Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/74851b68-08d6-36a5-85a7-4d6edf218266.roa
File:                     74851b68-08d6-36a5-85a7-4d6edf218266.roa (raw, json)
Hash identifier:          f/6EkuN2GobVfQO4TeTVy1uy7EAyUOA7f9TzpKF5NAc=
Subject key identifier:   4D:9F:B6:F9:D6:E6:62:48:2C:99:F2:E9:A6:E6:C2:A5:92:96:8E:87
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556C841F570998162B8180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/74851b68-08d6-36a5-85a7-4d6edf218266.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.94.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6c:84:1f:57:09:98:16:2b:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=bc58711d-0e2b-478b-9100-1e9ad0461820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:58:d8:2c:34:98:7e:e7:f3:de:f9:c5:c9:
                    22:a3:ad:f7:73:d7:cd:ae:63:dc:5d:fa:ef:05:3a:
                    4e:44:03:0b:13:bb:3f:aa:35:ee:76:5a:49:d0:50:
                    57:25:5e:48:5b:d9:cb:02:09:83:7b:c6:27:b4:42:
                    43:16:43:15:8a:74:78:08:95:b6:75:35:95:18:5a:
                    06:df:79:51:fa:c6:3a:39:ec:6d:f6:5a:5c:21:e5:
                    11:ca:86:4b:99:c5:d3:71:28:93:0b:ec:c8:f2:f4:
                    de:37:d6:07:63:44:a2:f0:78:93:70:19:ed:65:8f:
                    4f:d0:a1:5c:ec:71:d2:4f:e1:a7:3f:eb:71:45:e8:
                    e6:79:6b:60:82:fe:f7:13:d1:ff:44:7c:58:87:2e:
                    da:96:28:91:28:97:72:57:74:1f:21:20:97:2e:b0:
                    d2:dd:01:bb:0c:5b:20:2a:21:09:47:8f:be:8d:9e:
                    27:77:2f:62:bf:0a:3f:74:2f:44:40:e3:29:fc:65:
                    f5:e5:bd:2d:b9:cc:6c:07:98:c0:89:bb:14:99:9f:
                    c6:5f:f8:9f:06:1c:ad:57:f1:0d:5b:ea:8b:5f:8d:
                    70:d5:20:e0:ed:05:e1:73:bd:4f:93:0e:61:56:e3:
                    aa:51:58:35:f1:5c:f8:e7:29:93:8f:29:3f:24:b7:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9F:B6:F9:D6:E6:62:48:2C:99:F2:E9:A6:E6:C2:A5:92:96:8E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/74851b68-08d6-36a5-85a7-4d6edf218266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:21:bf:f7:71:02:3b:38:c4:6c:c5:ff:b8:33:fb:dd:95:de:
         9c:90:f3:a7:2f:ba:de:ec:7c:a1:2b:9b:29:51:87:d0:22:cf:
         2d:4e:86:85:60:57:60:16:93:7a:9a:e3:88:54:71:d0:81:19:
         d8:d2:87:0e:33:fe:7f:24:b2:2d:b9:65:78:1e:b1:82:e9:19:
         45:65:22:1a:50:21:42:56:cf:e6:1c:9a:d8:63:6b:98:6b:1c:
         dc:1f:3f:96:21:fc:8b:b0:a6:d8:68:e2:12:93:c7:ae:c3:86:
         e9:62:6c:1b:0d:08:d5:ad:49:04:1d:ca:0f:3d:17:cd:00:f8:
         b5:7b:4f:9c:3a:ab:10:73:64:5d:37:68:bd:3b:dc:09:2b:65:
         9c:56:27:0f:0b:58:8f:22:5e:8f:47:c8:cb:b7:8c:6d:ba:cf:
         52:38:fa:4c:3a:2d:e9:3c:5e:d6:18:55:39:d4:6b:a9:d2:35:
         7c:06:f1:a3:e9:96:cb:a5:d2:20:b2:3d:f4:e9:96:75:af:51:
         b8:af:9e:f3:8f:17:71:49:f2:d2:e2:ab:5e:30:e0:1c:de:b1:
         60:e7:7c:06:c7:b2:b6:86:50:b5:bb:18:7e:13:3a:80:c0:b3:
         eb:2d:74:7a:26:76:27:85:81:82:15:35:98:1e:a7:8e:2b:4a:
         19:6d:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:11:46 2025 by rpki-client