Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa
File:                     9be08672-c872-34ca-ad3f-0de071cd5cc5.roa (raw, json)
Hash identifier:          C18s+yR0uEDh6/qAkE1dkcs6HkiiVKJlD00QHsTIdlM=
Subject key identifier:   C1:D3:F1:4F:AC:10:FB:80:E3:AF:3B:D6:61:56:2C:91:FE:40:D1:3D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834556E247376FAACEE07CA00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        130.174.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:6e:24:73:76:fa:ac:ee:07:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=3aa36165-aa2e-4b95-86d1-3dcc7c28c1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:be:74:05:d5:c6:74:1a:36:0f:c2:70:d4:
                    6a:a0:1e:39:f7:b6:39:43:09:b1:fe:e3:0a:e8:9f:
                    60:97:1b:81:81:ad:33:d8:18:f4:1b:ef:06:c7:6e:
                    80:73:03:a4:13:dc:46:c3:f8:16:d6:08:15:ea:2b:
                    2f:d0:70:fe:cc:ea:7a:a0:d7:51:94:16:d0:3f:f7:
                    61:55:d8:19:0c:61:6a:8a:a4:3a:3f:61:15:03:7d:
                    0d:7b:89:f4:77:3d:c6:06:0c:63:fb:7f:ff:0a:a4:
                    06:50:67:22:8f:e8:8c:39:72:97:f5:32:f2:90:54:
                    27:42:bd:95:d6:47:5b:69:f7:b6:5e:5f:75:72:28:
                    ec:50:7d:3f:c7:e8:fe:85:39:2b:42:7d:90:14:20:
                    07:40:a0:7e:32:0e:88:b9:c0:f2:ed:48:e8:f4:ff:
                    27:2c:28:4d:9a:45:67:54:80:f6:d4:47:f2:38:2f:
                    6a:3b:04:60:4f:0b:49:18:06:c7:c2:6d:f8:aa:53:
                    66:d0:05:af:76:c9:79:4f:e2:df:7a:d9:05:db:b3:
                    4f:6a:57:e4:c2:e5:b4:2f:02:db:d7:77:fe:a2:6a:
                    a4:15:f5:21:27:47:c5:aa:6b:9a:39:63:70:bd:5d:
                    11:11:02:96:7b:b5:33:37:d8:26:13:42:0b:8f:52:
                    19:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D3:F1:4F:AC:10:FB:80:E3:AF:3B:D6:61:56:2C:91:FE:40:D1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9be08672-c872-34ca-ad3f-0de071cd5cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:11:e5:bd:16:b5:9e:55:42:9b:a4:0b:34:3f:69:2e:3b:cc:
         7d:2f:11:bc:95:20:77:9e:46:dc:5a:ac:eb:6a:95:93:19:bd:
         4d:02:5e:5b:b5:d4:f1:e9:ff:85:0e:c9:17:cd:4a:72:ae:9b:
         42:44:a0:c4:be:6d:24:61:31:32:0e:b8:26:44:d6:31:0a:70:
         0e:92:79:00:29:ca:60:59:b1:bf:52:88:5b:ae:bd:70:90:18:
         95:3f:48:f7:43:14:43:85:25:bb:47:aa:22:ab:2a:65:59:2e:
         54:80:a3:02:5d:9a:39:f4:3d:f1:92:43:db:f2:83:48:29:96:
         47:10:0e:d6:7f:46:b7:3e:8c:15:3c:1e:38:51:6d:5f:66:27:
         a0:65:ac:47:a4:3b:ca:11:4b:08:e2:76:0c:a4:56:3d:a9:e5:
         7a:6f:2f:03:84:d3:0f:3a:28:d7:51:54:41:ef:85:b0:99:d6:
         6a:b3:18:43:56:b2:8f:ff:f0:c1:28:5c:ad:b7:6c:27:71:51:
         06:d0:fe:83:77:2e:47:09:8e:4a:b7:e9:db:d5:79:33:07:0c:
         15:a3:ba:28:10:70:ac:ef:93:07:24:5a:b5:d0:b8:d0:66:a5:
         03:1d:e5:ab:65:04:52:1a:8a:ff:9a:a3:14:76:e8:90:9c:2a:
         22:8c:fe:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VW4kc3b6rO4HygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk
M2FhMzYxNjUtYWEyZS00Yjk1LTg2ZDEtM2RjYzdjMjhjMWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWa+dAXVxnQaNg/CcNRqoB4597Y5Qwmx/uMK
6J9glxuBga0z2Bj0G+8Gx26AcwOkE9xGw/gW1ggV6isv0HD+zOp6oNdRlBbQP/dh
VdgZDGFqiqQ6P2EVA30Ne4n0dz3GBgxj+3//CqQGUGcij+iMOXKX9TLykFQnQr2V
1kdbafe2Xl91cijsUH0/x+j+hTkrQn2QFCAHQKB+Mg6IucDy7Ujo9P8nLChNmkVn
VID21EfyOC9qOwRgTwtJGAbHwm34qlNm0AWvdsl5T+LfetkF27NPalfkwuW0LwLb
13f+omqkFfUhJ0fFqmuaOWNwvV0REQKWe7UzN9gmE0ILj1IZhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHT8U+sEPuA46871mFWLJH+QNE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWJlMDg2NzItYzg3Mi0z
NGNhLWFkM2YtMGRlMDcxY2Q1Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJIR5b0WtZ5VQpukCzQ/aS47zH0vEbyVIHeeRtxarOtqlZMZvU0CXlu1
1PHp/4UOyRfNSnKum0JEoMS+bSRhMTIOuCZE1jEKcA6SeQApymBZsb9SiFuuvXCQ
GJU/SPdDFEOFJbtHqiKrKmVZLlSAowJdmjn0PfGSQ9vyg0gplkcQDtZ/Rrc+jBU8
HjhRbV9mJ6BlrEekO8oRSwjidgykVj2p5XpvLwOE0w86KNdRVEHvhbCZ1mqzGENW
so//8MEoXK23bCdxUQbQ/oN3LkcJjkq36dvVeTMHDBWjuigQcKzvkwckWrXQuNBm
pQMd5atlBFIaiv+aoxR26JCcKiKM/tI=
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:16:24 2025 by rpki-client