Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa
File:                     a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa (raw, json)
Hash identifier:          UuxTcZ29RmINcOTXkrX9cP5MY4ZsJaPEY7Ab1N41208=
Subject key identifier:   A0:40:BB:2A:A0:55:F5:96:6A:B8:A6:B6:17:88:88:91:65:E1:70:BB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F02FCE7BADDEEB30F87040
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     202
IP address blocks:        130.174.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:2f:ce:7b:ad:de:eb:30:f8:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=27fb4f12-1144-4e62-8800-8b11a6b2d11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:c0:a1:31:b8:2c:69:44:30:fe:5e:62:81:
                    ec:51:39:f2:e8:bb:91:a4:33:0c:17:57:f9:57:7e:
                    f2:38:82:29:53:bf:3d:b6:96:aa:b9:6b:ac:e3:47:
                    6b:2b:94:a6:f3:66:59:71:3a:f8:28:a7:50:31:30:
                    bc:3d:ac:6f:ac:7a:38:b2:d9:57:ba:4a:a5:a4:ec:
                    cd:aa:72:09:3a:92:31:d5:68:95:cb:30:cd:fa:58:
                    c5:96:08:05:50:37:0a:c1:db:e2:28:86:83:ab:cb:
                    b7:3f:ed:b8:e7:3d:c9:7e:c3:e2:1b:85:3c:c1:f5:
                    de:5f:1f:be:50:24:39:33:69:d0:e5:28:2c:f9:d3:
                    3d:3a:9b:5d:45:c9:24:da:6c:0f:8b:33:e2:ec:1b:
                    8d:e4:0d:5e:58:4d:8c:4b:e2:8d:91:25:53:30:11:
                    39:7d:94:41:34:1b:4a:64:c9:93:7d:1f:ec:97:dc:
                    0d:be:19:84:75:88:46:d1:89:ba:4c:90:6e:c5:d8:
                    72:ff:09:8c:71:0d:df:ae:52:d5:22:8c:14:82:fd:
                    8a:32:8e:25:a3:de:be:0f:a5:89:c8:b9:05:b0:53:
                    19:e3:e8:a6:58:56:19:27:51:93:b8:53:e5:76:a3:
                    e6:4c:bc:dc:37:21:98:70:40:73:9e:f6:fa:3c:13:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:BB:2A:A0:55:F5:96:6A:B8:A6:B6:17:88:88:91:65:E1:70:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:e5:21:a6:27:3c:77:f0:fd:ce:d9:e3:a3:00:33:9d:42:
         13:a3:d4:c7:02:02:37:27:54:64:66:4a:1c:59:10:ef:cd:c7:
         c1:ea:a0:52:be:04:3f:00:c5:84:d1:b5:63:42:c6:53:d2:be:
         f8:d7:ac:35:2c:03:b0:86:e8:f7:ae:fa:99:56:9a:55:fb:97:
         a7:a1:15:b1:f8:82:ca:7c:83:cf:38:fb:36:e0:5e:a7:0e:ec:
         12:dc:86:6d:89:10:65:82:4e:45:8c:9d:d7:32:99:14:0e:db:
         02:64:6d:2d:c6:d1:05:4a:8f:c5:0b:65:58:8b:50:43:00:d3:
         79:e6:15:2d:39:0a:4c:5e:ed:55:d4:1e:84:61:e3:93:93:bb:
         6f:80:ee:b3:65:e5:11:ea:cf:0c:97:11:06:00:e4:dc:a8:8b:
         70:0e:9e:7b:02:ed:89:dc:e2:d1:d8:3f:e1:08:41:c6:53:30:
         7b:a3:60:17:02:0a:6c:06:92:8c:c8:00:b3:05:7e:ad:8d:ea:
         4a:8f:73:53:39:a2:01:c1:2d:78:fb:fe:96:d8:0f:e3:af:ca:
         2b:6c:4a:df:f4:52:44:04:e7:93:f6:28:1f:1e:e1:80:08:9c:
         e0:da:a8:e1:c3:0c:be:2a:55:26:40:a5:c7:21:96:d7:14:4b:
         e7:a2:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:18:52 2025 by rpki-client