e:
         b6:d2:a1:82:83:1f:0d:27:d3:92:ab:3a:10:b5:2e:ba:df:fd:
         14:0e:94:0d:1e:03:03:dd:7b:6a:4d:a5:ae:38:ba:94:7e:09:
         ed:c6:bf:d5:77:d6:8e:a8:8d:87:b4:01:6c:b3:e3:81:c1:50:
         4e:ad:6f:29:3c:2a:48:4f:71:1f:91:1a:4d:23:e0:ba:fd:9d:
         5a:a7:b3:76:96:e5:a5:d2:e2:b7:80:80:cd:dd:f8:59:83:fa:
         e9:67:69:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VXAvk9whP4FQlUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
ZGYwNzNmYzMtNzUwMC00ZWI5LWIzZmMtNGY3NTU0NWZiYmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoCFB18YliACIBZo4ZsNLwBbPZMZxJ1XXqIa
DhQXG53/bqqzvIrXw0D/z1ionG0RJM/Jnqr4Toc8Bv3TfsZTxLyTQsAscjUduI0F
e/kUL0QwDBOXXu3FzAcT8Jfe/P2X4Fz1gnTKewrZu/H81zkyROJ9hCrVNvpfOz4f
7MeOVsurdmBup96jGuh5LENeDxYJRGCqBv261NOucigPAJ0SxpC8BmP0PIy66NhS
VRbJuDB7ExTv8auZw48PJ/fb8/4p26FS+KQ+UjGwbwBjNBXn4lB87oNK6zkTn+3w
dIjeNwPFzS77/6qzaTEi+iRNPPj7h2Y2rjw0Qw7pbIEKS3M3JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdkXM/YOZVlk2vDRhwPa+OVxlGFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjBkNjYzNDEtYjJhYS0z
YWNkLTk0YjEtODZhMGZjMzIwMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACKPV+c7BvdFFHVz6BhPMlmCFROttSzI72rf9Gmjb+fIdt9Sf1BkQIg
LOdFbXSzTcj05T+ZLz5kRJ/FJIOlrFjMz5HrWxaO7V6OlOe2eLd+jlTwgYGqrf84
+PYUlo/k4E+24cycW6RXwJFGNMhNb0brHRy2li64qLQfdiJjxmNeA+Q9y4r9Oc2W
oE+ph5TqkDv4yq23SZGcZk+sD7TQVYO7DrbSoYKDHw0n05KrOhC1Lrrf/RQOlA0e
AwPde2pNpa44upR+Ce3Gv9V31o6ojYe0AWyz44HBUE6tbyk8KkhPcR+RGk0j4Lr9
nVqns3aW5aXS4reAgM3d+FmD+ulnaZw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:36:10 2025 by rpki-client