Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9636cdcd-7533-3b2d-991e-6d04e8e23399.roa
File:                     9636cdcd-7533-3b2d-991e-6d04e8e23399.roa (raw, json)
Hash identifier:          0U/nlzDLO9pU7Cuq2SMdToK0HsLuWG2oN/CxM7On8P8=
Subject key identifier:   00:D3:30:46:24:D0:21:89:96:71:88:5F:96:76:20:39:53:58:BB:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556D6B938D3A3F4C1ABAE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9636cdcd-7533-3b2d-991e-6d04e8e23399.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        130.174.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6d:6b:93:8d:3a:3f:4c:1a:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=4369ce88-ac4e-44c5-8df2-33ae400fa0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:21:92:2c:e0:93:67:4c:c6:82:dd:df:10:
                    46:10:de:e4:1a:4f:5d:b1:a2:1f:af:6d:6f:c0:9b:
                    4b:37:bc:13:29:2c:c0:f7:f1:92:68:a6:14:d9:d3:
                    a0:53:b7:90:ea:49:06:08:e5:27:ff:61:c0:9f:60:
                    49:56:f9:57:c7:22:c6:c0:09:f5:13:08:b7:b6:f3:
                    d5:72:17:f9:ba:c0:4c:e1:57:40:75:55:34:25:af:
                    d3:33:23:c7:90:3e:64:06:d8:8a:df:d9:e8:8b:e7:
                    fb:d2:1f:b1:ef:8d:89:7e:4c:74:9f:98:8e:92:46:
                    65:38:7d:17:54:81:36:64:14:a3:58:10:b2:e3:db:
                    d0:e6:55:c3:7d:10:ae:dc:ee:b4:18:17:73:ad:d7:
                    be:0b:e9:62:77:1e:64:14:14:8b:9e:6a:65:42:ba:
                    eb:2f:56:b7:df:7c:db:38:22:35:d7:6d:c8:a1:9a:
                    ae:17:73:71:e7:b7:d0:81:ef:6b:0c:ea:d5:d1:07:
                    37:99:b7:de:59:28:00:a1:fb:10:bb:2d:dc:bc:90:
                    a4:bf:db:2e:21:00:62:60:af:df:14:2c:bb:a8:86:
                    62:19:26:6c:b5:40:ec:d5:ae:6e:4b:4a:3a:73:aa:
                    da:a8:14:a1:cd:a6:68:5d:ba:13:06:ee:5c:43:cf:
                    53:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:30:46:24:D0:21:89:96:71:88:5F:96:76:20:39:53:58:BB:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9636cdcd-7533-3b2d-991e-6d04e8e23399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6f:07:9e:31:ce:3a:f9:5d:7d:24:bb:20:5e:c6:07:cb:76:
         c3:24:45:22:d9:7a:9d:d6:99:80:2f:ef:28:45:65:ff:22:b8:
         75:48:53:36:34:be:e1:11:46:70:cb:7a:bc:83:2e:44:61:0b:
         d5:dc:c1:3a:6e:33:83:c3:cb:7f:b7:73:c6:20:b7:8f:e6:6c:
         a9:ef:4a:63:8c:61:e1:16:eb:3e:16:5c:d5:8c:a5:3f:f6:19:
         06:6f:11:1d:c6:a0:1b:28:8d:73:4f:78:eb:ab:1f:08:fe:99:
         23:fd:0b:40:70:f3:d4:16:b5:c5:f0:3e:09:79:2c:72:64:ee:
         f8:48:8e:cc:98:40:6d:54:ae:4e:81:cb:9c:42:d1:9c:32:c0:
         74:3a:03:e6:bd:eb:66:cc:9e:b1:3f:02:b6:3b:51:37:94:f5:
         0d:12:fb:75:ab:98:47:cd:79:f1:d3:dd:40:3a:7d:8c:e1:6c:
         ab:04:ce:1b:ac:89:1c:16:44:26:40:97:89:01:14:32:2f:8d:
         2b:b7:0b:9a:f3:da:91:78:6a:62:6c:13:8a:41:51:d0:5b:30:
         ea:56:ce:c1:33:c5:85:fe:64:49:c8:fd:95:9e:55:65:a5:3a:
         8a:94:49:71:09:80:a7:0b:9a:fd:39:a2:43:2b:e6:2f:d5:ef:
         8b:8d:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:58 2025 by rpki-client